Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/KMlQWqvbdMDkZ6-JexQ8f8DBO2s.roa
File:                     KMlQWqvbdMDkZ6-JexQ8f8DBO2s.roa (raw, json)
Hash identifier:          3XV+cvsqQ+kdNt+wcrnao51cMos8+aHb2PdMcr/IWTk=
Subject key identifier:   28:C9:50:5A:AB:DB:74:C0:E4:67:AF:89:7B:14:3C:7F:C0:C1:3B:6B
Certificate issuer:       /CN=170ef71a422a2f0fe91160579a4050618d8baf10
Certificate serial:       0358EF4C
Authority key identifier: 17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/KMlQWqvbdMDkZ6-JexQ8f8DBO2s.roa
Signing time:             Sat 01 Jan 2022 05:54:34 +0000
ROA not before:           Sat 01 Jan 2022 05:54:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48806
IP address blocks:        92.240.148.0/24 maxlen: 24
                          92.240.150.0/24 maxlen: 24
                          46.244.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56160076 (0x358ef4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170ef71a422a2f0fe91160579a4050618d8baf10
        Validity
            Not Before: Jan  1 05:54:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=28c9505aabdb74c0e467af897b143c7fc0c13b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:0a:9f:dd:b3:60:5b:ea:bd:13:10:e2:5f:
                    20:62:7e:a1:52:92:d3:8b:b3:ee:dd:80:86:3a:02:
                    a6:89:b8:e6:bd:b1:37:13:32:67:f8:64:1e:12:8a:
                    ee:96:e6:38:75:ae:39:41:67:03:71:a9:63:94:0f:
                    79:6e:d6:12:82:ca:ae:bd:ca:6b:31:3c:74:b9:f1:
                    3d:45:37:8a:29:0b:13:4a:3c:3b:d7:d3:a6:f2:22:
                    c1:76:6b:a3:7b:b8:79:b6:15:60:d6:d1:09:2c:de:
                    0d:5d:0b:68:5f:54:dc:c4:56:48:98:bf:d3:a9:14:
                    4d:90:a0:a1:5a:76:9e:e5:00:a5:b9:ca:c7:53:8e:
                    d5:f5:f7:8e:cd:4b:de:31:94:12:56:6b:55:95:b5:
                    78:20:ff:df:fc:7f:a5:76:99:08:a5:74:63:73:d0:
                    2f:0f:e6:4b:2d:21:17:05:8d:8c:48:01:57:32:37:
                    31:a3:f5:ff:8b:da:cf:d2:fd:33:45:3a:a1:89:2f:
                    75:d7:1e:1a:44:d0:c8:8c:2c:42:3f:ae:d1:2b:3e:
                    f3:ee:d2:80:e1:2f:2c:b7:6c:45:21:b5:a3:07:31:
                    d9:4e:4d:1c:d3:da:11:2b:a9:ce:6a:9e:ae:4c:6a:
                    53:b3:59:e4:f9:96:c5:27:39:0a:e0:58:d6:d0:ca:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:50:5A:AB:DB:74:C0:E4:67:AF:89:7B:14:3C:7F:C0:C1:3B:6B
            X509v3 Authority Key Identifier:
                keyid:17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/KMlQWqvbdMDkZ6-JexQ8f8DBO2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Fw73GkIqLw_pEWBXmkBQYY2LrxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.244.96.0/24
                  92.240.148.0/24
                  92.240.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:9b:05:3d:fa:d4:6e:e2:11:27:1f:4b:0f:a7:25:24:7d:a8:
         af:06:13:97:b4:d1:1d:70:5a:6d:4d:f7:ba:c5:a5:46:82:1e:
         2c:dd:e7:24:ea:14:9f:14:9e:96:41:ad:4a:28:bc:bf:51:fc:
         24:85:8d:bb:39:8d:a5:d4:fc:ec:31:d9:d3:19:1e:f0:e6:aa:
         cb:61:24:af:3c:d7:8e:95:02:2a:d2:6d:8e:b1:78:6f:2f:24:
         cd:66:bd:85:8f:03:e4:e2:71:e8:91:6b:8a:eb:d8:28:0a:d8:
         b0:4e:8c:04:09:86:ee:bc:ee:df:d9:27:ef:d6:d2:9f:48:e9:
         58:20:59:e8:1a:ed:d9:5a:5e:7a:e0:f6:60:ce:2c:67:e6:9c:
         f7:91:37:ae:70:c6:af:68:29:e9:db:bc:9f:71:cd:c2:27:a5:
         36:74:f2:e1:77:93:01:91:26:0c:b3:b6:38:e6:73:07:d8:d3:
         a7:6d:9f:30:d7:ea:2b:0c:b6:88:00:3c:8b:ef:95:b9:84:b4:
         2f:45:1d:b9:40:63:58:23:c3:84:00:8a:0c:5c:7a:05:17:ca:
         e5:65:dc:94:5c:92:6e:3c:a5:6f:59:c2:cb:b2:c8:cf:11:1a:
         c6:cf:2d:3c:37:5b:a9:71:41:17:60:43:84:7d:b4:9b:2e:0b:
         f6:f7:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org