Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/dPx6kv3qqQHi_2uH2lBIfphIJW8.roa
File:                     dPx6kv3qqQHi_2uH2lBIfphIJW8.roa (raw, json)
Hash identifier:          qrsh/2KQEOSFxOQOH1jlO9T4CS1EUd2zZReBpc3u0Is=
Subject key identifier:   74:FC:7A:92:FD:EA:A9:01:E2:FF:6B:87:DA:50:48:7E:98:48:25:6F
Certificate issuer:       /CN=6bba5e8656f8b6c5c1e690312dd486b872f1ce52
Certificate serial:       015A2D6F
Authority key identifier: 6B:BA:5E:86:56:F8:B6:C5:C1:E6:90:31:2D:D4:86:B8:72:F1:CE:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7pehlb4tsXB5pAxLdSGuHLxzlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/dPx6kv3qqQHi_2uH2lBIfphIJW8.roa
Signing time:             Sat 01 Jan 2022 15:04:34 +0000
ROA not before:           Sat 01 Jan 2022 15:04:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31400
IP address blocks:        45.10.24.0/24 maxlen: 24
                          45.10.24.0/22 maxlen: 22
                          45.10.26.0/24 maxlen: 24
                          45.10.25.0/24 maxlen: 24
                          45.10.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22687087 (0x15a2d6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bba5e8656f8b6c5c1e690312dd486b872f1ce52
        Validity
            Not Before: Jan  1 15:04:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=74fc7a92fdeaa901e2ff6b87da50487e9848256f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:19:93:ac:3f:7d:4c:84:16:91:ef:5d:ce:4b:
                    67:65:39:dc:16:c1:bd:92:8f:ec:98:b1:ab:b3:c9:
                    4d:5d:d9:82:df:27:42:c1:da:c1:7b:22:85:e8:ac:
                    77:e1:a4:ff:54:45:a2:f5:d0:56:47:d2:28:08:37:
                    46:86:10:4b:bb:92:4e:07:c9:c4:09:2a:93:22:29:
                    0a:30:f3:5b:25:ce:9c:89:d1:a0:c9:e4:8f:d1:f8:
                    83:b6:fa:66:73:da:ec:3c:ee:43:b7:7e:72:92:c6:
                    b9:4e:1b:76:54:09:75:0c:23:d9:a7:39:da:b6:ac:
                    ea:87:eb:61:58:3d:56:fb:34:bd:a3:c4:b8:88:d2:
                    d7:83:11:cf:c7:74:0d:a9:90:63:22:58:8a:7e:3b:
                    97:6c:e1:28:89:c5:43:ce:0b:3b:74:cf:ae:4b:b2:
                    89:f8:40:17:4b:37:11:3b:50:cb:78:9d:0f:48:98:
                    ef:6f:51:fb:9c:b7:d5:c6:89:09:89:c5:ec:1f:3f:
                    31:a6:a2:f6:b1:66:e8:1c:4b:c8:8d:e5:e1:58:71:
                    79:d4:97:52:02:5a:1b:bb:73:1d:b6:30:5d:e5:f6:
                    c8:ee:c1:f8:9e:e6:3e:6d:b4:c0:df:68:42:20:8d:
                    3f:ac:70:3b:45:16:cd:03:52:c5:38:4c:42:47:9c:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FC:7A:92:FD:EA:A9:01:E2:FF:6B:87:DA:50:48:7E:98:48:25:6F
            X509v3 Authority Key Identifier:
                keyid:6B:BA:5E:86:56:F8:B6:C5:C1:E6:90:31:2D:D4:86:B8:72:F1:CE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7pehlb4tsXB5pAxLdSGuHLxzlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/dPx6kv3qqQHi_2uH2lBIfphIJW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/a7pehlb4tsXB5pAxLdSGuHLxzlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:77:01:bf:54:07:5c:c5:77:68:de:08:00:8e:98:97:9f:0b:
         eb:3c:c7:55:16:1f:e7:a4:36:9e:68:e6:7d:ad:5b:cd:e3:43:
         95:2a:89:52:e2:a6:2a:37:f2:8f:95:88:2f:03:01:09:3c:77:
         f2:b7:69:85:29:52:bc:a0:2c:1b:38:6b:9a:43:95:18:87:2e:
         97:66:3e:b3:8d:c9:5d:78:f7:77:2b:2b:0e:97:f2:cf:4b:ee:
         9e:cb:b0:e8:5e:66:23:ed:ab:9a:3b:84:9f:16:70:a0:db:18:
         80:12:eb:14:9f:b8:d0:81:48:8f:37:24:5c:16:c4:1f:5b:36:
         8e:42:e3:2c:01:54:a7:b3:89:36:67:b0:94:75:f0:20:40:d0:
         4f:b1:bf:d1:9d:f8:1f:5a:88:9c:03:ea:02:01:3a:59:ab:88:
         e1:05:2d:21:18:6b:64:6b:de:08:a1:09:19:4c:e3:ba:c3:49:
         f1:8a:7f:17:4b:af:fe:c9:4e:57:de:ae:ea:73:1e:47:67:52:
         a6:fd:be:18:b5:af:bc:48:e8:47:5a:a4:5d:38:90:a6:a0:9e:
         70:d0:fd:b8:ae:b5:4a:ba:d0:54:a1:1d:03:fe:3c:ed:a9:29:
         9e:22:5a:78:cb:6b:6b:46:a7:45:6f:7b:f1:38:10:b4:88:f1:
         77:19:25:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:09 2024 by rpki-client on console-ams.rpki-client.org