Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/806274-feed-4ce5-a459-fa8225846d27/1/i7C-gtBL6R1wzLoQLYsrEg7RmV8.roa
File:                     i7C-gtBL6R1wzLoQLYsrEg7RmV8.roa (raw, json)
Hash identifier:          ySe+GJMCevO1QNe+o3pxixDGm1j67sze2iv5jcLFyog=
Subject key identifier:   8B:B0:BE:82:D0:4B:E9:1D:70:CC:BA:10:2D:8B:2B:12:0E:D1:99:5F
Certificate issuer:       /CN=1e9762e06ac33a49e54b38d27c6b4b52c3995165
Certificate serial:       02AB7B70
Authority key identifier: 1E:97:62:E0:6A:C3:3A:49:E5:4B:38:D2:7C:6B:4B:52:C3:99:51:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hpdi4GrDOknlSzjSfGtLUsOZUWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/806274-feed-4ce5-a459-fa8225846d27/1/i7C-gtBL6R1wzLoQLYsrEg7RmV8.roa
Signing time:             Sat 01 Jan 2022 10:05:27 +0000
ROA not before:           Sat 01 Jan 2022 10:05:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51872
IP address blocks:        45.93.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44792688 (0x2ab7b70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9762e06ac33a49e54b38d27c6b4b52c3995165
        Validity
            Not Before: Jan  1 10:05:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8bb0be82d04be91d70ccba102d8b2b120ed1995f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:88:5a:89:c8:72:18:c1:04:31:3d:11:8c:
                    dc:63:bb:fd:13:23:7f:67:51:6b:52:77:f8:98:23:
                    0d:bc:d8:65:3c:c2:4a:36:37:54:28:d2:d8:07:11:
                    a2:40:77:9c:05:ac:32:75:d3:35:e2:61:4b:05:59:
                    93:49:0e:b5:72:83:fd:0b:e6:fb:4a:40:fb:67:d1:
                    f2:d6:ce:37:78:2a:1a:f0:1d:19:9b:2c:a5:9e:d8:
                    ea:c1:1a:37:6c:e4:fd:59:69:5e:2d:98:c4:7b:ad:
                    b9:f3:bb:a8:0b:ac:49:f9:e4:9c:e4:5b:c2:11:da:
                    d5:06:08:1b:cd:3d:9f:3d:f1:3d:0d:db:90:e4:7c:
                    40:8d:a2:86:10:25:8e:8d:c6:12:54:e8:3e:89:18:
                    34:6d:b8:72:9c:c6:f4:ac:b3:c1:d0:56:3d:8f:c9:
                    d2:4b:ce:24:dc:2b:a8:c0:78:f7:8f:fa:1f:c7:e8:
                    56:43:d7:e3:86:24:7e:41:93:8f:af:04:41:a2:a7:
                    e1:26:c8:30:27:30:69:8e:cc:3c:15:03:e5:16:de:
                    d9:26:62:c9:87:de:bc:08:66:b4:2f:5d:ff:b8:ec:
                    23:f4:ec:7c:5a:28:1b:72:cd:ca:98:7d:4a:c8:89:
                    41:ab:b1:25:9d:97:d4:f7:9b:bd:03:8b:58:b9:8c:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B0:BE:82:D0:4B:E9:1D:70:CC:BA:10:2D:8B:2B:12:0E:D1:99:5F
            X509v3 Authority Key Identifier:
                keyid:1E:97:62:E0:6A:C3:3A:49:E5:4B:38:D2:7C:6B:4B:52:C3:99:51:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpdi4GrDOknlSzjSfGtLUsOZUWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/806274-feed-4ce5-a459-fa8225846d27/1/i7C-gtBL6R1wzLoQLYsrEg7RmV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/806274-feed-4ce5-a459-fa8225846d27/1/Hpdi4GrDOknlSzjSfGtLUsOZUWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:82:fb:1c:95:24:16:2d:25:96:6f:5a:a1:f2:cb:4d:22:
         0f:75:4f:de:b0:58:6e:1c:f7:fc:e2:8e:22:90:c0:56:77:60:
         39:40:1a:df:4e:3a:6e:99:52:7f:f1:15:3f:f0:19:ec:2d:d9:
         6e:3b:fe:6f:4d:81:62:a5:3b:b1:aa:de:50:4e:06:ce:35:f5:
         02:16:2a:df:de:e8:cf:fb:52:be:4a:42:47:e2:65:0d:4f:29:
         74:81:c3:73:67:f5:00:8d:9c:00:25:70:a3:c4:86:44:0b:d0:
         8d:71:be:e8:87:ce:8b:5e:a3:73:a3:60:ed:39:82:b7:04:20:
         03:1d:17:19:ec:45:86:1b:1e:c6:79:b3:1f:35:10:ae:ac:4c:
         dd:83:37:66:3e:2c:51:c6:0c:7e:b2:b3:90:1e:a0:31:2e:f8:
         25:b2:dd:d7:af:b0:4a:1e:99:b1:85:6b:db:62:4e:43:25:ab:
         bf:ff:98:18:05:26:a3:b1:87:9d:0d:e7:e6:29:b8:18:ff:e4:
         79:d5:b1:e8:37:3a:d5:28:e8:31:eb:e8:b5:34:86:e6:f8:04:
         63:7f:e1:b8:6d:45:56:14:53:78:03:33:92:0e:e1:90:63:29:
         ea:37:73:f9:8a:2e:86:a3:7a:cf:f2:3b:88:ad:9f:52:21:6e:
         b2:9c:0f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org