Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/4US1cVq9kKgHehnyk0kSokQRsH4.roa
File:                     4US1cVq9kKgHehnyk0kSokQRsH4.roa (raw, json)
Hash identifier:          QIldjMPJjai0WE9IrWTOgVOnf0CtirFEPaoXZGEARq8=
Subject key identifier:   E1:44:B5:71:5A:BD:90:A8:07:7A:19:F2:93:49:12:A2:44:11:B0:7E
Certificate issuer:       /CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
Certificate serial:       078533E7
Authority key identifier: B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/4US1cVq9kKgHehnyk0kSokQRsH4.roa
Signing time:             Sat 01 Jan 2022 14:01:08 +0000
ROA not before:           Sat 01 Jan 2022 14:01:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        45.150.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126170087 (0x78533e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
        Validity
            Not Before: Jan  1 14:01:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e144b5715abd90a8077a19f2934912a24411b07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:b0:5c:b8:77:9a:2f:44:3c:b1:9b:13:ee:
                    d2:1c:c4:35:29:5c:9c:25:e1:2c:eb:60:24:b0:f0:
                    ea:fa:c1:ff:d4:7e:b4:50:9a:25:4e:8e:26:d8:3e:
                    1f:21:24:d1:3f:a0:14:cd:1a:fe:62:64:0e:0b:4a:
                    d3:9c:d0:66:aa:37:64:49:c6:2a:57:e3:97:e6:c4:
                    03:2d:96:50:90:5e:d8:29:87:7a:13:2c:6e:8b:f0:
                    80:37:54:da:7c:3e:92:3c:35:20:6e:95:88:1c:4f:
                    21:ef:7e:c6:8f:97:ce:b8:1f:e5:cb:98:09:ad:96:
                    b9:a8:f6:62:02:1a:4e:c2:6d:eb:ed:2b:4a:58:c7:
                    63:a6:88:ad:fa:8d:5f:bf:c0:67:ec:1d:df:bb:65:
                    6f:3c:d3:f8:1c:ae:7d:c3:b8:21:d8:ad:5f:16:9f:
                    c7:11:ce:d1:98:9e:c3:51:79:91:f1:78:34:dd:30:
                    9b:6f:41:da:c1:ec:23:7b:d3:17:c8:35:3d:75:aa:
                    35:84:65:67:65:ab:8c:3c:1c:32:32:d3:96:3c:a9:
                    ad:15:c2:1d:fe:b3:36:51:6c:80:c9:b9:67:cd:9f:
                    2d:e7:e6:f4:bb:45:04:20:79:15:a8:b2:a4:d1:d6:
                    e1:bb:42:7d:76:02:27:43:04:da:df:c1:b0:1b:b4:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:44:B5:71:5A:BD:90:A8:07:7A:19:F2:93:49:12:A2:44:11:B0:7E
            X509v3 Authority Key Identifier:
                keyid:B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/4US1cVq9kKgHehnyk0kSokQRsH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:ac:04:80:a0:ef:23:16:d1:a2:e1:61:71:b4:bc:64:eb:
         08:e4:f4:97:3f:d6:c5:19:43:30:a7:7c:4f:0d:81:c6:40:82:
         7b:c9:83:98:50:a8:28:b0:a3:23:9f:57:bf:0c:d2:4d:54:fc:
         9b:6a:fc:8a:ba:0f:68:69:d8:5f:b3:0b:a2:c1:16:14:6f:1f:
         88:3b:61:bd:b0:7d:fd:7b:9c:48:a3:c2:24:dc:ef:1c:a9:22:
         4c:ce:a8:45:3b:47:00:c0:cc:a6:6d:f0:03:ee:47:fa:47:27:
         db:0d:5e:b5:da:20:8f:8b:60:10:ab:17:af:e8:a8:f3:3b:fe:
         52:bf:3c:ca:c1:b8:09:1e:9e:7e:7f:90:20:df:1b:5a:4c:04:
         d3:41:f7:52:52:bb:84:79:45:b2:bb:0e:3a:0f:0b:e0:7d:68:
         2b:db:58:c6:b2:35:b7:3d:7a:41:67:4e:89:bb:dc:7b:2c:2a:
         eb:4e:47:6c:7f:8d:a2:0d:bb:d9:96:d6:4e:22:d2:c0:f3:72:
         09:ab:7f:21:60:f1:97:ff:5b:fb:b3:44:8d:83:86:72:e7:fe:
         99:c6:ab:5a:8b:44:ae:e8:12:ff:91:db:2f:15:9f:f4:76:30:
         58:88:0a:ae:ce:94:3b:3b:fc:3d:ba:7a:95:29:1d:a3:93:7f:
         d1:1d:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:39 2024 by rpki-client on console-fra.rpki-client.org