Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/kQ3YSqxWC-uIlPvkjTm8gZljrFQ.roa
File:                     kQ3YSqxWC-uIlPvkjTm8gZljrFQ.roa (raw, json)
Hash identifier:          j/cjadGXTUiXOX4agkHNvNijvuiTMaOqobkCdjBWCYo=
Subject key identifier:   91:0D:D8:4A:AC:56:0B:EB:88:94:FB:E4:8D:39:BC:81:99:63:AC:54
Certificate issuer:       /CN=79b0a17a0e8749a4fbefc356744de3ab04080934
Certificate serial:       015D1E8D
Authority key identifier: 79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/kQ3YSqxWC-uIlPvkjTm8gZljrFQ.roa
Signing time:             Tue 17 May 2022 16:07:46 +0000
ROA not before:           Tue 17 May 2022 16:07:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202833
IP address blocks:        45.158.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22879885 (0x15d1e8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b0a17a0e8749a4fbefc356744de3ab04080934
        Validity
            Not Before: May 17 16:07:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=910dd84aac560beb8894fbe48d39bc819963ac54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:1b:52:30:26:30:da:7d:f9:1f:9f:ca:a2:
                    1e:5e:5b:be:2a:5d:c1:c8:92:1f:54:54:63:e0:d7:
                    67:c5:00:f8:c8:73:da:c9:57:c6:6c:f2:f1:3c:a0:
                    32:48:1e:36:55:f0:4d:d9:37:de:40:27:8c:cc:d7:
                    82:af:a4:c3:b5:8e:79:3d:ff:7e:12:39:d3:ba:b4:
                    d1:75:93:cc:73:06:c3:16:e4:59:d1:cd:db:69:fe:
                    10:cb:f0:7d:33:9d:d3:26:15:56:4e:d8:ff:fb:47:
                    98:ae:29:cb:db:b0:66:d3:f4:96:f3:59:19:2b:14:
                    74:f6:49:2d:e9:b2:51:44:b2:4a:7d:5b:25:cf:d5:
                    6e:57:02:1c:5d:1e:c7:ca:60:41:41:ae:ef:e3:58:
                    d2:0b:34:dd:4d:e6:43:cd:ba:b5:9f:26:97:93:4d:
                    69:e5:df:ed:32:df:05:23:b7:4a:4a:33:9b:60:c7:
                    55:44:a3:9d:16:29:de:8d:f1:a0:7d:8d:5b:42:03:
                    02:ac:e8:9a:41:9c:b6:aa:11:84:d9:c0:26:19:2c:
                    52:d8:cd:13:8f:ee:74:21:ec:18:1a:55:a5:27:c6:
                    df:c7:cd:54:d9:1d:ac:4f:ab:0a:a5:47:1f:17:72:
                    94:c5:5b:ad:81:83:11:38:28:99:86:a2:99:e2:59:
                    43:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0D:D8:4A:AC:56:0B:EB:88:94:FB:E4:8D:39:BC:81:99:63:AC:54
            X509v3 Authority Key Identifier:
                keyid:79:B0:A1:7A:0E:87:49:A4:FB:EF:C3:56:74:4D:E3:AB:04:08:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebCheg6HSaT778NWdE3jqwQICTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/kQ3YSqxWC-uIlPvkjTm8gZljrFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/aece21-99e3-49af-b958-636a67917f00/1/ebCheg6HSaT778NWdE3jqwQICTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:f9:82:55:b8:fa:b6:c5:07:d7:d5:9b:be:a9:30:c4:34:4d:
         24:fa:48:b7:94:d8:7f:95:57:ab:a0:ae:ed:46:b8:c0:25:68:
         dd:60:ff:04:bd:e2:25:28:85:13:ca:74:2e:0e:b0:66:f5:59:
         0e:eb:2f:02:90:38:e8:1a:06:6e:42:58:d8:83:2b:c3:c6:6f:
         60:f3:0b:eb:56:e1:35:73:f5:1a:27:5b:15:a3:99:24:75:39:
         44:4f:dc:3f:a6:d8:dc:cc:1b:67:7f:36:7f:5d:34:ff:30:e7:
         a3:2f:61:aa:6d:a2:cd:e5:fe:26:f2:2c:f5:66:e6:8a:53:df:
         24:82:d7:78:27:4e:74:c2:63:80:48:f9:07:03:01:91:ed:d8:
         1e:78:50:c9:8e:5f:ad:70:23:72:69:5f:13:cd:a0:82:5d:f4:
         16:71:50:42:94:2f:4e:51:33:a4:39:21:80:37:e3:97:e2:95:
         04:6c:1f:1d:af:63:47:f2:c8:41:ca:5b:6a:84:5e:88:6b:21:
         b1:d6:0c:6d:90:80:46:ac:0e:43:f3:48:c4:46:9f:7e:a8:13:
         da:46:9f:46:16:f4:40:78:fa:9f:09:9e:82:60:60:25:a4:b3:
         d5:57:a6:cf:80:dd:a5:5a:3a:0e:5e:7f:c0:04:1e:22:76:cc:
         91:03:64:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-fra.rpki-client.org