Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/6H7X9GZd6iBG-zNum_ZmvJN9poA.roa
File:                     6H7X9GZd6iBG-zNum_ZmvJN9poA.roa (raw, json)
Hash identifier:          X51lu7bB8yuQgZ5t5D9KWipRPTtULdiBP8YkI4BnQPg=
Subject key identifier:   E8:7E:D7:F4:66:5D:EA:20:46:FB:33:6E:9B:F6:66:BC:93:7D:A6:80
Certificate issuer:       /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial:       158D52
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/6H7X9GZd6iBG-zNum_ZmvJN9poA.roa
Signing time:             Sat 01 Jan 2022 01:56:01 +0000
ROA not before:           Sat 01 Jan 2022 01:56:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.156.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412434 (0x158d52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
        Validity
            Not Before: Jan  1 01:56:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e87ed7f4665dea2046fb336e9bf666bc937da680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:e0:52:86:4b:8a:ae:27:60:71:4f:49:32:
                    c6:03:81:fd:cc:f2:b2:a3:72:78:95:8d:24:af:fd:
                    c0:6d:e5:42:62:c8:7a:c6:f5:91:ae:80:7c:7d:9d:
                    14:ba:41:68:24:8a:ba:3d:12:d0:ea:56:50:2f:f9:
                    d6:95:7b:f7:db:9c:c5:53:ca:13:df:9c:c4:7d:b5:
                    54:dd:54:51:cb:48:45:f0:75:45:5a:18:5d:32:8c:
                    ef:89:62:74:5b:89:c4:d9:6f:a4:d5:f8:e9:73:01:
                    2c:aa:68:68:a6:2d:e8:ca:66:d5:a0:c9:77:5b:d5:
                    9e:aa:28:b4:d8:e6:be:41:c0:72:31:d9:b3:43:ef:
                    d4:ba:55:d3:76:01:bd:f3:0d:93:26:de:06:8c:97:
                    fc:c8:a2:b0:ad:f4:bf:e6:1b:bf:34:8f:62:db:5c:
                    61:02:fe:8c:ea:09:dc:78:41:5d:cf:dd:3f:eb:0e:
                    b1:bf:65:4d:01:00:27:34:fc:05:5c:66:b1:d7:37:
                    52:41:4b:31:c2:d4:27:ea:5c:88:2e:00:85:8f:de:
                    04:e7:5e:8f:41:71:03:00:14:c2:2c:f5:f1:35:42:
                    19:d9:7c:76:68:88:d8:11:98:dd:aa:12:2d:8a:d5:
                    2b:29:57:8f:58:50:81:62:3b:f4:be:93:20:c4:61:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7E:D7:F4:66:5D:EA:20:46:FB:33:6E:9B:F6:66:BC:93:7D:A6:80
            X509v3 Authority Key Identifier:
                keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/6H7X9GZd6iBG-zNum_ZmvJN9poA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:79:b7:f6:43:81:20:e8:17:dc:39:92:7d:47:48:f6:b4:
         dd:f5:95:ca:c0:a6:d5:e8:43:8a:ea:cb:76:d6:1a:04:d4:36:
         07:ac:65:07:0d:d4:40:b1:04:93:be:38:07:08:ec:c1:d4:a3:
         05:5a:a7:2b:32:1a:7b:6f:46:bd:cd:72:2a:82:76:76:2e:95:
         72:9d:69:42:86:fd:3c:41:d8:eb:25:f9:cb:ad:32:51:6b:54:
         3b:cd:ac:10:b2:ff:02:d0:26:83:98:29:3a:57:a1:09:29:04:
         48:34:a4:80:7a:28:29:6f:26:19:bd:72:d2:f1:24:0f:32:a0:
         38:da:5a:ff:c9:65:96:72:ea:32:42:b3:ec:00:e7:60:41:3f:
         a3:51:42:9f:82:8b:1b:65:68:53:f7:04:f5:d0:4c:27:51:19:
         c2:db:00:3d:83:00:a5:65:11:bf:42:a8:90:7d:c9:07:46:2e:
         49:99:12:f7:5e:0c:bf:6c:57:c2:73:dd:1a:03:35:4b:1e:b0:
         58:d1:04:c3:e4:6e:d7:1a:0c:f2:0a:0e:31:88:15:60:db:03:
         3c:16:46:0d:d1:97:e4:e8:5d:ea:79:63:b4:e8:15:d0:76:e9:
         f1:08:70:84:3e:39:f0:fb:aa:9b:9a:4c:1b:1f:a3:5b:1b:5a:
         58:91:81:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org