Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/_IQi30s96NObdByECAWR7s9f8FU.roa
File:                     _IQi30s96NObdByECAWR7s9f8FU.roa (raw, json)
Hash identifier:          dF03B+68D35CxRBALaEetzRbSwfcOZ/TexBJhf2pZS0=
Subject key identifier:   FC:84:22:DF:4B:3D:E8:D3:9B:74:1C:84:08:05:91:EE:CF:5F:F0:55
Certificate issuer:       /CN=c92a3420d8f09ce520c85a2694f1a3c30720134e
Certificate serial:       0857D853
Authority key identifier: C9:2A:34:20:D8:F0:9C:E5:20:C8:5A:26:94:F1:A3:C3:07:20:13:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ySo0INjwnOUgyFomlPGjwwcgE04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/_IQi30s96NObdByECAWR7s9f8FU.roa
Signing time:             Sat 01 Jan 2022 10:57:55 +0000
ROA not before:           Sat 01 Jan 2022 10:57:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198610
IP address blocks:        45.80.71.0/24 maxlen: 24
                          45.80.68.0/24 maxlen: 24
                          45.80.69.0/24 maxlen: 24
                          45.80.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139974739 (0x857d853)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c92a3420d8f09ce520c85a2694f1a3c30720134e
        Validity
            Not Before: Jan  1 10:57:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc8422df4b3de8d39b741c84080591eecf5ff055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:38:a6:df:1d:87:18:da:c4:14:18:d5:10:
                    ac:e9:69:13:95:21:83:27:de:bc:34:ae:ef:3f:c3:
                    e8:3b:f7:35:f6:bd:0c:9b:3b:03:5c:aa:31:15:0f:
                    d1:7a:04:b7:1a:1a:5a:b3:26:2c:10:50:f4:7f:35:
                    89:3f:77:23:61:ed:6f:42:dd:1d:8a:93:fc:8d:cd:
                    5b:8c:64:18:7d:bc:d0:1c:2a:08:b7:cd:56:43:b2:
                    10:39:b0:7a:b1:07:d9:d0:29:29:e9:20:a5:97:e4:
                    69:79:1a:31:13:ca:cf:f5:6b:5d:94:84:cb:b3:e5:
                    7b:bb:1f:fe:a1:52:b2:6c:db:4a:31:b3:ce:e3:00:
                    ea:2d:aa:de:65:0f:bf:86:72:f6:67:11:1f:cd:aa:
                    4d:0b:fa:a4:25:ab:dd:02:80:27:c0:7a:35:20:7e:
                    9a:12:85:f4:e4:05:54:9f:d7:fb:22:7e:b5:73:63:
                    3c:34:e3:9c:2e:e5:56:8f:9b:94:f1:55:5e:fc:22:
                    aa:14:80:b3:45:67:4c:ae:d6:b4:b4:a6:f9:09:75:
                    97:d5:ba:78:ac:d5:2e:10:93:a1:07:76:d3:8a:22:
                    76:3c:06:b1:94:c7:bd:0e:57:13:12:f4:87:f0:56:
                    17:f7:da:67:b6:4b:ac:d3:c4:2f:96:f7:28:fc:fd:
                    12:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:84:22:DF:4B:3D:E8:D3:9B:74:1C:84:08:05:91:EE:CF:5F:F0:55
            X509v3 Authority Key Identifier:
                keyid:C9:2A:34:20:D8:F0:9C:E5:20:C8:5A:26:94:F1:A3:C3:07:20:13:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySo0INjwnOUgyFomlPGjwwcgE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/_IQi30s96NObdByECAWR7s9f8FU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a96877-301c-4792-9b04-ccaa0c2a7720/1/ySo0INjwnOUgyFomlPGjwwcgE04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:66:60:2c:2f:29:c3:37:18:89:c0:2b:2e:d7:0b:98:2d:f0:
         5c:6e:45:00:11:72:22:fb:f8:6a:89:e9:f4:b2:d2:f9:2d:0b:
         51:e0:8f:1f:94:d8:53:7f:6e:f6:37:31:07:ea:9c:d8:05:48:
         26:fe:fd:bc:2f:4b:3a:b1:19:21:a1:13:e7:e1:10:d2:c1:ae:
         f6:b4:28:c5:dd:c5:2d:5b:70:3a:51:65:c0:63:31:2f:bb:23:
         c9:ec:fb:68:e7:e4:a1:de:e0:19:7e:78:c4:a8:ac:44:d9:aa:
         41:64:a0:22:fb:dc:a3:fe:3d:a6:a9:cb:96:25:36:bd:d7:c4:
         53:69:1a:40:b5:44:ed:46:eb:ec:54:9c:ab:94:de:1a:61:00:
         56:a4:12:ce:7f:ba:d1:89:8d:64:75:05:eb:72:71:e9:34:67:
         b7:4c:7a:e1:45:23:b0:6a:c0:34:5a:e9:dc:ed:bb:e1:8d:9f:
         da:04:a8:08:4a:44:ad:f8:e9:6f:60:bd:43:b9:c7:59:34:f4:
         d9:14:09:4a:aa:f1:71:1a:ee:f4:5c:92:11:3c:71:46:ec:d6:
         8e:0a:af:b7:80:c7:c9:cd:3f:11:89:ee:36:5a:96:07:83:6d:
         70:67:4d:bc:96:9e:e6:d3:5e:ee:48:62:92:17:d7:ef:44:b1:
         64:e7:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:53 2024 by rpki-client on console-ams.rpki-client.org