Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/dkMIyk89Fc4VcQUAmTe_sicCP4Y.roa
File:                     dkMIyk89Fc4VcQUAmTe_sicCP4Y.roa (raw, json)
Hash identifier:          x+qDKo7sipjH/byXpwzw2xoTQmB6voDzo+Hl/8U3n2c=
Subject key identifier:   76:43:08:CA:4F:3D:15:CE:15:71:05:00:99:37:BF:B2:27:02:3F:86
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       0145FC7E
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/dkMIyk89Fc4VcQUAmTe_sicCP4Y.roa
Signing time:             Sat 02 Jul 2022 04:01:25 +0000
ROA not before:           Sat 02 Jul 2022 04:01:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399641
IP address blocks:        45.155.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21363838 (0x145fc7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Jul  2 04:01:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=764308ca4f3d15ce157105009937bfb227023f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:64:01:79:4c:98:21:15:2e:2a:c8:4d:80:cf:
                    25:0d:41:9a:42:55:75:a1:a2:37:39:30:0a:7b:f2:
                    16:4d:d3:ef:35:55:fd:0e:dd:36:75:ad:fb:b8:c2:
                    4b:88:0f:49:28:37:26:0d:58:15:8d:a3:b5:6c:db:
                    a3:78:d7:f3:c3:e7:e5:f3:3f:42:a7:20:bd:85:86:
                    b6:cb:de:0a:41:c4:70:ff:90:0f:c5:c7:f1:6f:4b:
                    56:dd:b7:1d:84:e7:d4:d5:47:81:46:6a:9f:ab:7d:
                    37:e1:37:2c:b7:a7:ea:70:cc:72:08:1e:ed:4d:5b:
                    d0:d7:39:c3:60:16:7d:d4:e1:2c:0f:4c:ce:c4:00:
                    61:d5:07:29:34:44:5c:6a:47:a4:cf:a1:f4:d1:51:
                    8f:c6:db:c3:ff:94:e8:9e:ea:58:5f:66:86:53:1f:
                    d4:40:b1:0a:41:e8:e9:79:7c:91:1a:52:3c:8f:b6:
                    d9:7f:09:33:2d:93:f9:41:b9:ef:cf:c5:53:42:e1:
                    ac:79:44:e1:f4:53:1e:2d:a7:93:f3:67:57:0f:82:
                    36:50:31:fe:11:26:3e:30:b3:50:c6:d6:4b:8f:41:
                    a8:05:af:b8:0c:58:94:00:bc:3f:a2:d7:2e:6b:88:
                    25:c5:f1:5f:77:6f:1d:25:e3:c7:c4:1f:c1:08:2b:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:43:08:CA:4F:3D:15:CE:15:71:05:00:99:37:BF:B2:27:02:3F:86
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/dkMIyk89Fc4VcQUAmTe_sicCP4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:2f:18:78:84:be:ed:d5:ed:01:ad:c3:c1:7b:cf:83:de:f0:
         bf:9b:ea:b0:ee:41:3b:7d:e7:34:30:1f:94:85:3d:8b:c4:85:
         b7:28:ff:3d:d5:17:b7:4e:39:59:ba:3e:0e:7c:9f:b3:a4:b7:
         79:6f:ae:ec:17:de:45:c2:f0:42:27:f8:c7:11:78:11:91:cd:
         b1:2c:71:79:fd:eb:07:ea:13:bc:7d:12:8a:2a:39:a4:70:bd:
         7c:4b:2f:d9:92:bb:16:b6:93:d4:e6:20:67:69:0e:4b:0d:e0:
         50:5a:f9:e9:16:01:59:0e:0f:87:c3:29:2b:dc:19:01:e1:51:
         c0:f4:fc:bb:cf:86:7f:25:db:41:91:5b:88:9b:de:e9:d7:5b:
         73:7c:29:8f:63:9a:bf:c7:2c:9e:c4:bb:a5:cb:31:f6:7f:32:
         67:5e:6f:19:ca:18:69:fe:f5:3d:90:51:32:95:94:c4:9d:d9:
         18:9f:14:e5:1a:3d:da:e4:2f:95:c8:c1:3f:e0:4a:cb:58:21:
         d8:97:99:ba:bb:26:ad:df:88:72:b0:6b:a2:87:09:38:36:55:
         aa:a3:84:d0:65:60:11:a1:27:f8:cf:51:df:bb:f4:8b:51:18:
         83:c8:70:e7:2f:5d:8c:51:ca:96:3e:8f:74:44:31:2b:a6:e6:
         42:66:68:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:48 2024 by rpki-client on console-ams.rpki-client.org