Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Dx5vScnIE_uCUNqNsqXddm566sc.roa
File:                     Dx5vScnIE_uCUNqNsqXddm566sc.roa (raw, json)
Hash identifier:          3QUqXg+CjKnVlWKuu/qW3x4aHbyzTq9K2muzJs2n4lM=
Subject key identifier:   0F:1E:6F:49:C9:C8:13:FB:82:50:DA:8D:B2:A5:DD:76:6E:7A:EA:C7
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A4FBE25
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Dx5vScnIE_uCUNqNsqXddm566sc.roa
Signing time:             Wed 30 Mar 2022 20:30:54 +0000
ROA not before:           Wed 30 Mar 2022 20:30:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        92.119.12.0/22 maxlen: 24
                          45.87.172.0/24 maxlen: 24
                          45.87.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172998181 (0xa4fbe25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 30 20:30:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f1e6f49c9c813fb8250da8db2a5dd766e7aeac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:a9:2b:63:a0:c8:f4:d9:f7:5a:77:f2:30:
                    9b:dc:45:14:53:f7:33:f6:79:30:a8:6c:8d:79:88:
                    63:1b:0b:c5:53:34:1e:a6:70:f2:b7:40:a1:7b:f4:
                    a0:e3:d3:56:06:61:b0:9e:cf:7c:14:ce:2e:a2:fd:
                    bb:5c:59:2d:b5:8c:ea:8e:f7:64:cd:9a:0f:09:b9:
                    b3:b0:bf:70:4d:2e:95:7f:64:58:77:b1:4f:05:0a:
                    ef:7f:2f:3d:3f:57:3a:af:ca:d4:ca:a9:a0:81:21:
                    a6:d8:80:25:87:fb:0d:77:a9:39:96:84:32:08:86:
                    2c:4d:4e:23:73:18:93:62:a9:ad:57:b3:7c:76:fb:
                    6b:d3:a0:07:55:b5:26:49:49:74:95:23:97:87:76:
                    b2:ae:13:33:36:4c:7f:5e:a9:3d:6d:5f:38:79:58:
                    1c:e0:b2:1b:bf:f2:12:d3:fb:d5:1b:58:5c:75:c1:
                    be:17:f9:3f:4b:3f:6b:fc:9c:97:82:12:85:78:da:
                    d7:41:05:ea:5d:d7:5f:69:fc:03:27:a3:b0:0c:d2:
                    62:87:b4:62:04:a2:a8:f9:36:77:95:8f:cc:a5:c4:
                    11:b3:d5:3f:22:6a:ab:db:a3:31:04:b8:46:04:41:
                    06:f4:71:9a:19:ca:25:7d:2b:f2:78:d6:44:d1:77:
                    9c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1E:6F:49:C9:C8:13:FB:82:50:DA:8D:B2:A5:DD:76:6E:7A:EA:C7
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Dx5vScnIE_uCUNqNsqXddm566sc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.172.0/23
                  92.119.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:aa:ba:e8:df:a8:6a:e8:5c:f8:22:84:72:d1:57:b1:f2:
         b0:12:b4:8c:73:d0:e1:4a:16:07:f1:d5:4e:35:b9:bb:52:28:
         76:81:1d:3e:cb:3a:19:97:6e:91:da:3a:99:44:2d:eb:b2:c2:
         51:b9:62:15:e7:fd:cd:ba:0e:ee:d5:0a:67:34:f9:e4:2c:eb:
         f7:ab:dd:21:46:b4:16:ab:60:c7:86:a6:be:32:0c:de:cd:3e:
         ab:ad:6d:20:93:7e:d7:12:1a:91:5d:e3:b3:a9:de:d8:54:a5:
         cd:29:b2:06:38:21:06:d2:68:66:3d:83:88:13:32:e1:9a:18:
         a5:05:a8:98:18:95:a1:d1:b8:78:fa:93:e4:71:10:43:aa:dd:
         d5:35:55:45:2e:c8:76:84:b8:a1:80:68:08:ab:25:36:0d:14:
         5b:00:33:70:02:0e:1a:2c:d8:10:aa:ec:7b:c2:3c:5c:58:85:
         7f:62:ae:bb:72:4d:e9:f8:17:29:a7:59:56:90:03:0d:57:7b:
         8e:37:d0:1f:2a:da:64:72:2a:90:48:ca:ef:72:84:89:e1:78:
         b2:fd:49:7a:09:00:dd:e8:8e:4f:18:c7:d8:bb:15:ad:93:5d:
         ec:07:af:99:b6:91:23:e5:ba:ac:bc:f6:0f:1c:0c:fd:65:fc:
         29:b6:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org