Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/1x7XD7JCpWo66H_WNS14eLzwK3Y.roa
File:                     1x7XD7JCpWo66H_WNS14eLzwK3Y.roa (raw, json)
Hash identifier:          YJiPSwe/dUpOq+VYaOoAjMYkjlWPlMJardEL7wQcuPk=
Subject key identifier:   D7:1E:D7:0F:B2:42:A5:6A:3A:E8:7F:D6:35:2D:78:78:BC:F0:2B:76
Certificate issuer:       /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial:       018224F8D3999B429AEC18126C7E6C4D9786
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/1x7XD7JCpWo66H_WNS14eLzwK3Y.roa
Signing time:             Fri 22 Jul 2022 08:14:23 +0000
ROA not before:           Fri 22 Jul 2022 08:14:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        45.139.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:24:f8:d3:99:9b:42:9a:ec:18:12:6c:7e:6c:4d:97:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
        Validity
            Not Before: Jul 22 08:14:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d71ed70fb242a56a3ae87fd6352d7878bcf02b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:51:33:f1:db:e1:0a:9d:d3:51:d5:cf:55:
                    af:c4:04:1c:b5:55:0a:df:27:59:90:6c:95:2d:3b:
                    f3:4f:86:1d:9d:ba:c4:d5:c8:51:0c:9f:f5:2a:10:
                    e5:65:c7:68:f8:42:a3:aa:1d:51:5d:e0:0c:74:7a:
                    f6:f3:e8:dd:98:39:f5:8d:91:ae:30:be:01:c9:a1:
                    79:c5:28:b4:3c:5c:21:3f:6b:b6:ab:89:78:02:67:
                    91:65:5f:2e:89:26:95:e0:75:a2:52:ef:aa:96:db:
                    2a:2e:03:5a:b1:65:6e:be:09:d3:a0:02:38:bb:64:
                    8d:68:f9:39:dc:0f:d8:3c:e9:47:3b:98:16:74:8f:
                    15:65:f8:d7:44:76:3a:9d:3c:38:5d:0e:05:d8:e7:
                    e8:3c:3e:42:72:8e:f6:9c:40:34:d3:f7:57:47:e4:
                    11:07:26:98:60:13:0b:fc:38:0c:60:c2:45:12:cd:
                    17:3b:79:56:2d:4d:4f:67:2a:d8:f7:43:50:25:30:
                    c8:61:c8:86:a1:1e:29:fb:c0:9c:c2:9c:77:a8:6c:
                    8c:d5:24:e9:a7:a6:db:c7:a1:20:e3:31:b0:e6:63:
                    d3:ce:b6:b5:d6:cb:e0:1e:41:68:28:9a:0a:a1:34:
                    fc:b7:e4:12:a6:6d:ad:5a:7c:ab:cb:b5:d2:f9:0f:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1E:D7:0F:B2:42:A5:6A:3A:E8:7F:D6:35:2D:78:78:BC:F0:2B:76
            X509v3 Authority Key Identifier:
                keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/1x7XD7JCpWo66H_WNS14eLzwK3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:62:33:c9:a3:33:4d:79:39:6f:34:f9:4d:bc:32:12:98:ef:
         c8:09:54:c8:8d:79:ca:81:29:18:dc:d9:a0:73:5f:19:b4:5f:
         fe:35:fa:78:16:88:c6:3e:84:fa:27:2e:d4:08:86:fa:8f:bf:
         fa:60:32:61:bb:99:96:5d:74:b3:45:90:85:07:30:9e:c2:8f:
         81:43:0e:6f:db:89:f1:27:9b:47:2d:bd:0c:89:6d:57:bd:cf:
         96:f4:e9:e1:2a:15:33:15:85:00:68:0a:b4:02:92:2c:7b:e3:
         5a:f1:5c:d9:a7:7b:32:46:65:b7:b3:46:39:5c:6f:ae:ba:55:
         c6:49:d3:a7:ec:f1:67:74:0f:fd:24:54:8d:83:07:6c:59:c6:
         a1:1d:db:7c:45:8b:be:6d:42:0b:3b:e4:6c:72:25:48:cb:af:
         af:73:bc:70:32:9f:8d:71:ae:aa:ed:5f:64:24:86:39:70:7f:
         91:01:16:bf:55:1b:7e:26:2f:f4:48:5f:ea:f5:15:a0:23:c1:
         40:68:94:43:0b:54:b5:41:73:44:de:1d:0c:93:f4:20:e5:4b:
         5b:75:44:b7:9a:da:aa:9f:8c:37:74:8a:bd:f4:3e:8d:79:0a:
         66:42:07:26:e1:0b:6c:45:8e:af:63:e3:dc:11:a1:20:e8:57:
         62:25:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org