Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/O00ZoQ2KQTJCb7aM1HO82dBL7S0.roa
File:                     O00ZoQ2KQTJCb7aM1HO82dBL7S0.roa (raw, json)
Hash identifier:          1g2ohSiaSQQaICydOX99Ck4X2jwp1CxZ1JrflyCLB0Q=
Subject key identifier:   3B:4D:19:A1:0D:8A:41:32:42:6F:B6:8C:D4:73:BC:D9:D0:4B:ED:2D
Certificate issuer:       /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial:       018475302FB3F3678B519F65E326761DEF2C
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/O00ZoQ2KQTJCb7aM1HO82dBL7S0.roa
Signing time:             Mon 14 Nov 2022 08:10:02 +0000
ROA not before:           Mon 14 Nov 2022 08:10:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211252
IP address blocks:        45.139.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:75:30:2f:b3:f3:67:8b:51:9f:65:e3:26:76:1d:ef:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
        Validity
            Not Before: Nov 14 08:10:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b4d19a10d8a4132426fb68cd473bcd9d04bed2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:43:58:1d:da:4c:57:b5:2e:90:05:af:b0:d2:
                    6e:29:db:5e:85:f4:f7:cf:47:b4:f9:31:59:48:15:
                    70:6b:18:57:af:9d:b8:3e:37:2c:80:42:d4:d1:20:
                    fa:07:7c:00:ed:7a:49:0d:d9:5d:91:c5:d0:d3:a8:
                    0b:67:93:57:9d:63:be:1a:15:fb:e1:dd:8f:a0:f8:
                    9f:74:7a:b0:20:79:f3:11:b8:90:43:17:3b:33:93:
                    a3:ee:fb:20:8a:54:74:50:97:0e:37:43:0e:31:fa:
                    89:46:38:c9:40:d9:4f:e3:ce:74:c1:55:c0:54:f6:
                    5f:99:69:fe:40:59:d6:9e:8f:a9:f0:25:9e:54:1e:
                    a0:2d:9b:9e:c4:f3:95:d7:23:d7:7d:45:ae:9f:7a:
                    ec:51:46:f6:5a:3a:51:70:6a:45:83:ff:14:38:48:
                    81:39:39:84:63:a1:8e:cb:e6:9e:3d:7c:88:28:bd:
                    fd:e3:ad:27:5e:bb:43:c2:b3:e8:18:90:28:98:bc:
                    ce:47:36:1b:45:cf:76:7b:3d:fc:69:4f:87:46:fc:
                    af:0f:48:1f:49:08:55:7d:1d:8b:64:ff:41:81:18:
                    8e:db:86:c2:fe:12:42:8b:30:36:58:7f:68:64:6c:
                    ef:e1:7c:e6:63:3a:df:07:fb:d8:58:be:f5:43:f4:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4D:19:A1:0D:8A:41:32:42:6F:B6:8C:D4:73:BC:D9:D0:4B:ED:2D
            X509v3 Authority Key Identifier:
                keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/O00ZoQ2KQTJCb7aM1HO82dBL7S0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:fe:4f:4a:e1:94:dd:81:51:1d:a8:e4:e0:48:c7:18:a9:ed:
         b3:2b:8d:37:00:df:b3:b6:9c:ac:a9:92:f3:6f:3f:9d:99:73:
         bd:dd:05:5c:0c:10:ea:2c:95:e1:ee:57:ab:84:5f:23:a8:cf:
         cb:ef:0a:23:f8:b7:05:e2:f2:5d:a3:0c:b7:27:99:9b:2b:6a:
         5d:5a:e9:29:e6:cf:2f:0e:55:14:25:a6:64:98:b4:e5:db:5a:
         b0:63:ef:80:13:4b:2e:db:c3:1c:17:52:50:37:93:21:1d:ff:
         6a:56:9b:b5:4b:38:48:62:70:9b:6e:88:75:45:44:85:13:5e:
         6c:38:0f:c0:df:4b:fd:80:66:5b:b8:c1:da:ad:3b:4d:81:70:
         ba:be:eb:96:a0:a7:a4:1d:b1:cd:db:1b:90:0d:19:32:80:12:
         90:7c:b5:b8:6a:78:3a:c9:0b:61:c2:6e:e2:d4:06:22:1a:57:
         c1:54:80:2a:b4:a0:77:82:90:20:c0:40:96:08:1d:7e:72:14:
         2b:a3:a9:52:b8:64:0a:46:74:80:eb:9c:3d:c0:f2:f3:7a:2c:
         27:8b:9f:8b:c0:10:99:51:21:94:7d:71:06:bd:33:0c:e8:c0:
         1b:ee:60:9a:24:bf:75:5e:08:1b:ef:b6:86:e9:b4:01:4c:70:
         ab:b4:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org