Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8e8312-4978-47a0-84f2-0407d7d179ad/1/IrRsCZuxxpcDy60gCYQBV11naFY.roa
File:                     IrRsCZuxxpcDy60gCYQBV11naFY.roa (raw, json)
Hash identifier:          N6N0ul/JJ6HNKXq0UEa9fsvcxpihtLLIzCaB7PUDS7U=
Subject key identifier:   22:B4:6C:09:9B:B1:C6:97:03:CB:AD:20:09:84:01:57:5D:67:68:56
Certificate issuer:       /CN=4545ea034c8dbed3039867c52a5b16214205f2d5
Certificate serial:       01842DA6B1E19242D56B1978DB6B9668716F
Authority key identifier: 45:45:EA:03:4C:8D:BE:D3:03:98:67:C5:2A:5B:16:21:42:05:F2:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUXqA0yNvtMDmGfFKlsWIUIF8tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8e8312-4978-47a0-84f2-0407d7d179ad/1/IrRsCZuxxpcDy60gCYQBV11naFY.roa
Signing time:             Mon 31 Oct 2022 10:46:49 +0000
ROA not before:           Mon 31 Oct 2022 10:46:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3214
IP address blocks:        92.119.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:2d:a6:b1:e1:92:42:d5:6b:19:78:db:6b:96:68:71:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4545ea034c8dbed3039867c52a5b16214205f2d5
        Validity
            Not Before: Oct 31 10:46:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22b46c099bb1c69703cbad20098401575d676856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:c5:17:57:99:f8:6e:4e:ab:77:69:30:fa:
                    f4:f9:fb:23:e7:25:2c:ec:21:03:43:92:9a:81:11:
                    a0:d5:95:c2:a9:0c:8c:a2:f1:2f:9f:de:6e:ee:09:
                    27:c4:d0:f9:4a:40:ea:84:50:32:fd:11:33:85:d8:
                    c7:bd:88:5d:90:8f:af:dc:bf:ed:9e:65:75:7d:db:
                    51:81:c7:f4:64:5b:3e:56:ba:0e:f0:05:35:6b:87:
                    66:69:f0:0b:6c:d0:b6:52:8d:b9:02:64:8c:62:b2:
                    f4:cc:19:fc:97:bd:71:b4:08:9d:82:70:4c:a7:8d:
                    27:d3:33:97:06:7a:f4:ff:7c:87:f0:23:32:92:9a:
                    37:0d:6f:78:d7:20:66:c2:09:31:31:05:a9:18:d0:
                    02:48:35:52:09:7f:c3:74:d7:54:2e:cb:44:c5:46:
                    8f:7a:52:48:7a:02:47:d3:9a:78:b3:e6:c1:0b:d6:
                    58:51:cd:87:38:6d:ee:c9:d8:ca:6f:46:21:02:fe:
                    17:69:f7:78:02:44:b8:63:dc:1b:87:ca:55:b8:8b:
                    10:a7:f6:a3:d4:13:69:02:3b:c0:fd:a3:85:51:b8:
                    b5:4c:ab:9a:e6:06:36:c8:2f:f2:e6:e0:8b:78:bc:
                    f6:d1:72:52:3a:0d:f4:ca:95:e0:22:5d:f9:19:ae:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:6C:09:9B:B1:C6:97:03:CB:AD:20:09:84:01:57:5D:67:68:56
            X509v3 Authority Key Identifier:
                keyid:45:45:EA:03:4C:8D:BE:D3:03:98:67:C5:2A:5B:16:21:42:05:F2:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUXqA0yNvtMDmGfFKlsWIUIF8tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8e8312-4978-47a0-84f2-0407d7d179ad/1/IrRsCZuxxpcDy60gCYQBV11naFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8e8312-4978-47a0-84f2-0407d7d179ad/1/RUXqA0yNvtMDmGfFKlsWIUIF8tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:c1:43:69:08:20:d7:8e:72:30:9e:dd:62:b3:2a:f5:90:45:
         a6:84:1f:a8:03:0f:b0:db:33:a4:ac:4b:35:29:cb:a3:63:d3:
         d3:d2:84:ec:a4:f4:6f:b6:69:d3:f2:4e:d2:11:d7:87:51:f4:
         f3:c2:82:bd:f3:08:84:c9:36:c4:cb:f2:fb:23:67:69:01:a0:
         4a:fc:ba:0a:00:e8:ba:cf:0c:cd:47:4d:6f:c2:ca:e4:0d:ae:
         89:2d:0c:09:d0:6e:b5:63:34:64:f3:87:a5:77:f9:a1:f8:1c:
         6f:c6:36:9c:4d:13:f6:ac:81:25:77:de:35:be:0e:9b:e7:8a:
         be:f1:06:ff:a2:d3:40:b3:06:02:6c:1e:2f:90:f6:8f:ec:eb:
         f6:e8:db:5e:a2:92:4a:d4:70:d9:53:b5:51:18:6f:76:f3:e5:
         84:fd:66:fd:c2:b1:ad:34:da:c9:d4:d4:4d:51:ac:2f:48:77:
         37:d2:88:0a:39:11:44:1f:f0:e9:ad:1b:5e:6e:09:64:85:e8:
         9f:b4:81:b6:63:75:af:66:a8:ff:b7:7a:51:1b:8e:6e:73:be:
         7f:d8:40:ee:b5:d3:a2:24:c6:77:c4:3e:07:56:30:d4:18:21:
         b3:c0:ac:38:65:a5:6c:53:3f:5d:87:46:02:e7:fa:3b:1c:53:
         10:c8:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:15 2024 by rpki-client on console-ams.rpki-client.org