Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/p-JF-sDk2GnzrNzyJkRbJoIJrGM.roa
File:                     p-JF-sDk2GnzrNzyJkRbJoIJrGM.roa (raw, json)
Hash identifier:          qpbv0/azQdbsFS4yNzxA+juog6LODBbyEahssDNVhUM=
Subject key identifier:   A7:E2:45:FA:C0:E4:D8:69:F3:AC:DC:F2:26:44:5B:26:82:09:AC:63
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       04E6A708
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/p-JF-sDk2GnzrNzyJkRbJoIJrGM.roa
Signing time:             Thu 30 Jun 2022 19:07:04 +0000
ROA not before:           Thu 30 Jun 2022 19:07:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42303
IP address blocks:        45.132.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82224904 (0x4e6a708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jun 30 19:07:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7e245fac0e4d869f3acdcf226445b268209ac63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:cf:33:82:a1:a9:1c:ab:44:00:40:93:d7:
                    8a:d8:ac:cb:26:ac:6e:95:01:0e:9b:ea:9e:51:96:
                    34:71:93:6e:a1:e0:2c:f0:14:cc:ca:d3:e4:df:63:
                    fd:a1:75:e8:78:d2:3c:d0:2d:3a:86:a9:8b:62:49:
                    b3:b9:94:1d:f6:67:67:fd:3a:35:71:80:bc:42:84:
                    d1:9e:82:2f:0b:01:ff:23:35:f2:db:36:bc:4c:45:
                    5b:f8:14:1b:ff:43:1a:da:3f:d1:87:74:21:29:01:
                    b0:df:cc:7f:29:f4:f2:ff:d7:e4:cc:cd:3a:25:1a:
                    21:d4:82:d0:b7:34:1b:e4:44:5c:25:a0:93:70:4e:
                    d1:2a:18:5c:f7:7f:f5:c1:38:82:7e:18:aa:e1:98:
                    55:74:09:94:a9:e2:97:f8:a7:af:22:6c:22:0d:c8:
                    ab:d3:65:15:3d:4a:28:56:b5:22:0e:a2:3a:fc:19:
                    80:85:70:83:de:f6:bb:55:86:69:2a:e9:34:91:2d:
                    cb:1f:d2:c6:7d:81:82:62:0d:23:7f:77:18:e9:ae:
                    15:f3:c7:80:00:dd:5e:a7:2a:eb:e5:c1:29:07:d3:
                    fd:05:93:14:61:33:46:ce:f1:a2:72:b1:9a:6c:34:
                    2d:c0:43:03:d4:b9:b8:19:b4:5c:a9:35:5c:c0:f3:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:45:FA:C0:E4:D8:69:F3:AC:DC:F2:26:44:5B:26:82:09:AC:63
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/p-JF-sDk2GnzrNzyJkRbJoIJrGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:3e:d3:e9:74:c1:8a:c9:54:72:5f:4c:93:96:21:f1:2b:
         6d:1e:4d:89:f9:a2:ab:79:f2:14:c5:e6:ab:b8:d6:22:66:a1:
         78:df:f7:3c:55:59:53:b1:23:01:85:96:65:96:77:54:62:c8:
         bd:e8:b1:11:f9:3e:d3:19:47:57:0f:5e:c5:64:10:6a:d2:4c:
         a3:fd:83:6d:b5:c0:d6:f2:db:54:63:70:44:be:3a:ff:f9:67:
         67:00:41:bb:59:9f:4b:cd:53:97:e7:31:53:6a:7f:e4:7a:33:
         1a:96:8b:dd:f4:00:e9:20:ca:7a:91:7e:7a:35:a0:61:85:55:
         a5:73:b5:59:fe:ee:8c:8e:d0:1c:f1:67:b3:0c:8d:26:85:b6:
         e7:d7:2e:50:c1:f2:26:ad:18:c8:3d:d4:fe:8d:e1:5e:43:9e:
         9f:85:ff:e0:a2:52:fd:e3:72:4e:0b:2a:83:c5:7d:b9:12:36:
         00:61:dd:46:bd:a0:92:de:63:df:e8:38:41:dc:e9:05:45:b4:
         c8:d3:25:2c:9b:2f:fa:8a:af:5b:eb:6c:2e:86:06:aa:95:90:
         06:7a:37:b6:03:de:f9:26:2d:dd:b8:11:c2:f8:33:58:6b:b2:
         53:6b:3a:31:13:92:10:f2:24:be:c1:cb:af:d2:8f:d4:a9:e1:
         67:14:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org