Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f61570-8124-4d42-9249-3bdda8745d9b/1/zw2oLi0qCCMC91wS_I_lsDiHs5E.roa
File:                     zw2oLi0qCCMC91wS_I_lsDiHs5E.roa (raw, json)
Hash identifier:          7DxO/lKuCoSu5/DWIZRqNRNMtgpAj/gF5iwGoteVY04=
Subject key identifier:   CF:0D:A8:2E:2D:2A:08:23:02:F7:5C:12:FC:8F:E5:B0:38:87:B3:91
Certificate issuer:       /CN=50398d38cb4496bc4a1dbb5e086d48a7c633969f
Certificate serial:       0732B2C2
Authority key identifier: 50:39:8D:38:CB:44:96:BC:4A:1D:BB:5E:08:6D:48:A7:C6:33:96:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UDmNOMtElrxKHbteCG1Ip8Yzlp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/f61570-8124-4d42-9249-3bdda8745d9b/1/zw2oLi0qCCMC91wS_I_lsDiHs5E.roa
Signing time:             Sat 01 Jan 2022 00:51:46 +0000
ROA not before:           Sat 01 Jan 2022 00:51:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200780
IP address blocks:        45.155.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120763074 (0x732b2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50398d38cb4496bc4a1dbb5e086d48a7c633969f
        Validity
            Not Before: Jan  1 00:51:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf0da82e2d2a082302f75c12fc8fe5b03887b391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:4a:62:7c:3d:da:40:11:f5:39:66:11:1c:
                    08:08:e8:52:f5:ec:bf:34:5b:08:4d:f5:e2:3c:04:
                    8f:e5:cc:ee:c6:e2:21:c0:cb:0e:f4:ef:b9:5b:01:
                    71:7b:f6:2b:44:45:35:6d:80:71:a8:74:73:08:f9:
                    f2:3d:09:ca:57:9e:db:94:87:15:a4:91:e1:da:b3:
                    4e:35:42:02:5b:91:b8:27:5a:06:81:29:f4:b3:3e:
                    32:9a:94:84:06:f9:a3:93:8a:fa:b0:c6:31:63:69:
                    3e:5c:45:d4:a8:a0:45:12:16:13:c6:ee:97:09:e5:
                    82:f5:20:90:4e:6e:e2:81:d0:88:3f:5a:0f:66:7c:
                    f1:59:a7:9c:7a:56:3d:d9:e2:b4:13:88:9a:5b:cf:
                    bc:c0:22:bb:80:2f:46:2e:aa:1b:37:b1:91:e9:3a:
                    dc:50:6b:81:39:f8:a2:44:76:12:86:89:d9:3b:54:
                    0a:c1:d5:e9:f5:96:6b:e8:40:e3:48:0c:e8:39:87:
                    e7:3a:7a:11:41:4e:f3:a7:79:94:72:57:77:87:bc:
                    08:17:ab:81:d4:5c:dd:60:64:e7:52:5a:9b:c0:50:
                    79:c0:9f:10:d3:b5:ac:ed:77:65:6c:4e:71:38:52:
                    88:42:aa:76:36:a9:05:94:41:77:1f:a7:9b:90:c7:
                    08:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0D:A8:2E:2D:2A:08:23:02:F7:5C:12:FC:8F:E5:B0:38:87:B3:91
            X509v3 Authority Key Identifier:
                keyid:50:39:8D:38:CB:44:96:BC:4A:1D:BB:5E:08:6D:48:A7:C6:33:96:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmNOMtElrxKHbteCG1Ip8Yzlp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f61570-8124-4d42-9249-3bdda8745d9b/1/zw2oLi0qCCMC91wS_I_lsDiHs5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f61570-8124-4d42-9249-3bdda8745d9b/1/UDmNOMtElrxKHbteCG1Ip8Yzlp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         eb:d8:a4:2a:0a:6c:c9:7b:d2:a8:ee:40:5a:f3:84:a0:a2:b6:
         7e:79:23:62:06:e7:54:4e:01:cf:95:52:72:31:34:b2:b8:03:
         83:41:05:99:51:d1:68:2f:3a:98:b5:d8:5c:7a:37:ec:96:02:
         f7:63:3d:0a:03:1d:a0:76:5b:05:00:e8:e1:88:c6:68:d7:9f:
         fd:00:93:a2:5b:b3:43:e0:b5:3a:d5:fb:79:35:97:6a:09:34:
         38:a2:88:2a:14:e5:73:1a:c4:9b:8e:a3:7f:1a:4b:a1:8c:f6:
         4e:ba:99:a5:46:ff:78:12:36:f6:3e:fc:dc:44:ba:4a:77:fc:
         3f:b1:c2:fa:41:8b:8e:39:d1:e9:2f:db:a5:47:f2:64:40:fc:
         f0:d8:86:e9:c8:3c:0a:46:64:b5:d1:5a:ae:79:00:7c:b2:b8:
         7b:ec:b3:0d:94:11:b3:02:88:11:59:65:ab:1a:f0:66:d1:1b:
         df:dc:f4:39:4a:38:7a:c1:54:71:2f:7e:81:c0:8d:06:27:d9:
         cd:49:39:ca:b1:8e:8c:ef:5d:0b:e2:a4:12:f8:29:16:31:65:
         1e:29:8a:72:fd:b1:d2:cb:98:e8:bc:10:ce:df:93:35:cf:d8:
         d6:c8:84:87:66:33:61:49:3c:81:c7:b8:88:2b:b0:9e:90:52:
         08:4e:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:23 2024 by rpki-client on console-fra.rpki-client.org