Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/VLPBEN5PB47MJJh2acB6Qx4RzPk.roa
File:                     VLPBEN5PB47MJJh2acB6Qx4RzPk.roa (raw, json)
Hash identifier:          hZ5hCY+LajpJyQ8lfcoe/3lo5Ih8QUHTFvyILkcPb8g=
Subject key identifier:   54:B3:C1:10:DE:4F:07:8E:CC:24:98:76:69:C0:7A:43:1E:11:CC:F9
Certificate issuer:       /CN=b8404ab5e692e752ecac1f8bbc4f0c556c7b7b1b
Certificate serial:       0A7A54
Authority key identifier: B8:40:4A:B5:E6:92:E7:52:EC:AC:1F:8B:BC:4F:0C:55:6C:7B:7B:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEBKteaS51LsrB-LvE8MVWx7exs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/VLPBEN5PB47MJJh2acB6Qx4RzPk.roa
Signing time:             Tue 12 Apr 2022 09:07:54 +0000
ROA not before:           Tue 12 Apr 2022 09:07:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29405
IP address blocks:        2.59.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686676 (0xa7a54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8404ab5e692e752ecac1f8bbc4f0c556c7b7b1b
        Validity
            Not Before: Apr 12 09:07:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54b3c110de4f078ecc24987669c07a431e11ccf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:24:a3:d3:0c:2f:03:04:79:75:37:73:10:
                    5c:2a:57:15:87:8b:4b:c4:d7:e4:88:1b:8b:2c:9e:
                    21:0a:3e:48:9b:3c:ff:77:8d:1f:5a:75:0b:55:93:
                    f4:67:09:6c:10:b4:44:a9:0a:9c:84:32:ab:18:84:
                    68:d6:3d:4b:6e:a0:05:ac:56:30:50:c1:0a:af:e9:
                    f7:11:26:4d:b2:bb:eb:26:41:37:91:a5:77:d0:76:
                    07:c2:f5:38:b6:7c:15:ba:8b:a9:a5:f1:6a:b5:8e:
                    92:e5:a3:41:c3:fe:10:02:a1:37:da:57:12:9a:0e:
                    29:5a:fe:2e:ee:0f:91:ee:ee:24:18:5f:00:16:e9:
                    b7:c7:3e:45:ad:a6:ad:9d:b9:11:2f:63:39:8f:b7:
                    c6:14:2e:8c:c8:08:07:eb:81:e8:54:37:d8:4c:94:
                    cc:1f:f7:86:73:2d:e2:98:cc:c9:c8:16:d0:cb:ee:
                    d6:49:9f:c0:06:31:a4:e6:4c:c5:82:e7:4a:18:5c:
                    26:37:29:aa:e5:dd:ae:e2:aa:ea:de:8e:8f:57:46:
                    75:40:ba:13:ba:ab:d9:42:7e:4b:94:19:bb:c6:7f:
                    b1:ba:59:e0:cd:0a:56:96:38:43:92:e1:45:39:fd:
                    df:02:0b:6c:61:a2:0d:87:b1:0f:06:4f:c6:39:e7:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B3:C1:10:DE:4F:07:8E:CC:24:98:76:69:C0:7A:43:1E:11:CC:F9
            X509v3 Authority Key Identifier:
                keyid:B8:40:4A:B5:E6:92:E7:52:EC:AC:1F:8B:BC:4F:0C:55:6C:7B:7B:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEBKteaS51LsrB-LvE8MVWx7exs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/VLPBEN5PB47MJJh2acB6Qx4RzPk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/972f1b-5f7e-4f61-8e37-f469d839ba8e/1/uEBKteaS51LsrB-LvE8MVWx7exs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:dd:af:40:82:57:cf:68:d1:25:7e:2c:b0:e5:34:dd:b0:17:
         4e:c7:b1:9d:f0:4e:ce:fb:46:f7:f3:0f:aa:f5:39:c5:44:54:
         51:d9:d9:08:9d:fe:e0:8e:99:0f:1d:10:4b:88:d6:3d:85:61:
         c2:f2:1b:5a:98:a7:89:d6:b5:60:18:86:5f:d9:70:98:6a:8b:
         68:85:ed:a6:02:6d:66:2e:23:47:7f:af:76:07:b0:1f:52:f7:
         ac:83:06:d7:65:96:d1:5f:bf:43:22:e4:bf:68:5c:dc:32:1e:
         9d:96:53:01:f3:06:f9:03:b3:02:d3:4e:dc:69:2b:a5:64:38:
         c9:36:0d:07:68:01:89:03:a3:11:7e:cd:e4:2a:bb:9e:66:d2:
         17:5e:98:52:0f:ca:be:93:25:9f:80:82:d0:7a:80:ba:7c:02:
         f9:1b:9d:b2:30:1b:4c:ad:69:fd:42:3f:8e:c6:86:ee:a3:63:
         27:e5:a2:c3:8f:ea:91:17:aa:19:91:7a:68:a5:e6:40:52:0e:
         a6:61:4e:57:f0:65:03:6f:c0:ea:32:b0:23:1d:5f:29:e9:46:
         99:b9:7b:38:60:b5:c3:95:14:fa:de:35:33:e1:80:77:7b:98:
         06:22:c6:0f:8e:22:8e:11:5f:3f:82:ae:b2:88:a0:67:98:21:
         72:87:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:12 2024 by rpki-client on console-ams.rpki-client.org