Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/WH-2eI1dbHxRngBTZD-WihFnfSY.roa
File:                     WH-2eI1dbHxRngBTZD-WihFnfSY.roa (raw, json)
Hash identifier:          jM22Jorn+CWEOdoLAQAvguqwL/3pVu+IrUr5AasPquk=
Subject key identifier:   58:7F:B6:78:8D:5D:6C:7C:51:9E:00:53:64:3F:96:8A:11:67:7D:26
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0182C725222051456E7E257536420DD19008
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/WH-2eI1dbHxRngBTZD-WihFnfSY.roa
Signing time:             Mon 22 Aug 2022 20:01:15 +0000
ROA not before:           Mon 22 Aug 2022 20:01:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     36351
IP address blocks:        45.80.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c7:25:22:20:51:45:6e:7e:25:75:36:42:0d:d1:90:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Aug 22 20:01:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=587fb6788d5d6c7c519e0053643f968a11677d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:94:40:e5:9d:bf:a7:ec:92:3d:59:a0:24:
                    2c:7a:fa:b6:f5:e6:12:88:89:60:3a:d4:00:dd:24:
                    7c:af:2c:70:ee:87:24:0b:2b:93:93:db:5f:00:89:
                    66:85:e4:df:7e:65:56:f0:23:21:e8:4c:bc:3e:12:
                    c3:05:56:f5:4a:d3:e4:87:14:dc:ac:d3:5e:78:a0:
                    7d:ab:af:cd:57:62:dd:fd:92:36:65:52:fa:e0:43:
                    b0:b8:af:e7:f9:d8:c8:f6:25:52:db:94:35:9b:50:
                    35:47:74:e3:a7:e9:7b:72:18:52:4a:6e:04:2f:ea:
                    93:b6:96:42:22:ee:b8:a3:24:75:5f:60:2a:f3:4f:
                    6e:c8:c3:9d:c8:61:91:b3:57:39:9e:a9:04:aa:7f:
                    ea:4c:5c:57:3d:11:e2:58:e8:e7:17:1b:21:e9:f1:
                    22:40:29:fa:90:d9:49:49:04:3e:c1:f5:13:c3:5e:
                    f7:2a:23:5b:38:24:40:df:75:d5:89:a4:77:89:86:
                    97:17:b4:c2:bd:32:04:7a:79:00:2d:19:3c:c0:a5:
                    fe:56:41:ff:7d:07:e5:4d:0f:88:41:4e:81:84:f6:
                    88:39:e5:d7:89:a4:2e:7e:8c:83:10:0b:cc:48:a0:
                    29:13:a2:97:bc:de:d9:9d:e3:92:2d:60:68:43:1d:
                    88:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7F:B6:78:8D:5D:6C:7C:51:9E:00:53:64:3F:96:8A:11:67:7D:26
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/WH-2eI1dbHxRngBTZD-WihFnfSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:83:ab:73:d2:4e:04:67:9e:db:d2:46:ee:ab:dc:89:13:
         8b:90:97:48:04:99:41:dd:f4:9a:b8:76:9b:d9:75:f1:c2:2f:
         1f:7d:27:87:5a:44:df:0e:cd:c5:29:f5:58:99:f1:ea:74:25:
         e6:e4:0e:16:48:31:9d:23:f5:65:87:5f:35:f5:c7:5e:28:26:
         cc:8c:97:64:96:ae:fe:12:6f:29:db:ba:27:ae:c8:8e:94:21:
         2b:c4:a8:3c:f3:fa:75:f7:22:f2:af:e9:d1:89:b9:13:85:d5:
         76:6b:e2:c6:61:f3:39:f6:17:b5:b2:31:b0:bb:07:b2:a8:d9:
         bc:be:bb:1e:5d:c6:2b:94:71:32:99:ea:1d:16:d8:90:48:e5:
         d7:b0:b2:4e:79:37:33:5c:15:fb:50:31:f5:83:77:16:24:0b:
         26:36:5d:5f:d9:90:1e:bf:fb:b5:9f:23:86:d6:e6:22:94:95:
         09:cd:30:ff:e9:dd:c4:1a:6b:08:5c:c2:84:e7:2a:1f:e6:d6:
         02:b8:97:35:c6:4e:30:5b:bd:d6:28:d7:2e:c7:a4:0e:9e:8c:
         9a:d1:80:84:63:83:77:93:f1:d3:85:9a:16:21:14:3c:54:bc:
         cf:fa:23:63:12:12:08:85:bf:9c:c5:a3:94:7b:15:47:fe:99:
         ac:52:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org