Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/14b812-6d92-47e3-bace-48f6179d26e5/1/0d1v7exAiCE6sac5BdghK6x-ckU.roa
File:                     0d1v7exAiCE6sac5BdghK6x-ckU.roa (raw, json)
Hash identifier:          Hr5AdPsMvJzd2qtnfHYkeIsXAApwx/4aP85KkVv7WeY=
Subject key identifier:   D1:DD:6F:ED:EC:40:88:21:3A:B1:A7:39:05:D8:21:2B:AC:7E:72:45
Certificate issuer:       /CN=45076a7f70b5f40242b69ade3c931e8291ee0da6
Certificate serial:       08099AA0
Authority key identifier: 45:07:6A:7F:70:B5:F4:02:42:B6:9A:DE:3C:93:1E:82:91:EE:0D:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQdqf3C19AJCtprePJMegpHuDaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/14b812-6d92-47e3-bace-48f6179d26e5/1/0d1v7exAiCE6sac5BdghK6x-ckU.roa
Signing time:             Sat 01 Jan 2022 12:00:33 +0000
ROA not before:           Sat 01 Jan 2022 12:00:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47787
IP address blocks:        185.162.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134847136 (0x8099aa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45076a7f70b5f40242b69ade3c931e8291ee0da6
        Validity
            Not Before: Jan  1 12:00:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1dd6fedec4088213ab1a73905d8212bac7e7245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cf:91:65:2a:45:1e:84:ff:7a:24:49:a4:a6:
                    5b:2c:2d:d9:3b:64:09:ee:0a:fc:21:80:6d:40:38:
                    90:8e:2e:ce:dd:dd:2d:2a:5b:71:83:53:01:5e:00:
                    d0:92:3b:6c:07:df:09:31:83:79:4c:46:47:c6:5c:
                    84:6a:89:85:5f:68:9f:07:ab:4c:e2:ba:49:4a:b9:
                    07:ab:78:4a:8c:46:df:2a:a9:3b:89:2c:94:99:98:
                    b9:be:6e:83:ca:7d:65:b8:b1:26:15:a5:27:cc:dd:
                    12:c7:f0:b0:cf:05:b9:bb:bc:b7:cd:e2:c4:ed:79:
                    43:4e:87:ba:73:5e:c4:16:d8:d7:13:f3:9d:46:fd:
                    73:19:30:b0:ea:e6:94:61:24:02:fd:90:bf:80:ea:
                    6c:f0:00:33:2d:78:8d:a9:14:d2:4f:a8:3d:ec:e2:
                    a2:79:3f:d7:a4:31:de:be:97:49:c6:72:0a:53:12:
                    aa:40:d8:0b:e8:d6:38:3f:1d:a7:d6:63:52:8c:b4:
                    01:b0:e7:7e:d0:ca:ea:44:d6:1e:5a:bb:f0:33:96:
                    a3:1c:10:4e:9c:0a:8c:b0:31:88:ff:33:e5:b7:de:
                    95:ca:f3:39:76:f9:49:a3:95:ce:be:3d:0f:2f:36:
                    52:50:69:d3:03:1c:8f:d1:cf:27:38:a7:b2:9d:79:
                    cd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:6F:ED:EC:40:88:21:3A:B1:A7:39:05:D8:21:2B:AC:7E:72:45
            X509v3 Authority Key Identifier:
                keyid:45:07:6A:7F:70:B5:F4:02:42:B6:9A:DE:3C:93:1E:82:91:EE:0D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQdqf3C19AJCtprePJMegpHuDaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/14b812-6d92-47e3-bace-48f6179d26e5/1/0d1v7exAiCE6sac5BdghK6x-ckU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/14b812-6d92-47e3-bace-48f6179d26e5/1/RQdqf3C19AJCtprePJMegpHuDaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:43:16:1b:74:38:2b:b5:a8:9c:66:89:1a:0a:ed:38:64:15:
         94:35:53:dc:ec:af:bd:38:2a:38:26:1b:3e:ae:50:8d:f5:03:
         7b:fe:ae:f3:74:3d:e0:91:c1:2b:f0:76:40:f5:18:8b:ae:2f:
         b3:ae:28:9f:53:94:47:69:3e:fa:e1:23:9e:29:f0:eb:0e:b6:
         78:bc:ff:e0:38:18:a9:86:e5:bd:79:96:23:7f:2e:1a:0a:87:
         17:07:86:bf:e8:9c:96:0a:8e:05:c1:dc:6a:3a:79:8c:c5:f5:
         c8:49:a2:d8:0e:fb:e9:f9:f3:c9:ab:55:43:e8:89:95:37:5d:
         5b:51:40:74:8b:f0:b0:de:9b:0b:d3:3a:63:9b:ac:6d:6b:b7:
         25:bc:bd:53:19:77:ba:79:d2:83:09:02:d1:fe:4b:90:3a:e5:
         92:49:3a:31:df:95:18:14:26:97:20:3c:65:e1:c3:d0:c7:3f:
         d8:bf:14:e8:7f:59:14:60:e2:2a:67:c9:13:36:e0:5a:48:29:
         c2:ea:c1:aa:89:c3:83:78:d2:bb:45:0d:37:39:48:80:51:b3:
         35:29:bd:28:d8:ab:75:21:3b:b9:00:49:7a:bc:6f:b0:8c:70:
         24:1c:a1:1d:0c:ab:27:0c:4f:f4:2e:07:91:15:9b:c4:b5:8d:
         cf:f3:c1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:24 2024 by rpki-client on console-ams.rpki-client.org