Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/9N6Bq3Bx2gtvby1ujwqsS8ztzD8.roa
File:                     9N6Bq3Bx2gtvby1ujwqsS8ztzD8.roa (raw, json)
Hash identifier:          5khAjQCdDhxr6scrG5rnOY0qOEp47f7R1WHIElOx+4o=
Subject key identifier:   F4:DE:81:AB:70:71:DA:0B:6F:6F:2D:6E:8F:0A:AC:4B:CC:ED:CC:3F
Certificate issuer:       /CN=47c7d77c498b2831ccdce7e93e9a8d22e4f5552b
Certificate serial:       B574D3
Authority key identifier: 47:C7:D7:7C:49:8B:28:31:CC:DC:E7:E9:3E:9A:8D:22:E4:F5:55:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8fXfEmLKDHM3OfpPpqNIuT1VSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/9N6Bq3Bx2gtvby1ujwqsS8ztzD8.roa
Signing time:             Sat 01 Jan 2022 07:03:20 +0000
ROA not before:           Sat 01 Jan 2022 07:03:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        45.150.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11891923 (0xb574d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c7d77c498b2831ccdce7e93e9a8d22e4f5552b
        Validity
            Not Before: Jan  1 07:03:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4de81ab7071da0b6f6f2d6e8f0aac4bccedcc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:c8:d0:72:82:d7:6f:3f:d6:9f:b0:f5:a2:
                    7a:be:8f:46:fa:69:73:0c:8d:cc:31:c1:14:38:00:
                    be:db:ee:9b:80:93:9f:be:5e:0b:47:d6:e0:4c:37:
                    2a:5b:5a:65:86:9c:06:4c:5e:50:eb:d0:43:75:eb:
                    6d:fd:78:f1:46:2e:31:2c:4c:09:f8:95:a2:b1:9d:
                    0a:5a:51:05:46:a2:ae:13:ac:bc:e6:b9:47:6d:e7:
                    05:eb:32:ba:a0:f4:50:05:c0:2d:ff:0e:13:44:be:
                    2c:60:32:b2:47:e5:d6:4a:59:29:b6:cc:fe:53:d4:
                    1a:f3:00:09:43:d3:b7:be:6b:69:66:be:d3:5a:b7:
                    9b:0d:cd:75:45:17:d5:99:50:79:3f:0d:34:48:e8:
                    b3:05:5e:b5:4e:15:e7:22:7a:5e:db:ae:81:bb:7d:
                    5a:ac:04:13:31:dc:a6:f6:7f:c7:ff:af:96:d0:f9:
                    9f:fc:ee:e4:a7:12:34:1d:27:33:a9:f3:65:f5:bc:
                    65:20:53:28:cf:42:75:90:76:58:63:37:ba:53:0a:
                    c4:4d:af:60:11:be:b4:fb:b5:06:d8:df:f8:01:28:
                    d5:e9:57:8d:55:98:e4:2a:5a:c5:e2:a5:cf:a6:31:
                    ed:57:f1:a7:0f:59:fb:f3:be:55:1e:0e:da:e5:76:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DE:81:AB:70:71:DA:0B:6F:6F:2D:6E:8F:0A:AC:4B:CC:ED:CC:3F
            X509v3 Authority Key Identifier:
                keyid:47:C7:D7:7C:49:8B:28:31:CC:DC:E7:E9:3E:9A:8D:22:E4:F5:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8fXfEmLKDHM3OfpPpqNIuT1VSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/9N6Bq3Bx2gtvby1ujwqsS8ztzD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/R8fXfEmLKDHM3OfpPpqNIuT1VSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:c4:3c:2f:66:46:c5:67:8a:4e:ab:21:28:ad:cb:c1:e1:2b:
         98:d2:db:4c:53:0f:f0:5e:28:ab:6c:79:fa:bc:9f:af:58:87:
         b7:b4:2e:4c:b0:c2:af:aa:2f:ea:53:60:98:e8:d9:cb:e4:68:
         a6:86:d5:a4:5a:7d:bc:6b:4d:06:cb:d6:01:b6:65:d6:36:0f:
         31:ec:be:e3:e7:2a:1a:2e:f3:3f:c3:81:63:05:b7:fa:2f:24:
         c5:e4:82:c9:62:1d:97:44:f8:15:e0:99:89:cb:a4:f4:55:8a:
         2f:c0:7a:80:95:ae:22:4d:04:c9:61:a1:a7:0a:2c:0d:02:74:
         52:e5:21:f4:77:5b:aa:1c:ab:72:70:84:92:d4:72:0c:a5:02:
         8c:8a:d5:e6:b6:43:dc:d6:36:31:36:cb:73:68:ed:30:93:1a:
         b9:50:c2:54:7a:10:60:87:b2:fc:be:6c:59:ec:d7:b9:5e:9c:
         93:4e:c4:01:f6:4f:69:a3:89:d4:6e:2e:2b:c6:57:f8:b0:54:
         da:bd:70:15:c5:0d:09:20:2a:4e:68:bf:58:db:84:80:31:69:
         43:1e:f4:55:c7:64:70:4f:52:40:d9:84:e9:25:97:15:77:41:
         ca:de:cd:29:fa:06:26:0e:2b:f9:2f:35:6a:77:45:71:20:4d:
         47:f0:13:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org