Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/A2YpVjmjwZsPMklmk3Ec5xKwt3w.roa
File:                     A2YpVjmjwZsPMklmk3Ec5xKwt3w.roa (raw, json)
Hash identifier:          GLUBHIZbs5OkVMYNV5PLMLzWNX5IRxztxeaxjI1xI4A=
Subject key identifier:   03:66:29:56:39:A3:C1:9B:0F:32:49:66:93:71:1C:E7:12:B0:B7:7C
Certificate issuer:       /CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
Certificate serial:       01F7E281
Authority key identifier: 5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/A2YpVjmjwZsPMklmk3Ec5xKwt3w.roa
Signing time:             Mon 13 Jun 2022 20:20:44 +0000
ROA not before:           Mon 13 Jun 2022 20:20:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.14.164.0/24 maxlen: 24
                          45.14.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33022593 (0x1f7e281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
        Validity
            Not Before: Jun 13 20:20:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0366295639a3c19b0f32496693711ce712b0b77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:7d:bb:16:0c:fb:38:b3:36:6f:54:cc:ec:
                    47:ab:a3:1b:d6:59:c8:78:dc:0f:ea:0a:df:61:ce:
                    d8:ec:12:e8:de:e6:d4:b7:a1:58:1f:b9:d1:04:33:
                    ac:09:7c:be:41:1d:6a:ea:71:74:93:98:36:ca:d8:
                    30:bb:7c:f3:e0:02:2b:3b:9e:26:ca:0c:57:5e:de:
                    da:3b:77:9e:70:74:42:34:db:9f:51:4f:13:43:3d:
                    88:a7:f0:d5:51:23:6a:5b:94:e3:da:c0:6c:c0:7b:
                    7a:9d:ba:02:bc:20:6a:f2:8d:3b:a7:b3:b2:d5:60:
                    78:23:38:f3:7b:9e:d3:d1:fe:c7:2a:f0:c3:62:b9:
                    21:f2:e4:70:fb:fb:71:5d:8c:73:e7:bc:53:54:80:
                    ae:ef:0f:2d:09:59:5e:4b:b1:cf:11:66:e5:28:b9:
                    48:96:75:41:fd:cc:e7:c8:c7:82:bd:bf:f0:a5:43:
                    9a:90:9b:29:a7:a3:32:1e:2e:42:a7:e6:67:6a:75:
                    bd:01:6d:05:03:83:4b:c0:0a:e6:a3:94:17:ca:3c:
                    0e:ef:54:08:75:bf:5d:4a:9f:9d:a1:d2:b2:88:b9:
                    c3:f1:c0:22:fd:9f:bd:c2:71:54:54:2c:df:21:7d:
                    58:1d:11:9f:50:04:34:1e:32:a6:ca:47:02:74:7f:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:66:29:56:39:A3:C1:9B:0F:32:49:66:93:71:1C:E7:12:B0:B7:7C
            X509v3 Authority Key Identifier:
                keyid:5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/A2YpVjmjwZsPMklmk3Ec5xKwt3w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/W6Gr998eAmZGqe8Kceh2lSG8n4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.164.0/24
                  45.14.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:9f:8d:1d:59:61:66:e9:d6:51:99:b1:b9:fd:5b:7b:d6:
         ea:85:67:b8:a7:cb:91:b7:a7:2c:40:0f:a6:4a:dc:55:36:50:
         bd:50:7e:3c:1d:bd:89:58:24:11:98:b3:e0:d8:5b:87:ae:80:
         79:d1:7e:91:a6:ac:58:34:6f:e2:1b:5f:ff:c3:fd:b7:ea:15:
         23:c7:d7:19:45:17:fa:65:af:cb:93:29:09:7c:fd:81:eb:0f:
         46:a6:0a:76:7b:1e:95:d0:f1:57:cb:ef:7a:76:a0:ca:ce:26:
         a3:ee:a8:4b:bc:4b:60:c3:45:e9:5f:a8:d0:0e:08:6f:4d:45:
         12:05:4b:ba:ce:c5:70:b5:9d:ca:11:e8:78:89:81:65:be:bb:
         f9:b1:cb:6f:66:45:59:1d:94:91:c8:d4:12:28:4d:c4:e5:f8:
         fd:7d:d6:4a:b8:43:83:e7:2c:d3:fc:5f:b1:ee:4e:ed:9f:2e:
         24:1e:2d:b4:ab:7e:1f:bf:c4:53:2b:2d:54:17:77:24:a5:b6:
         2c:57:38:db:e2:6d:ef:18:96:f2:92:9a:78:da:e9:8b:dd:5c:
         8d:f2:8a:72:6e:0f:34:31:76:34:fb:f6:6b:ff:c8:70:eb:b2:
         89:a9:29:cc:98:38:10:6a:fd:26:df:74:a5:aa:54:7b:13:75:
         dc:b9:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:53 2024 by rpki-client on console-ams.rpki-client.org