Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/sjrttFCtfoWSUYmMDVvWThK-rHs.roa
File:                     sjrttFCtfoWSUYmMDVvWThK-rHs.roa (raw, json)
Hash identifier:          lGScU/FE5AokTLJs2r8FJcD3s7UM0kBSa3+r8eOVQTk=
Subject key identifier:   B2:3A:ED:B4:50:AD:7E:85:92:51:89:8C:0D:5B:D6:4E:12:BE:AC:7B
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       04B33F3A
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/sjrttFCtfoWSUYmMDVvWThK-rHs.roa
Signing time:             Tue 14 Jun 2022 13:06:45 +0000
ROA not before:           Tue 14 Jun 2022 13:06:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        45.146.107.0/24 maxlen: 24
                          45.132.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78855994 (0x4b33f3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jun 14 13:06:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b23aedb450ad7e859251898c0d5bd64e12beac7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:d0:d5:59:3b:bf:69:93:0f:2e:8f:ff:1e:
                    38:3b:a3:17:1f:c9:20:bd:a1:e5:21:22:91:2e:81:
                    ae:44:35:19:b8:48:96:b4:bb:ca:42:61:82:96:a2:
                    ff:d1:49:91:7b:ef:6c:6c:77:d9:23:fe:ef:e8:a1:
                    45:e4:f5:ce:38:56:88:e2:2f:33:1e:e9:ce:52:47:
                    57:43:8a:58:ee:b7:38:41:96:8f:98:aa:46:f3:ef:
                    cb:2d:fe:fa:de:78:cf:e2:fd:f7:1b:45:5c:80:4f:
                    3a:e2:32:0e:7c:84:41:3d:a9:87:dd:2b:af:8e:13:
                    f8:89:c5:3c:fd:65:00:e0:a8:d6:8f:78:de:84:7a:
                    59:5e:93:80:9f:90:b3:86:92:26:d7:1c:78:58:eb:
                    db:6d:b5:15:19:51:60:45:dd:75:47:e8:1c:14:61:
                    e6:d6:77:19:4b:2a:ac:b1:f2:b7:ee:c0:ee:40:55:
                    5c:5b:2f:5b:50:2e:6a:e7:46:bc:de:b1:26:87:15:
                    98:77:aa:a8:ce:89:6e:99:13:d6:d1:2f:f1:32:b5:
                    71:8e:81:5e:06:7f:2c:7d:51:b4:d8:1a:b6:55:2c:
                    db:f5:d0:9f:fb:5a:89:76:5d:64:d8:32:96:16:4b:
                    cb:d9:ce:95:51:7a:3d:45:61:be:c9:09:34:5e:0c:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3A:ED:B4:50:AD:7E:85:92:51:89:8C:0D:5B:D6:4E:12:BE:AC:7B
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/sjrttFCtfoWSUYmMDVvWThK-rHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.96.0/22
                  45.146.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b1:1d:b0:c7:71:6a:32:f7:61:65:3b:2a:43:ae:41:24:0a:
         9a:7a:22:46:12:3d:a5:40:81:2d:95:ed:2b:d3:f4:fa:7f:e7:
         6a:40:4f:61:7e:c7:78:c6:05:b3:c1:6e:44:01:14:a7:8b:6e:
         80:74:85:a9:b5:e8:31:17:1c:58:10:15:4a:1c:ea:ea:0d:bc:
         bf:a5:48:7b:3d:0c:95:b2:c5:bd:18:b1:5e:87:eb:a0:e3:9b:
         2f:04:af:66:75:fa:a1:92:61:14:5b:09:90:9a:37:25:5a:55:
         cb:a2:9f:d0:8d:51:17:e9:61:b7:cd:f7:75:19:86:32:b8:95:
         24:c5:02:cc:71:3a:77:8c:3d:09:7f:c8:62:1f:bb:05:f3:d0:
         f7:07:3f:a1:12:95:5c:5e:f6:b1:ca:d5:83:e2:87:1e:9e:c4:
         f2:9c:e0:d7:29:75:cb:9e:30:8a:cf:fe:17:ef:2b:35:4f:94:
         5b:c3:2d:31:2f:37:ef:31:1f:cb:71:84:c3:27:3b:bf:7e:d5:
         f5:ad:ff:08:dd:39:4c:d7:24:03:63:02:86:59:59:c1:24:06:
         2f:1a:18:77:d6:e2:7a:cf:c7:ef:bf:ad:d1:01:3d:49:70:69:
         6f:60:90:94:d9:b1:63:d0:3f:9e:03:42:2f:48:32:f2:8e:f2:
         c0:c5:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org