Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/5zHCir15Hdcae1NDkxj2Fma2Yug.roa
File:                     5zHCir15Hdcae1NDkxj2Fma2Yug.roa (raw, json)
Hash identifier:          CiXRmWi7mNQe+3xWOab+6+JjmR587ZYN3sfHv3PJ+pg=
Subject key identifier:   E7:31:C2:8A:BD:79:1D:D7:1A:7B:53:43:93:18:F6:16:66:B6:62:E8
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0451267E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/5zHCir15Hdcae1NDkxj2Fma2Yug.roa
Signing time:             Tue 10 May 2022 07:49:56 +0000
ROA not before:           Tue 10 May 2022 07:49:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        45.132.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72427134 (0x451267e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: May 10 07:49:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e731c28abd791dd71a7b53439318f61666b662e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:44:5f:0a:a5:78:0a:82:32:28:b6:7e:c8:
                    31:64:7e:02:f0:02:9e:06:01:41:45:c2:0f:e6:50:
                    fd:05:99:ff:21:ad:37:f9:50:51:b0:0b:81:06:f2:
                    ad:e6:80:e2:43:0b:28:f4:30:44:3b:2b:1a:45:4c:
                    28:9a:2e:61:db:c7:75:a9:ec:58:55:47:9f:12:ff:
                    54:94:dc:97:e6:28:a2:d3:93:ce:62:08:b6:7c:66:
                    73:69:6a:6b:a2:f4:30:15:8a:c8:21:67:b4:54:00:
                    8f:45:70:3a:4d:91:70:e2:48:5e:a0:cb:1b:2f:3d:
                    b2:22:30:1d:f4:13:f9:85:8f:13:89:c2:b4:6c:34:
                    28:82:f7:a9:01:b1:57:e2:5c:79:6c:79:4b:5e:08:
                    2a:f1:0f:58:0a:d7:5f:ec:cc:68:ab:61:bb:f4:4c:
                    3c:8b:47:a5:23:24:5a:a4:7e:c0:fb:f5:0b:12:4f:
                    12:b3:f8:4e:77:f2:47:57:44:65:de:fb:ec:d8:0e:
                    33:4e:13:21:ed:e4:3f:d2:b1:01:99:49:b7:0b:bc:
                    fb:f2:1f:d1:39:a4:96:66:e0:6b:1e:f4:48:4e:d8:
                    65:69:eb:69:b2:ab:3d:c0:f9:9f:ed:4d:b0:8c:47:
                    d6:8e:42:37:20:4e:93:d1:59:e4:42:e4:b1:7c:3b:
                    c9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:31:C2:8A:BD:79:1D:D7:1A:7B:53:43:93:18:F6:16:66:B6:62:E8
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/5zHCir15Hdcae1NDkxj2Fma2Yug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:96:6e:ee:fd:67:19:d3:6a:18:e5:8e:99:e7:9d:2f:c9:b7:
         a3:0c:4e:e8:56:9f:27:5b:e8:1a:0a:94:db:16:51:3d:20:5d:
         96:04:42:43:cf:3e:45:11:9f:ff:c0:a0:9c:5f:ee:a6:59:53:
         1e:dc:7e:80:e8:1f:d4:e1:9b:31:d3:e7:7c:92:2e:f2:3f:e6:
         04:e7:50:9a:45:60:95:12:93:bb:3d:be:65:a2:d2:49:84:78:
         e6:0a:aa:4f:98:de:93:f5:4d:14:ac:4c:29:a0:1e:11:62:13:
         1b:ac:67:d0:fa:f6:e7:7e:14:5f:5c:3f:06:9a:56:fa:c2:50:
         81:14:ea:1e:d6:b5:63:49:ad:12:55:7b:89:8a:47:bc:e7:50:
         7e:26:da:0e:94:8f:9c:3f:62:b5:d4:cf:a3:e6:ce:91:af:c8:
         0d:79:f8:25:d3:48:6b:7a:fb:5d:33:8f:e8:78:7c:6e:0a:e4:
         61:5d:e1:e3:d9:ec:9f:8d:d9:5e:12:8d:bf:5f:4b:ce:5c:21:
         3a:10:46:ce:fa:38:b7:e6:0e:21:45:25:22:5f:c4:aa:33:fb:
         c0:7d:2c:c6:d1:dc:3d:28:43:29:74:6c:49:cc:51:ca:c3:2d:
         1b:a5:f3:39:3f:ed:0a:00:00:55:9a:40:b6:bf:c6:0c:4b:a5:
         f1:94:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org