Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w_HMQt20Ivwo5dHc-CwAoWbnSZE.roa
File:                     w_HMQt20Ivwo5dHc-CwAoWbnSZE.roa (raw, json)
Hash identifier:          oCADkSjXjJJW7yevW43kbIyX060BpiKNRF1MAKBCfX8=
Subject key identifier:   C3:F1:CC:42:DD:B4:22:FC:28:E5:D1:DC:F8:2C:00:A1:66:E7:49:91
Certificate issuer:       /CN=c344b6e4b94f19437bd343217e8e5527396463eb
Certificate serial:       0691FB80
Authority key identifier: C3:44:B6:E4:B9:4F:19:43:7B:D3:43:21:7E:8E:55:27:39:64:63:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0S25LlPGUN700Mhfo5VJzlkY-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w_HMQt20Ivwo5dHc-CwAoWbnSZE.roa
Signing time:             Sat 01 Jan 2022 05:00:18 +0000
ROA not before:           Sat 01 Jan 2022 05:00:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209044
IP address blocks:        5.183.48.0/22 maxlen: 24
                          2a0e:d200::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110230400 (0x691fb80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c344b6e4b94f19437bd343217e8e5527396463eb
        Validity
            Not Before: Jan  1 05:00:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3f1cc42ddb422fc28e5d1dcf82c00a166e74991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:5e:a9:67:10:b5:de:9b:3d:bf:40:8d:75:
                    bc:8e:6e:37:ba:83:25:87:ab:9f:49:69:59:fa:61:
                    44:45:f1:14:af:48:ea:05:e5:f2:45:b3:34:fa:69:
                    de:c6:d6:ed:a1:9b:5c:4b:c4:b2:e2:89:8b:56:b4:
                    b5:94:62:7f:48:f8:75:4f:c5:20:27:03:af:fe:46:
                    0f:8a:a9:d9:b2:c1:4f:8f:91:c6:87:75:2c:5f:fb:
                    cb:62:90:b8:92:22:87:59:d8:89:70:74:bd:71:c7:
                    11:aa:d5:aa:9d:45:26:b1:47:22:43:cc:1a:24:de:
                    d2:0e:ae:12:fa:48:c8:a1:2a:a4:75:18:ca:9f:3a:
                    1a:78:a1:4b:95:9c:e3:5e:35:e4:1f:fd:24:5d:1f:
                    3d:89:e8:19:df:dc:58:fe:b9:f6:33:15:cd:aa:2e:
                    ae:f3:35:f7:d8:e1:f1:8b:12:23:86:f5:c7:4f:7a:
                    5d:78:c3:81:54:87:f4:95:f8:0d:10:14:fb:2d:fc:
                    00:03:af:cd:e4:89:f3:b2:5f:41:48:4c:a0:22:44:
                    30:ea:e0:6f:53:60:c4:a5:01:19:7e:4c:1f:62:11:
                    7e:25:a5:52:6a:a1:e6:9f:2d:7e:fd:0f:db:9f:6c:
                    60:e0:2a:78:e8:c7:53:a8:4c:f6:09:3e:94:84:a1:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F1:CC:42:DD:B4:22:FC:28:E5:D1:DC:F8:2C:00:A1:66:E7:49:91
            X509v3 Authority Key Identifier:
                keyid:C3:44:B6:E4:B9:4F:19:43:7B:D3:43:21:7E:8E:55:27:39:64:63:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S25LlPGUN700Mhfo5VJzlkY-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w_HMQt20Ivwo5dHc-CwAoWbnSZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w0S25LlPGUN700Mhfo5VJzlkY-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.48.0/22
                IPv6:
                  2a0e:d200::/29

    Signature Algorithm: sha256WithRSAEncryption
         10:af:9a:78:35:ab:01:a1:3e:18:f8:17:23:75:12:ab:0d:0d:
         a5:1e:cb:e4:78:11:0d:dd:88:07:24:a2:4b:8d:94:57:c6:d9:
         ce:84:17:b0:14:be:9a:8e:95:dd:31:4f:27:b5:2a:50:05:64:
         73:a3:91:26:25:32:4c:ee:8f:dd:b4:8e:c6:75:05:b4:1b:3c:
         8d:ca:54:22:d7:41:fa:1e:28:51:60:92:c6:32:60:05:f4:5e:
         ac:86:c0:41:e3:95:31:27:91:a2:3c:4f:54:cf:fc:c4:08:11:
         57:4a:70:05:b3:7d:73:d3:66:b6:d3:b9:29:b0:13:ba:71:33:
         1c:6f:6c:41:1b:a0:4a:59:1e:5e:63:a4:09:14:03:28:b3:96:
         3e:d9:3c:2a:72:eb:5f:3b:6c:2d:74:85:5b:86:f5:c3:4b:a3:
         f7:65:25:0e:3a:ac:39:d8:59:72:cd:db:5a:f6:45:71:a5:62:
         3f:ba:f5:82:6e:58:62:14:09:7e:89:99:9c:f2:6c:a6:cb:43:
         f0:6c:0d:b7:bc:92:34:b1:d3:26:3a:5b:b5:8f:7b:be:90:f0:
         87:e3:0d:2d:46:29:12:52:06:af:2c:12:3c:77:97:a6:ef:34:
         4c:4e:9e:92:d4:fb:3d:be:58:c1:cd:d4:42:ed:99:1d:7c:49:
         88:21:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:45 2024 by rpki-client on console-ams.rpki-client.org