Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/5qgi09i1aU5nFBLH4JbMxngz8Dg.roa
File:                     5qgi09i1aU5nFBLH4JbMxngz8Dg.roa (raw, json)
Hash identifier:          JUT8MO8TmgL2MG4kRLmQ2KTQqn49BOMQuxdrzThpSfc=
Subject key identifier:   E6:A8:22:D3:D8:B5:69:4E:67:14:12:C7:E0:96:CC:C6:78:33:F0:38
Certificate issuer:       /CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
Certificate serial:       0788867E
Authority key identifier: B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/5qgi09i1aU5nFBLH4JbMxngz8Dg.roa
Signing time:             Sat 01 Jan 2022 14:01:09 +0000
ROA not before:           Sat 01 Jan 2022 14:01:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399587
IP address blocks:        45.150.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126387838 (0x788867e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
        Validity
            Not Before: Jan  1 14:01:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6a822d3d8b5694e671412c7e096ccc67833f038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:53:d0:65:b1:93:7d:1b:8e:7f:eb:ee:7b:
                    64:97:6f:0e:cb:e8:85:a5:67:3d:d0:c2:b9:85:2b:
                    96:5a:73:95:bc:3d:d5:15:2a:ef:75:f6:aa:a0:78:
                    4f:7f:ca:c6:15:9e:bf:f3:fd:e5:32:4e:28:37:70:
                    81:c6:de:53:51:a1:77:0c:9d:94:63:b7:e8:dd:e4:
                    3d:a7:83:78:05:51:07:1c:17:49:87:82:b7:ea:32:
                    9b:24:67:c8:26:2a:0f:dd:d6:a3:98:47:9b:d9:af:
                    b0:dc:49:4d:bb:14:d2:11:d7:96:34:be:c9:9e:bc:
                    34:06:49:78:f5:17:31:d0:cd:c7:86:8b:5e:d7:13:
                    9d:8c:cd:89:6b:95:6b:aa:b5:86:14:71:fd:c5:59:
                    02:7c:23:77:65:a0:f7:de:9e:fd:a6:21:86:f6:be:
                    23:40:a4:3c:cc:ff:4c:3f:24:7d:99:46:9e:1d:6c:
                    af:b5:74:55:b0:90:4c:e5:43:31:74:ae:72:f4:50:
                    3a:59:c9:47:78:05:fd:b8:4f:cc:f1:30:d9:65:bb:
                    d7:08:f1:4e:46:8c:81:7b:e5:5d:6d:4a:3e:ee:3c:
                    95:b1:e4:92:8f:52:8e:c6:9c:88:3e:4f:1b:e0:3e:
                    95:91:98:47:b3:e4:6a:fe:7a:b6:59:4e:32:74:77:
                    9e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A8:22:D3:D8:B5:69:4E:67:14:12:C7:E0:96:CC:C6:78:33:F0:38
            X509v3 Authority Key Identifier:
                keyid:B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/5qgi09i1aU5nFBLH4JbMxngz8Dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:4d:82:67:3e:c7:10:bf:de:51:74:cb:e5:e3:e8:62:f6:d0:
         d3:e9:fe:b1:8c:0d:4a:24:eb:4d:ad:ff:0a:79:a5:d1:50:09:
         a5:8e:3e:64:ce:41:22:c6:0b:c1:3e:b7:e0:84:28:6b:e3:de:
         3d:27:be:2b:5d:57:9a:db:5c:6c:74:83:75:f6:aa:5d:19:b6:
         22:dd:78:2d:35:46:d1:ba:05:66:9a:d2:39:9b:f8:d7:02:0b:
         f5:e7:1f:32:33:af:77:48:89:64:78:65:62:32:6d:d7:80:20:
         85:ac:ce:46:c1:2a:7e:0c:e4:3a:dc:4f:ef:ca:ea:fa:28:27:
         7e:e0:b9:8b:73:c8:ac:a2:6b:ca:b0:97:39:e9:4b:e8:3f:60:
         0b:0d:a1:bd:f9:f2:91:e1:e6:54:f7:27:ae:36:d8:db:31:3b:
         15:5c:2a:e9:a5:fc:13:2e:22:dd:35:cf:1a:cb:b0:73:77:6c:
         50:b1:2a:65:79:95:4a:f5:64:f8:63:d3:46:96:b6:42:5e:99:
         6f:cd:a9:6b:27:6c:c8:0e:f5:ee:30:aa:b0:5d:d3:5e:8e:d7:
         54:05:67:d3:0f:08:8f:68:41:3f:33:3e:2b:76:9b:bd:86:bc:
         92:c3:e9:77:26:c9:3b:c2:7e:12:3f:16:51:46:3a:36:2f:d4:
         09:1f:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:09 2024 by rpki-client on console-ams.rpki-client.org