Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/svoaoiTOsWyoxcH-zNx0fkofpMI.roa
File:                     svoaoiTOsWyoxcH-zNx0fkofpMI.roa (raw, json)
Hash identifier:          OhBUjCU7aR1YS2PVgECoIr7ykhedcEJHo5W2MldYZsw=
Subject key identifier:   B2:FA:1A:A2:24:CE:B1:6C:A8:C5:C1:FE:CC:DC:74:7E:4A:1F:A4:C2
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       019AA8DC
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/svoaoiTOsWyoxcH-zNx0fkofpMI.roa
Signing time:             Thu 24 Feb 2022 06:27:55 +0000
ROA not before:           Thu 24 Feb 2022 06:27:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45929
IP address blocks:        45.132.120.0/22 maxlen: 22
                          45.82.4.0/22 maxlen: 22
                          45.88.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26912988 (0x19aa8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Feb 24 06:27:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b2fa1aa224ceb16ca8c5c1feccdc747e4a1fa4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:33:41:03:70:79:f4:56:36:15:cc:d8:86:
                    8a:d6:54:a8:55:30:ea:0b:2f:71:a3:47:5c:ab:b1:
                    34:9b:af:ca:a9:88:05:49:04:e0:a0:44:3b:d5:c4:
                    d0:80:eb:b9:11:dc:58:7c:66:28:3f:3a:67:c7:c8:
                    2f:51:5c:72:d5:b0:ed:08:c3:32:be:74:d9:a3:ba:
                    d8:df:1c:a2:98:d9:43:2d:a2:60:40:df:a1:2f:f8:
                    16:8c:b5:3b:0f:91:e4:42:ba:e9:ac:8c:7c:d3:62:
                    17:3d:e3:cb:65:30:71:bc:c6:48:02:e1:fb:96:b2:
                    06:af:b7:aa:b8:87:21:d1:be:2f:11:9f:1f:d8:83:
                    26:ed:5d:ab:34:f8:94:56:3d:02:03:73:fc:b2:1d:
                    03:5e:31:e3:af:82:39:1b:42:61:fe:6e:9e:d9:08:
                    bd:ca:4c:3e:93:51:39:03:ce:af:be:70:b7:f8:fa:
                    5e:e0:20:0e:82:94:e7:17:07:0c:24:7f:2b:8a:03:
                    ba:42:c8:0f:70:48:ae:28:cb:d6:a9:87:f8:1b:a0:
                    18:10:bd:87:0f:79:e7:f5:b7:07:2e:be:1c:09:cc:
                    cb:c4:81:2b:01:e7:7f:08:d4:ff:37:37:44:46:53:
                    cd:b6:cd:3f:e0:74:19:d9:96:20:70:7e:8f:9c:50:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FA:1A:A2:24:CE:B1:6C:A8:C5:C1:FE:CC:DC:74:7E:4A:1F:A4:C2
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/svoaoiTOsWyoxcH-zNx0fkofpMI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.4.0/22
                  45.88.84.0/22
                  45.132.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:7a:6f:44:fa:91:47:c3:a3:c4:9e:6b:da:ff:a2:98:b1:7b:
         fd:96:b8:c5:2a:fb:32:91:3a:e6:73:39:18:f9:af:ab:d2:23:
         01:c5:f4:9c:03:0a:f2:fe:9d:13:95:dc:98:47:82:44:3d:b6:
         42:b8:9c:da:0b:cf:9c:04:b5:ed:08:10:63:bc:ad:e1:c8:76:
         2d:58:b5:d4:bd:c0:b9:d8:cf:3c:50:a6:d8:a7:ae:03:3e:88:
         1a:0d:84:84:fb:8c:a2:1b:8e:fc:a7:92:34:20:20:fb:66:66:
         ae:de:84:26:ff:e5:bf:b5:8f:b0:0d:49:da:a6:bd:e4:61:c3:
         5f:0b:b8:0c:24:cf:b8:2e:ae:32:e9:3f:c6:33:88:8e:a6:8f:
         37:17:de:34:5f:c0:ce:22:e0:c5:04:34:7e:6c:59:b9:89:8d:
         0e:4f:64:73:cd:e8:13:18:df:a5:4d:f4:57:9b:76:e8:44:bd:
         67:09:ea:ea:28:4a:e2:6b:bb:a0:30:14:4c:69:6b:53:4c:53:
         fb:3b:bc:b4:91:31:a6:47:6a:f4:28:19:4b:1c:63:fb:87:cb:
         55:2c:33:b7:09:25:9c:cf:77:bd:87:42:ee:dd:ad:c0:dd:63:
         e5:54:ce:45:35:0d:99:62:d9:bb:0e:cb:f8:6c:de:a8:a1:0f:
         9d:fe:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:40 2025 by rpki-client