Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/I7K1DaCCwq7v1-iUZSmDeKrLag4.roa
File:                     I7K1DaCCwq7v1-iUZSmDeKrLag4.roa (raw, json)
Hash identifier:          BiCohT2dC5sFBINkN0/9HvlDKxadwnxNuxHciN8GtvI=
Subject key identifier:   23:B2:B5:0D:A0:82:C2:AE:EF:D7:E8:94:65:29:83:78:AA:CB:6A:0E
Certificate issuer:       /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial:       05692ADE
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/I7K1DaCCwq7v1-iUZSmDeKrLag4.roa
Signing time:             Tue 28 Jun 2022 10:36:02 +0000
ROA not before:           Tue 28 Jun 2022 10:36:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138687
IP address blocks:        45.139.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90778334 (0x5692ade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
        Validity
            Not Before: Jun 28 10:36:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=23b2b50da082c2aeefd7e89465298378aacb6a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:ce:46:b0:e3:9a:1c:82:dd:62:bc:4f:28:
                    74:17:7d:73:1f:66:25:3f:03:f5:79:89:a4:f3:04:
                    93:06:1f:7b:72:48:f2:ce:a0:b8:17:ee:88:9d:8f:
                    ab:36:69:17:38:26:0b:e9:32:2f:6b:37:6d:e4:e8:
                    b6:2b:14:db:90:85:b9:6f:ad:cc:a7:69:ee:cd:ee:
                    02:96:03:d1:62:74:7d:d4:00:cc:f1:65:ea:7c:61:
                    d3:20:1f:4d:ed:85:91:ff:26:a5:2f:97:6f:54:2c:
                    02:8c:05:ff:78:a1:01:b8:46:97:ad:c8:b8:7f:ac:
                    d8:9b:fa:d6:7d:aa:89:78:49:2a:a3:9b:60:ca:58:
                    10:c3:a5:25:1b:3f:2c:e3:8c:8d:6d:e4:ae:b0:54:
                    d0:a9:9d:d6:0c:b6:2b:c9:bf:ad:77:94:22:c1:5f:
                    2e:49:03:6e:32:96:d5:1d:3e:87:83:35:85:b9:76:
                    4d:7a:5a:c2:6a:42:a1:a3:14:70:ee:e3:d8:1b:58:
                    1d:f9:33:61:ae:e6:94:9e:4a:75:83:ea:ce:25:e9:
                    f2:78:64:66:b6:c9:92:d8:2a:19:9d:a7:83:6f:63:
                    70:4f:21:ac:51:2f:2e:0a:5e:54:1d:51:44:b6:66:
                    df:44:42:0c:99:20:27:3a:b9:bf:0b:aa:60:02:18:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B2:B5:0D:A0:82:C2:AE:EF:D7:E8:94:65:29:83:78:AA:CB:6A:0E
            X509v3 Authority Key Identifier:
                keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/I7K1DaCCwq7v1-iUZSmDeKrLag4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:9b:1e:8c:a7:b6:6f:de:9e:06:89:55:7b:95:d7:2b:cb:d2:
         96:f8:7e:49:63:0d:e3:16:62:54:ee:25:ce:c7:24:b5:ea:df:
         75:c9:17:b3:20:38:ed:24:59:e1:17:65:01:02:1f:7c:31:ee:
         ad:6f:80:e1:5f:b4:b6:a4:92:d5:ec:54:0d:45:68:67:d2:34:
         71:24:98:78:f9:f0:f7:72:32:01:7b:50:f9:9a:b0:59:4f:c5:
         fe:79:1f:51:bf:11:54:e3:95:3f:01:84:1e:fb:7a:d1:a7:8a:
         0a:5a:97:b1:62:47:75:4c:34:d2:63:e0:9e:7c:66:dc:e6:d2:
         d4:62:74:67:46:44:5b:69:10:0d:31:b4:ab:2e:e9:70:6a:82:
         94:d8:72:a0:c6:5d:05:07:ae:de:bd:dc:d2:3d:8f:b5:17:52:
         27:db:e4:78:b6:f4:aa:89:f1:4d:cf:e8:2a:51:cf:2f:4b:00:
         50:da:fb:68:bb:4d:44:c5:a9:d7:7c:07:7e:b9:cf:60:de:b6:
         14:41:8d:27:62:f8:f7:21:1b:40:f5:8d:e8:f0:a0:18:78:84:
         9c:b0:7d:e8:bc:80:52:d0:ff:c6:5d:d9:50:27:01:cb:46:0e:
         69:a0:bf:7c:85:9a:3c:a4:5c:85:94:e3:57:46:c8:6e:82:10:
         15:7e:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org