Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/875f41-2bc6-43b7-9ed4-20772f0d1656/1/oQL4PdBnShmNB1-RWMt8PfN_Zn8.roa
File:                     oQL4PdBnShmNB1-RWMt8PfN_Zn8.roa (raw, json)
Hash identifier:          wAzhnBIV4ldn5qifuJTSSe8fr0SifhR5aEih0OXN0qA=
Subject key identifier:   A1:02:F8:3D:D0:67:4A:19:8D:07:5F:91:58:CB:7C:3D:F3:7F:66:7F
Certificate issuer:       /CN=c5b95c061315e97f70f743ac95aabdba3585e1b7
Certificate serial:       07B7F6BF
Authority key identifier: C5:B9:5C:06:13:15:E9:7F:70:F7:43:AC:95:AA:BD:BA:35:85:E1:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xblcBhMV6X9w90Oslaq9ujWF4bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/875f41-2bc6-43b7-9ed4-20772f0d1656/1/oQL4PdBnShmNB1-RWMt8PfN_Zn8.roa
Signing time:             Sat 01 Jan 2022 09:55:38 +0000
ROA not before:           Sat 01 Jan 2022 09:55:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44285
IP address blocks:        45.87.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129496767 (0x7b7f6bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5b95c061315e97f70f743ac95aabdba3585e1b7
        Validity
            Not Before: Jan  1 09:55:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a102f83dd0674a198d075f9158cb7c3df37f667f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:bc:7a:62:2f:da:a2:92:09:b9:3a:00:2a:
                    62:e9:b9:5a:ad:76:20:8b:dd:10:73:76:5b:65:cb:
                    e9:eb:9f:ba:45:b7:17:ed:13:96:6f:3f:21:ba:78:
                    06:80:40:9b:bf:4a:6c:8a:d3:ce:8a:15:22:a7:f5:
                    f8:cb:9d:33:7e:df:92:f7:1c:05:28:23:b5:b3:2b:
                    44:b4:4e:5d:2a:49:28:00:87:4e:e1:9c:7c:23:a4:
                    55:29:02:33:79:d1:05:23:bf:d4:ed:c0:d0:3a:3b:
                    9a:b9:e6:93:35:08:3b:aa:5a:65:81:df:e0:e4:b9:
                    69:70:94:22:dd:62:b6:9a:0b:e5:7b:3a:1b:dd:ea:
                    fb:c6:2f:78:52:d2:7b:a7:7b:c0:c7:22:da:7a:42:
                    6e:05:85:6d:6d:31:e0:b2:07:f6:4d:ad:bf:52:9a:
                    45:49:78:b7:30:c3:1e:c7:08:9f:ae:24:39:db:b4:
                    54:95:03:71:84:65:ee:37:6f:b4:39:52:18:e5:b2:
                    e0:df:83:9a:0b:b3:99:ae:d3:93:01:55:db:bf:0c:
                    f5:56:28:17:be:91:46:65:6b:32:a0:e3:29:72:7b:
                    eb:8f:05:c7:c3:12:50:08:35:85:8f:a6:7b:81:8d:
                    8c:ed:5a:a8:68:e8:c9:cd:65:51:ac:27:76:7d:dd:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:02:F8:3D:D0:67:4A:19:8D:07:5F:91:58:CB:7C:3D:F3:7F:66:7F
            X509v3 Authority Key Identifier:
                keyid:C5:B9:5C:06:13:15:E9:7F:70:F7:43:AC:95:AA:BD:BA:35:85:E1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xblcBhMV6X9w90Oslaq9ujWF4bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/875f41-2bc6-43b7-9ed4-20772f0d1656/1/oQL4PdBnShmNB1-RWMt8PfN_Zn8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/875f41-2bc6-43b7-9ed4-20772f0d1656/1/xblcBhMV6X9w90Oslaq9ujWF4bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:94:d6:ed:7b:40:7e:cc:f8:e9:af:7d:94:11:c4:f0:f6:
         d2:84:cf:f8:10:29:52:04:d5:67:56:53:9b:2c:f7:de:9f:ab:
         18:3f:2d:52:96:37:55:bc:e8:df:23:0c:64:2f:4f:b9:a3:bc:
         05:73:59:ff:95:30:c4:66:55:af:f2:9f:8a:18:81:13:b6:9c:
         59:d0:6f:0d:4f:70:06:9c:4a:e2:8a:00:6f:4b:9d:a4:1f:17:
         2b:f2:41:42:c5:9b:39:43:5d:1b:bd:7e:c4:b4:64:0b:e1:9a:
         e3:24:dc:36:84:4c:f1:38:42:9a:ea:bc:27:cf:b7:3e:0e:b0:
         46:b0:a6:05:0b:d1:52:74:7c:6a:b5:ba:73:0b:71:ee:33:0f:
         f7:0b:2e:12:1f:bc:97:d3:de:69:71:71:2f:8d:32:eb:fd:31:
         ad:f8:4e:83:4f:dc:19:23:92:21:e0:38:c9:89:0b:ae:1e:1f:
         50:7c:5a:0e:34:19:ea:55:cf:56:77:f0:8b:76:a7:80:2c:ce:
         5b:42:8d:46:df:75:bb:c2:7c:f8:1b:4a:10:d1:8e:a4:fe:1a:
         fe:eb:82:9b:c2:06:c1:eb:76:de:15:09:a7:38:ae:02:d6:59:
         0d:e0:15:50:1d:86:37:e5:16:96:51:c3:c7:ad:a0:8c:ec:8f:
         c6:1b:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:41 2024 by rpki-client on console-ams.rpki-client.org