Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/KGSb-29dM_kPDhYfMBxG_QvtgpM.roa
File:                     KGSb-29dM_kPDhYfMBxG_QvtgpM.roa (raw, json)
Hash identifier:          89zfTAAEgTBiu7CCfWdT0JnBC+zn9VIRDF0o5olEeds=
Subject key identifier:   28:64:9B:FB:6F:5D:33:F9:0F:0E:16:1F:30:1C:46:FD:0B:ED:82:93
Certificate issuer:       /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial:       055E68E9
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/KGSb-29dM_kPDhYfMBxG_QvtgpM.roa
Signing time:             Thu 23 Jun 2022 16:59:19 +0000
ROA not before:           Thu 23 Jun 2022 16:59:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.139.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90073321 (0x55e68e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
        Validity
            Not Before: Jun 23 16:59:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=28649bfb6f5d33f90f0e161f301c46fd0bed8293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:fe:81:e8:62:63:09:68:33:fa:5d:16:a2:
                    bc:fd:c2:d9:d0:78:bb:cc:f1:d6:1e:19:ec:de:87:
                    4a:d0:7a:75:8e:48:45:20:da:83:6e:cb:be:6c:80:
                    ad:bc:4a:15:a8:9b:07:26:15:22:c6:fc:14:1a:6d:
                    31:17:69:9a:e0:c0:78:30:b5:5e:30:ea:f1:e2:fe:
                    bf:f0:ac:cc:0c:2b:e5:e2:c7:3b:6b:5c:74:58:f9:
                    94:03:9b:bb:73:e5:33:36:6e:e2:a2:fe:54:44:a3:
                    8f:98:75:36:2f:75:7e:92:68:6a:6b:b9:d6:7e:f4:
                    72:a1:36:c4:28:d2:a1:e1:6d:a5:93:f2:36:ad:e2:
                    d3:45:29:fc:6b:fc:9b:52:4e:37:bb:65:67:07:b9:
                    f2:66:08:d2:59:24:a9:6d:75:69:c8:d2:56:c1:64:
                    de:a0:9d:f2:8f:44:16:93:a3:5d:65:b4:57:01:75:
                    40:8f:37:f4:55:8c:0d:66:ff:62:f6:56:65:c4:62:
                    f5:c3:cd:67:71:ee:43:56:78:ae:30:8e:e6:26:91:
                    55:62:e8:b0:52:78:c2:9c:f2:46:61:0d:73:63:cb:
                    7f:db:a1:de:b9:f5:e0:c2:6e:03:66:ee:d2:e9:05:
                    41:ab:e3:af:03:b1:83:cb:18:5f:0c:b5:23:a4:ef:
                    65:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:9B:FB:6F:5D:33:F9:0F:0E:16:1F:30:1C:46:FD:0B:ED:82:93
            X509v3 Authority Key Identifier:
                keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/KGSb-29dM_kPDhYfMBxG_QvtgpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:5e:35:59:bb:61:b6:ea:e4:41:44:08:5b:ee:f6:5e:9a:d7:
         3b:ac:8a:d8:53:a7:f2:c2:b5:c4:6d:0c:52:d1:07:7c:17:49:
         92:06:6c:6b:10:a8:6e:fd:38:87:7b:20:76:4a:4a:6c:19:1e:
         f3:81:7d:2d:72:f8:96:ca:ea:7f:69:66:74:31:1d:05:c3:14:
         f5:78:a7:36:9d:f8:da:50:16:94:3b:99:a7:aa:61:35:d9:3a:
         99:08:37:f5:19:85:47:01:da:de:00:82:7f:19:90:8f:e2:a5:
         f2:13:11:e0:c4:4c:31:12:f7:77:f7:80:49:a3:d6:fd:58:1d:
         22:8e:1d:73:fc:89:1d:4d:62:1f:d5:1c:80:60:e2:06:30:a3:
         12:30:2a:c4:83:79:0e:0f:b3:95:4c:c3:00:40:7e:f3:60:f2:
         44:96:cf:e8:f3:16:31:24:74:dd:ad:b6:1a:07:b5:e2:c9:5b:
         1a:e4:1d:bf:6b:c5:de:61:d2:06:bb:69:bf:61:da:7c:26:76:
         07:0e:39:da:b8:d0:01:ac:9c:eb:46:82:5a:c5:69:82:ea:24:
         ac:48:1b:eb:2c:fc:cc:16:28:36:c6:54:4b:03:f3:fb:b6:2f:
         55:3a:f1:18:7e:bc:91:3f:bf:ff:98:3c:7b:2d:24:00:ae:d5:
         47:08:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org