Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/0VGgoctemGeL2k6bCGvjgJ_YWkg.roa
File:                     0VGgoctemGeL2k6bCGvjgJ_YWkg.roa (raw, json)
Hash identifier:          XHtczG5Z4cxf/qm/8nBxAYLOyf+VMmUpKqcW4LUlVo4=
Subject key identifier:   D1:51:A0:A1:CB:5E:98:67:8B:DA:4E:9B:08:6B:E3:80:9F:D8:5A:48
Certificate issuer:       /CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
Certificate serial:       01856FE6F8BEF731EF495799B461916E8D14
Authority key identifier: 55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/0VGgoctemGeL2k6bCGvjgJ_YWkg.roa
Signing time:             Mon 02 Jan 2023 00:34:46 +0000
ROA not before:           Mon 02 Jan 2023 00:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7029
IP address blocks:        45.82.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:e6:f8:be:f7:31:ef:49:57:99:b4:61:91:6e:8d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
        Validity
            Not Before: Jan  2 00:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d151a0a1cb5e98678bda4e9b086be3809fd85a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:bc:a8:b1:74:ee:6c:6a:dc:83:56:aa:73:
                    c4:0b:ad:47:b0:a3:92:63:98:35:3e:53:01:da:41:
                    b3:49:d2:a5:7d:55:40:55:22:c3:d1:0e:28:ad:fd:
                    6b:ba:78:28:95:e5:6a:be:47:4f:8d:3a:90:da:c4:
                    50:77:1d:71:3c:3a:0b:07:84:55:f4:b4:1c:5d:0a:
                    65:43:68:d6:db:27:11:75:48:48:81:19:4d:e0:36:
                    cd:84:6d:68:76:75:05:98:7b:0b:e3:59:e7:7c:b6:
                    0e:75:a7:59:8a:f4:b4:93:a6:4a:52:10:a7:65:61:
                    92:e8:cc:d7:e7:a2:dd:32:72:5f:a2:d0:a6:ab:4e:
                    e1:4d:97:41:88:fd:7a:9a:be:9e:4b:b8:af:cd:5d:
                    b0:97:25:6d:27:e3:a7:05:55:ff:d3:40:3b:63:fe:
                    d2:db:b1:e2:7c:d7:d5:b6:49:16:60:6f:24:f4:a5:
                    50:9e:40:e9:93:88:e1:98:66:a7:4f:5e:48:08:0a:
                    1d:d0:bf:9e:d1:85:ab:63:a8:ef:1b:88:37:8a:1e:
                    73:a8:7c:9d:9e:b1:4a:a0:0f:ec:f5:be:74:03:15:
                    a8:69:7e:6d:77:43:e2:c3:c5:30:7d:5d:8b:01:e1:
                    0e:d0:ad:58:77:30:b7:61:13:ea:7e:c6:80:21:fc:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:51:A0:A1:CB:5E:98:67:8B:DA:4E:9B:08:6B:E3:80:9F:D8:5A:48
            X509v3 Authority Key Identifier:
                keyid:55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/0VGgoctemGeL2k6bCGvjgJ_YWkg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:82:56:6e:dc:7e:e7:25:c4:83:97:51:68:2f:0b:1b:54:c7:
         3b:e9:ed:ae:b3:11:f9:71:d0:6c:45:8d:4a:69:8d:bd:9a:34:
         2f:d9:de:50:6d:3f:8b:2b:f6:7e:29:e4:a1:09:66:55:fb:8a:
         30:25:4f:f3:6d:ba:b1:81:8f:4b:57:65:02:44:83:26:9a:60:
         ba:cb:57:32:58:68:0f:a3:d8:76:56:7d:2f:6a:f3:4d:c8:85:
         47:16:ff:0c:db:01:e2:e3:c3:cb:cd:e9:3d:74:6f:26:d4:12:
         42:3e:b7:27:ef:35:c0:ee:51:dc:b3:e7:4c:05:5a:5f:2e:7e:
         cf:51:f8:e0:b1:4c:3c:fa:6f:78:67:8f:8c:c2:c8:52:12:b9:
         cf:69:1e:b0:d3:b7:b6:fc:f3:43:f5:7a:c8:a1:c6:24:1f:fb:
         6e:fa:ff:65:11:de:a9:ca:71:8c:f8:4b:8c:c6:8c:24:29:5f:
         d2:e4:27:f2:c4:b0:71:77:10:99:3b:3d:98:1f:6c:b8:9f:d2:
         56:8f:b6:9a:ed:ab:b8:7d:88:3d:93:a4:8c:d1:cc:7c:a3:67:
         79:d3:66:99:88:77:af:23:9c:28:0c:d7:06:d4:41:25:2c:90:
         f0:d1:fe:07:a8:58:0e:84:d7:2c:e0:eb:bb:f0:11:b2:ca:ec:
         6d:a5:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:23 2024 by rpki-client on console-ams.rpki-client.org