Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/8WLInW0ItvyuIYvkdwZxyLpwwAM.roa
File:                     8WLInW0ItvyuIYvkdwZxyLpwwAM.roa (raw, json)
Hash identifier:          I56NwJv4KyDinWybmI9Ic8gV4PC6MLY+OXV18k5VPbk=
Subject key identifier:   F1:62:C8:9D:6D:08:B6:FC:AE:21:8B:E4:77:06:71:C8:BA:70:C0:03
Certificate issuer:       /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial:       0184E1FDAB66FD28B6E41346CF98F6C49C3B
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/8WLInW0ItvyuIYvkdwZxyLpwwAM.roa
Signing time:             Mon 05 Dec 2022 11:13:28 +0000
ROA not before:           Mon 05 Dec 2022 11:13:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15731
IP address blocks:        45.143.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e1:fd:ab:66:fd:28:b6:e4:13:46:cf:98:f6:c4:9c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
        Validity
            Not Before: Dec  5 11:13:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f162c89d6d08b6fcae218be4770671c8ba70c003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:81:55:a3:e4:0e:d5:b8:f4:db:5f:c7:29:59:
                    27:fc:24:70:b0:3d:fa:1e:ab:c8:51:ca:13:cf:a5:
                    56:c7:0c:71:79:0d:d5:21:27:e0:ab:1e:d2:13:c1:
                    1e:f7:c8:df:52:b4:2c:02:cf:b6:50:d5:98:48:d5:
                    e3:ba:93:37:b1:c1:37:e6:22:c8:b1:1c:4f:a7:0c:
                    09:c6:ec:1f:68:d1:40:fe:6c:f3:93:dc:cf:5e:fc:
                    09:5b:33:3f:22:5c:7f:95:7b:dc:03:6a:dd:a7:d1:
                    9d:c6:e5:61:5f:1c:fa:92:4c:53:0c:cc:6d:dd:6e:
                    f5:6c:e5:eb:08:94:b8:76:91:54:92:bc:45:c2:96:
                    da:84:ee:5e:a2:1e:73:75:10:e6:62:49:e7:01:0e:
                    29:9b:4e:d2:f6:b3:0d:91:5d:19:9d:f5:d7:56:12:
                    ad:43:33:f1:8d:e1:60:f9:1e:57:56:ae:c6:98:41:
                    33:b7:c9:8f:b9:62:e6:da:cd:34:70:85:d0:73:c0:
                    d6:5e:00:0e:78:54:a3:2e:d2:39:f5:53:9f:5f:77:
                    96:e0:69:11:8f:0d:f3:1e:06:0b:50:16:fc:c2:c7:
                    7f:ce:f9:80:54:1e:1b:48:a4:84:c4:15:69:1e:0c:
                    d9:40:db:d2:ed:78:13:d2:8c:c3:55:14:5a:0a:b0:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:62:C8:9D:6D:08:B6:FC:AE:21:8B:E4:77:06:71:C8:BA:70:C0:03
            X509v3 Authority Key Identifier:
                keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/8WLInW0ItvyuIYvkdwZxyLpwwAM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ce:72:e7:55:0d:cd:b8:85:8f:c6:12:f2:91:d9:8e:45:2d:
         5e:88:28:da:53:f3:0d:d4:a0:d2:e0:31:e7:fd:be:3b:3d:5e:
         8c:63:b1:74:98:21:d7:4f:0f:c0:f8:ea:de:5b:ab:ba:0d:1a:
         19:d6:f8:05:be:78:b8:ce:17:0b:b0:8e:d9:cf:0b:d5:48:c1:
         58:87:3c:23:47:dd:b7:51:78:2b:13:db:8f:30:a3:3d:78:43:
         a9:49:5f:8e:c4:28:ec:68:1b:b3:f4:d0:bc:11:78:f2:c8:76:
         94:ac:87:e5:1d:7d:6a:9c:08:e2:82:d0:33:07:94:d0:5a:00:
         49:23:79:1f:5e:8e:0d:65:32:61:ce:f3:5b:db:2f:d2:a8:ca:
         1f:b3:0d:61:97:58:32:f7:3a:e7:92:b2:5a:bf:0d:84:34:02:
         a8:f5:dc:9a:94:3d:75:e2:77:5d:32:07:d4:34:04:a8:76:75:
         04:eb:23:29:16:bd:4e:3e:c7:bf:f2:fb:c7:d1:18:e1:14:02:
         ba:76:bf:d5:6a:65:e4:fa:54:e0:35:d0:14:a9:54:08:ab:c9:
         13:c4:14:2f:ff:54:ff:c6:e2:41:94:c2:10:4c:1c:5f:ed:48:
         dc:3e:77:15:d4:13:fb:87:01:50:3b:bb:f1:c3:25:0a:36:f2:
         11:04:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:00 2024 by rpki-client on console-fra.rpki-client.org