Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/1yzQo-98ElTVZyRuwVFpM7zP_fA.roa
File:                     1yzQo-98ElTVZyRuwVFpM7zP_fA.roa (raw, json)
Hash identifier:          kHU8Ap05F81bZHZ5568WN7/4WDvHLnLq8KrWO+WN0bY=
Subject key identifier:   D7:2C:D0:A3:EF:7C:12:54:D5:67:24:6E:C1:51:69:33:BC:CF:FD:F0
Certificate issuer:       /CN=0929ba203ac63fa2971e41070f7842c3761529c4
Certificate serial:       06080F82
Authority key identifier: 09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/1yzQo-98ElTVZyRuwVFpM7zP_fA.roa
Signing time:             Thu 16 Jun 2022 17:21:44 +0000
ROA not before:           Thu 16 Jun 2022 17:21:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        45.154.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101191554 (0x6080f82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0929ba203ac63fa2971e41070f7842c3761529c4
        Validity
            Not Before: Jun 16 17:21:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d72cd0a3ef7c1254d567246ec1516933bccffdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:d7:62:3d:38:4c:78:6c:6a:9b:fb:6c:90:
                    4e:ad:19:bb:a4:fa:58:95:4f:c3:61:dd:58:ce:ba:
                    3d:2d:9c:7c:32:ed:ca:21:29:bd:4c:1c:95:a4:ce:
                    0b:18:21:47:1b:90:97:c9:ba:e8:e6:5a:c1:08:85:
                    83:90:5a:f9:4e:80:41:52:c1:ce:b5:e7:91:ed:56:
                    43:90:52:30:d8:de:b7:19:31:ce:56:24:76:a4:d7:
                    88:5d:8b:41:98:84:e4:6d:2b:ad:ec:a8:c8:d1:cf:
                    9f:c5:67:3f:ad:fc:cf:c2:f0:39:a9:7b:2e:42:75:
                    7e:ce:dc:6b:bc:1e:6c:d8:76:b6:9f:75:17:c2:68:
                    7a:5c:0b:ac:27:a0:9a:50:d9:50:2f:a5:a1:a6:7a:
                    30:f0:39:a3:5b:bc:d6:60:26:db:bb:15:84:d5:2b:
                    bf:50:54:4e:ac:ff:7b:b8:a9:1e:f3:0f:27:98:97:
                    b8:fb:9d:2a:f8:49:67:db:4c:ef:cd:75:75:37:c5:
                    f2:2a:73:b5:1f:1a:01:8b:b9:11:ba:49:66:55:9b:
                    f2:a9:e9:2a:b5:70:ce:6c:a8:63:d0:9f:d6:0f:ca:
                    e7:6f:6f:15:d2:bd:71:a4:bc:14:be:9c:58:8f:9d:
                    ec:70:43:86:46:26:60:21:f3:57:37:1b:b1:79:21:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:D0:A3:EF:7C:12:54:D5:67:24:6E:C1:51:69:33:BC:CF:FD:F0
            X509v3 Authority Key Identifier:
                keyid:09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/1yzQo-98ElTVZyRuwVFpM7zP_fA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:f6:ac:3e:ac:d3:f0:81:5d:36:c3:f8:c9:2e:12:d3:0f:
         71:b0:34:54:9d:9b:7e:d8:92:b4:86:24:a1:7e:31:60:a7:9a:
         0a:45:e6:30:99:5e:5b:ce:e0:97:86:2b:24:0f:15:4e:cc:38:
         ea:77:82:b6:31:52:2a:cd:5f:27:00:3b:f2:2a:5d:e4:a8:ec:
         7c:22:5b:63:16:52:c0:19:a7:29:ba:69:95:1e:21:f7:e3:11:
         8e:b4:cd:62:a3:ec:54:3f:01:a7:71:f7:58:31:c7:a7:d6:6d:
         86:83:b8:c3:e8:15:4f:fe:32:b7:00:ca:63:12:80:c3:9e:05:
         db:0e:97:9b:89:dc:94:93:7c:a9:9b:42:e6:fa:5d:db:45:d2:
         97:7f:6b:91:88:71:78:56:11:db:40:48:d7:1c:ca:2b:63:35:
         70:a0:b4:02:6d:e2:ee:e1:1e:84:b2:5d:1c:48:ba:e6:fd:23:
         a7:35:15:4f:07:13:29:fe:29:cc:57:20:35:d2:6b:e2:17:08:
         8f:0c:3c:e8:1c:00:56:1a:43:8a:6a:4e:28:b5:61:b8:ca:8a:
         a5:2c:ad:0a:12:e9:f3:63:f3:c5:80:5d:df:b9:f0:cd:59:de:
         33:91:85:d6:15:54:95:a4:4f:50:24:61:4e:dd:26:cb:77:13:
         4f:48:12:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:10 2024 by rpki-client on console-ams.rpki-client.org