Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/Wf_SPKkoLsdK92FfvG4h6QUp3X4.roa
File:                     Wf_SPKkoLsdK92FfvG4h6QUp3X4.roa (raw, json)
Hash identifier:          LMql9iD7yADmkUtdDYXZl8QexIGPt7eCHX5D+qSY5QU=
Subject key identifier:   59:FF:D2:3C:A9:28:2E:C7:4A:F7:61:5F:BC:6E:21:E9:05:29:DD:7E
Certificate issuer:       /CN=a57699cb6d240a6dd70ed2a188c8d7056b0be8ad
Certificate serial:       04E57AD1
Authority key identifier: A5:76:99:CB:6D:24:0A:6D:D7:0E:D2:A1:88:C8:D7:05:6B:0B:E8:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXaZy20kCm3XDtKhiMjXBWsL6K0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/Wf_SPKkoLsdK92FfvG4h6QUp3X4.roa
Signing time:             Sat 01 Jan 2022 14:05:48 +0000
ROA not before:           Sat 01 Jan 2022 14:05:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        45.150.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82148049 (0x4e57ad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57699cb6d240a6dd70ed2a188c8d7056b0be8ad
        Validity
            Not Before: Jan  1 14:05:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59ffd23ca9282ec74af7615fbc6e21e90529dd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:82:f6:4c:e8:9e:14:ce:93:18:ba:29:32:
                    dd:1a:86:ee:b2:52:18:47:a6:58:b5:8f:f4:a7:9f:
                    68:17:48:c8:9d:93:d1:34:e7:b9:2f:da:d0:5d:d2:
                    82:2f:c6:f9:ec:bf:9f:f3:ab:60:be:c7:92:85:15:
                    ed:e1:46:f3:95:90:56:8a:0e:a0:c7:d4:45:e1:4e:
                    ae:4c:05:c3:64:fb:98:e5:4a:5e:85:7b:82:ac:e2:
                    47:85:cf:c9:2a:ee:be:39:81:3f:5c:b9:aa:d3:df:
                    50:09:45:59:66:bc:57:fa:4e:95:25:91:35:30:1e:
                    c7:2f:16:5b:a5:8b:0a:a0:ca:be:f4:3b:c5:5b:22:
                    fb:2b:55:c2:e3:a7:ff:2a:53:55:9f:15:17:79:38:
                    fd:3a:76:b4:87:10:32:4e:11:98:c7:f0:b8:36:20:
                    c9:79:4f:e1:40:02:de:b8:fc:13:82:9f:9f:0d:c4:
                    d1:bf:66:1c:db:4e:c0:06:ea:25:93:39:cd:43:9c:
                    77:84:8e:67:0b:0d:df:cc:7c:8c:25:59:94:30:2c:
                    cd:d3:39:86:2d:93:42:33:6f:a1:67:6f:36:a2:74:
                    d9:dc:a8:8e:4b:0b:48:4f:db:71:c3:9c:c6:a2:4c:
                    fc:ef:9b:7f:1b:01:a3:93:5e:e7:35:57:8f:3c:09:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FF:D2:3C:A9:28:2E:C7:4A:F7:61:5F:BC:6E:21:E9:05:29:DD:7E
            X509v3 Authority Key Identifier:
                keyid:A5:76:99:CB:6D:24:0A:6D:D7:0E:D2:A1:88:C8:D7:05:6B:0B:E8:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXaZy20kCm3XDtKhiMjXBWsL6K0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/Wf_SPKkoLsdK92FfvG4h6QUp3X4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a59fb5-2957-47f0-aeb1-f6fc289a68ac/1/pXaZy20kCm3XDtKhiMjXBWsL6K0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0b:98:5a:e2:ed:06:0d:94:26:e7:ea:81:bc:27:2d:f4:8e:
         98:ce:bf:2d:a3:5b:0c:ea:23:3f:fb:27:db:14:6b:50:32:18:
         e4:7d:2d:2e:5f:11:65:d4:7d:4c:75:97:f0:64:5a:c5:c1:0c:
         09:dc:03:76:42:a5:73:e4:9b:d7:6a:ec:3c:28:13:e2:5e:e5:
         33:ab:7e:e6:27:fa:b4:95:b5:e3:56:4c:16:34:56:79:f9:a2:
         40:7b:e7:d8:5a:fb:90:c6:dc:3f:10:3a:04:11:79:73:c9:e1:
         4e:b7:b3:ea:0e:6e:f2:a2:01:34:37:f7:d9:f0:3e:fe:9e:5f:
         2b:64:3b:57:e6:b2:0f:8d:1d:60:60:45:3f:68:27:05:78:df:
         c2:b7:7d:3d:df:2b:13:7a:3b:8f:60:e8:f0:17:67:fd:92:ba:
         f1:85:af:69:71:ef:56:b5:29:0a:17:f7:0e:6f:c0:e0:06:01:
         b2:e9:02:14:97:4e:ce:4b:9d:cc:e1:e1:92:fe:38:95:1a:a0:
         8c:12:12:b4:fb:b9:f3:a3:01:38:78:e4:58:6a:54:05:4c:86:
         f5:92:27:98:71:04:8b:32:bc:95:30:e0:64:2a:cc:06:31:46:
         6d:2b:d2:a0:98:0d:e6:0b:8e:ae:8d:b4:90:4b:34:3c:3e:cb:
         5b:e9:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:04 2024 by rpki-client on console-ams.rpki-client.org