Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/t_spVddCef3QgmJ8xcFNrG_1Kk4.roa
File:                     t_spVddCef3QgmJ8xcFNrG_1Kk4.roa (raw, json)
Hash identifier:          WifvnKZXWY9eH7POLkbaeqIK4T5de1UzNP116OZQGc8=
Subject key identifier:   B7:FB:29:55:D7:42:79:FD:D0:82:62:7C:C5:C1:4D:AC:6F:F5:2A:4E
Certificate issuer:       /CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
Certificate serial:       03DFE7AD
Authority key identifier: 45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/t_spVddCef3QgmJ8xcFNrG_1Kk4.roa
Signing time:             Sat 01 Jan 2022 12:59:17 +0000
ROA not before:           Sat 01 Jan 2022 12:59:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51030
IP address blocks:        185.121.227.0/24 maxlen: 24
                          185.188.140.0/24 maxlen: 24
                          185.188.140.0/22 maxlen: 24
                          185.188.143.0/24 maxlen: 24
                          185.188.142.0/24 maxlen: 24
                          185.188.141.0/24 maxlen: 24
                          185.121.226.0/24 maxlen: 24
                          185.121.225.0/24 maxlen: 24
                          185.121.224.0/22 maxlen: 24
                          185.121.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65005485 (0x3dfe7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
        Validity
            Not Before: Jan  1 12:59:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7fb2955d74279fdd082627cc5c14dac6ff52a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:af:ca:26:42:59:10:7c:9e:09:fb:be:16:fb:
                    a5:ca:74:9f:8d:70:98:6a:ee:f2:45:7c:9a:73:e6:
                    00:0a:b6:3f:9c:66:80:04:61:08:50:e3:e6:83:97:
                    d9:70:ab:d9:ca:ce:8f:64:c2:23:54:17:9d:14:0a:
                    32:19:ae:03:ec:46:16:9c:4f:f6:37:82:c7:9d:47:
                    21:45:b9:5d:60:b2:1a:d3:58:60:e0:cb:5c:56:58:
                    a1:55:56:0c:18:31:2e:20:55:8f:75:e0:aa:05:eb:
                    d8:5f:e6:04:0b:0b:58:3d:7d:d5:a3:f3:66:b1:ba:
                    cc:b0:8d:6e:e4:e6:e1:6d:37:99:4b:39:8a:c9:78:
                    3b:e6:0e:f0:46:ca:1f:a1:90:fe:bf:68:05:91:70:
                    24:1c:89:70:fb:33:0c:73:10:d1:54:41:25:af:85:
                    f0:92:c5:8c:c3:75:76:54:59:f0:ea:39:8a:fc:17:
                    c0:23:11:bd:0a:1e:a8:91:d8:b2:5e:84:c5:d6:e5:
                    32:e2:1a:ba:5a:bd:2f:ac:1d:63:c8:e5:3c:31:fa:
                    bf:b5:d1:03:76:4b:0a:84:52:74:de:24:73:a6:62:
                    48:f0:38:a0:cd:35:a8:da:51:99:21:00:9b:0b:72:
                    54:29:61:be:cf:1c:ba:ce:b2:e0:94:2f:b4:82:ef:
                    7b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FB:29:55:D7:42:79:FD:D0:82:62:7C:C5:C1:4D:AC:6F:F5:2A:4E
            X509v3 Authority Key Identifier:
                keyid:45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/t_spVddCef3QgmJ8xcFNrG_1Kk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.224.0/22
                  185.188.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:55:b1:80:a1:23:23:b5:7d:b6:e3:08:3c:3b:c7:bb:57:
         fa:02:da:d7:31:ff:5e:20:1d:9b:a4:bf:10:81:3e:5a:38:b6:
         02:17:00:c8:bc:d8:bb:20:9b:bb:47:4e:f8:24:b5:29:b3:82:
         f2:20:8f:7f:8a:26:4b:f0:b3:66:01:6c:16:39:f6:eb:cc:19:
         f3:69:9b:04:d8:a4:a7:67:a7:cf:05:ae:eb:a4:c6:cf:13:37:
         04:1a:96:89:2f:2c:9a:93:f0:83:33:88:06:8e:66:6b:a9:f7:
         8a:f6:d4:bd:b2:4d:9c:4a:bb:ac:f5:8d:64:1d:2f:71:51:28:
         cf:2c:17:10:fd:8e:72:49:9d:58:ad:d0:d7:a5:50:34:9b:04:
         a8:85:c6:63:76:1e:c8:70:ae:18:00:dd:4d:89:2f:b8:ae:8d:
         8c:dd:0e:4b:ee:6e:c7:02:63:35:07:13:31:1b:3a:97:4b:2f:
         4b:4a:c7:45:e4:80:68:38:65:5a:4c:58:9a:4f:c2:3f:2a:03:
         32:c0:63:76:c8:63:41:e1:1e:97:d6:99:69:62:2b:43:f3:d8:
         0a:b4:81:d7:3f:3f:2a:75:fc:9e:a8:09:8a:eb:7b:11:44:83:
         5c:cd:1a:dc:69:6a:7b:05:35:ac:17:8c:76:c8:68:99:7e:89:
         48:ae:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:49 2024 by rpki-client on console-ams.rpki-client.org