Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wDKfig3uF0SERd3mx3-2by_3dTE.roa
File:                     wDKfig3uF0SERd3mx3-2by_3dTE.roa (raw, json)
Hash identifier:          KPy71fTMjWLjE+u3cEzczimhnISok97jRB/kUPNSXz4=
Subject key identifier:   C0:32:9F:8A:0D:EE:17:44:84:45:DD:E6:C7:7F:B6:6F:2F:F7:75:31
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A51DC94
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wDKfig3uF0SERd3mx3-2by_3dTE.roa
Signing time:             Thu 31 Mar 2022 15:24:56 +0000
ROA not before:           Thu 31 Mar 2022 15:24:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        92.119.12.0/22 maxlen: 24
                          45.87.172.0/24 maxlen: 24
                          45.87.173.0/24 maxlen: 24
                          45.87.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173137044 (0xa51dc94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 31 15:24:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0329f8a0dee17448445dde6c77fb66f2ff77531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d4:f1:73:ed:cf:d7:6a:96:04:6e:28:48:be:
                    05:fe:82:4d:62:f8:ff:78:b6:d4:31:40:f8:9c:e9:
                    6b:bb:36:b3:e7:ac:ab:de:96:d3:3b:ab:8b:59:ab:
                    b7:a3:f3:00:68:c5:97:c8:9d:84:62:09:44:d5:6c:
                    5b:31:e2:53:a4:94:73:e6:6c:bc:13:dd:ea:4c:3f:
                    4a:53:f9:6b:47:be:f9:9d:85:b5:7b:43:50:2d:38:
                    b8:67:6a:d4:34:94:fa:ac:d9:ec:05:e0:d0:7e:53:
                    89:4b:0d:48:a8:10:fe:63:d7:bf:b4:8d:15:a1:ba:
                    6d:9d:05:34:18:fc:1f:be:1f:da:0c:2c:ce:ee:fd:
                    e9:0a:e7:7d:3d:0b:cf:f8:ea:58:7a:d5:7d:fe:8f:
                    76:25:3c:cd:9d:bd:4e:94:c6:39:23:01:ea:da:e8:
                    73:39:6d:8d:e3:23:f2:73:98:4b:10:3d:dd:42:dd:
                    57:d4:7d:8e:b5:19:09:6e:6a:02:9a:68:d2:d8:48:
                    7f:b0:5c:b9:45:d6:35:8f:a9:5b:fc:5e:b4:3f:26:
                    6d:d8:f7:0e:d9:fb:d6:3e:1c:09:aa:4b:c1:7c:aa:
                    45:44:77:90:64:6c:c8:00:f5:5b:83:38:f6:14:09:
                    b9:3b:93:c5:8a:a6:42:39:68:dc:39:c3:ca:6c:ec:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:32:9F:8A:0D:EE:17:44:84:45:DD:E6:C7:7F:B6:6F:2F:F7:75:31
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wDKfig3uF0SERd3mx3-2by_3dTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.172.0-45.87.174.255
                  92.119.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:fc:85:16:d1:4d:15:6e:0b:e6:e9:c1:68:ce:48:5a:d5:13:
         3f:82:08:8a:ff:e9:3c:4f:bd:84:77:2a:eb:f1:84:fb:2d:fc:
         e4:a4:21:3a:cc:2e:ba:11:ae:cd:82:c0:3c:56:c9:ac:61:ae:
         e5:56:2c:57:d4:da:9a:d6:80:a3:6d:91:59:02:f2:54:38:30:
         74:0c:8b:8a:c5:61:62:fc:38:8d:56:65:e6:91:9a:5d:21:af:
         0b:cf:b4:a0:ee:e6:59:60:c2:75:c5:d1:9c:da:ba:e8:51:0b:
         b9:dc:86:30:43:02:42:af:1e:b2:b8:3e:bb:d4:88:cf:02:f3:
         a1:4e:91:d7:3f:7f:c8:f0:67:93:38:8a:5a:38:f3:cc:20:a7:
         04:00:ba:8f:82:9d:64:e4:5c:8c:8a:6b:cf:42:f5:c5:a6:22:
         2d:2e:c0:4b:bf:d9:8f:4a:87:f0:34:79:e7:85:cb:ab:d5:f2:
         8e:1e:c3:db:5c:79:45:ef:45:7f:46:55:d6:58:ea:ee:16:cb:
         98:c6:6c:94:b9:2b:0c:30:dd:a0:d1:45:2d:d8:cf:66:5e:dd:
         04:6e:15:48:a4:1b:b0:43:e6:45:84:e8:d2:9a:f1:1c:0d:79:
         23:13:e1:98:c3:b6:8f:d1:92:8c:2c:9d:90:7a:2a:1c:11:1e:
         35:e8:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org