Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/1ub07G77YIPem-TgXc9yxFWzCOI.roa
File:                     1ub07G77YIPem-TgXc9yxFWzCOI.roa (raw, json)
Hash identifier:          cklEHRx3TjjRu/DnhR5JVG2uqgYF4zX4pMuET+3+oW4=
Subject key identifier:   D6:E6:F4:EC:6E:FB:60:83:DE:9B:E4:E0:5D:CF:72:C4:55:B3:08:E2
Certificate issuer:       /CN=79b0a17a0e8749a4fbefc356744de3ab04080934
Certificate serial:       27404B
Authority key identifier: 79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/1ub07G77YIPem-TgXc9yxFWzCOI.roa
Signing time:             Sat 01 Jan 2022 01:59:43 +0000
ROA not before:           Sat 01 Jan 2022 01:59:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202833
IP address blocks:        45.158.84.0/22 maxlen: 22
                          45.158.84.0/23 maxlen: 23
                          45.158.84.0/24 maxlen: 24
                          45.158.85.0/24 maxlen: 24
                          45.158.86.0/24 maxlen: 24
                          45.158.87.0/24 maxlen: 24
                          45.158.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2572363 (0x27404b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b0a17a0e8749a4fbefc356744de3ab04080934
        Validity
            Not Before: Jan  1 01:59:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6e6f4ec6efb6083de9be4e05dcf72c455b308e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:46:23:9e:8e:18:2e:74:10:b4:c4:f2:20:
                    64:3c:d2:77:7f:49:5e:6d:f9:32:e6:55:8f:f6:07:
                    b0:c2:bf:78:54:b1:88:89:9e:d4:b0:c6:40:46:88:
                    4b:27:08:39:25:67:c1:87:8a:74:bd:b8:b7:fb:47:
                    88:44:43:5f:8c:e8:17:bd:13:0c:1b:c9:5a:cb:8b:
                    8b:7e:ee:43:25:9a:d7:fb:50:28:74:3e:c4:ea:5b:
                    45:4a:0e:eb:5e:45:28:6a:9e:22:cb:12:c1:01:74:
                    3f:a5:64:db:26:ea:48:84:db:7e:37:ac:f2:b9:58:
                    e2:d3:36:4d:0e:d0:4f:41:67:f5:22:21:42:9b:b1:
                    00:a9:d5:a6:6f:78:f5:30:a3:d2:ee:5d:b1:53:c9:
                    b1:71:6b:c1:29:cb:2a:67:53:33:e0:3f:97:6b:75:
                    9b:12:bc:ad:a2:cb:e1:0c:bd:d0:f7:57:8b:ec:5d:
                    89:35:05:33:c5:c4:a5:c7:ca:60:2f:21:8a:ff:57:
                    b9:ea:11:11:8d:4e:58:e1:93:68:ca:1a:db:17:24:
                    69:de:32:45:eb:28:48:8e:68:6c:83:ed:db:88:cd:
                    5d:73:48:a3:99:d8:5b:15:2e:d6:ff:81:3c:5e:82:
                    13:70:f3:8d:b6:5d:53:9b:3c:05:a8:83:d7:3c:fe:
                    f1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E6:F4:EC:6E:FB:60:83:DE:9B:E4:E0:5D:CF:72:C4:55:B3:08:E2
            X509v3 Authority Key Identifier:
                keyid:79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/1ub07G77YIPem-TgXc9yxFWzCOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:49:9a:f0:f7:e5:db:05:76:03:58:a2:ad:f3:74:4a:8b:28:
         75:70:fc:6e:ec:f1:37:70:71:2d:9f:12:d6:64:c7:2c:f0:b7:
         e1:00:64:81:1b:10:be:82:a5:aa:19:db:4a:0f:2a:24:f6:38:
         38:5c:28:43:7e:99:86:75:1e:ab:af:be:72:5b:f5:73:36:63:
         fc:23:f7:c0:06:d5:59:5c:4f:99:93:6c:71:7c:03:bd:89:7a:
         e9:49:6e:2e:66:56:be:9b:59:77:52:bc:0b:70:e2:8b:39:fa:
         ff:be:46:78:5b:7d:0a:db:24:8b:06:af:7d:84:a3:57:7b:63:
         8f:4f:fb:78:d4:7a:ad:be:fb:21:9b:db:7b:15:62:2f:53:77:
         50:02:88:28:8d:87:ac:1d:69:63:8a:6f:97:cd:ad:e1:ac:c1:
         d9:5a:30:32:3b:3e:d7:11:aa:6c:29:44:e9:60:3c:62:2b:01:
         14:3b:47:fc:f8:e4:3a:33:c4:62:e1:41:4d:16:5f:d3:a5:b5:
         5c:2e:01:ca:be:83:b0:d8:10:5b:26:52:9c:49:bc:93:15:dc:
         3a:fb:aa:4c:fc:36:b4:40:81:6b:e7:5c:5d:7e:c4:e9:1d:e6:
         b7:11:7b:51:d3:63:12:d0:fe:4a:29:ef:b0:fd:28:8d:b5:ce:
         65:2d:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org