Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/VSuG_oWEyjdl1IRB5Jtm1XwE-s0.roa
File:                     VSuG_oWEyjdl1IRB5Jtm1XwE-s0.roa (raw, json)
Hash identifier:          ZwEssYmuswJ181ddn6nFpssG1E0Ijim4AkXmbNmkdXg=
Subject key identifier:   55:2B:86:FE:85:84:CA:37:65:D4:84:41:E4:9B:66:D5:7C:04:FA:CD
Certificate issuer:       /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial:       01259466
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/VSuG_oWEyjdl1IRB5Jtm1XwE-s0.roa
Signing time:             Fri 27 May 2022 11:27:54 +0000
ROA not before:           Fri 27 May 2022 11:27:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212137
IP address blocks:        45.150.56.0/24 maxlen: 28
                          109.95.124.0/22 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19240038 (0x1259466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
        Validity
            Not Before: May 27 11:27:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=552b86fe8584ca3765d48441e49b66d57c04facd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:cb:84:1f:35:25:2c:c1:f1:82:08:95:ab:
                    58:36:8e:cf:f4:0f:27:0e:a9:84:41:64:b8:bd:7f:
                    35:dd:f1:f0:3b:aa:f7:78:9d:65:67:6f:52:2e:fb:
                    08:98:8f:b8:80:06:53:57:98:fc:db:11:86:c0:24:
                    1c:6c:38:3e:f8:fc:54:a0:94:b6:49:0f:f3:4b:a9:
                    b6:4e:b6:68:3e:f9:37:d6:4d:cf:a4:c7:44:8f:f4:
                    fc:f9:93:58:82:74:45:e1:cf:48:cf:64:4c:97:8e:
                    4b:4b:5c:ea:51:02:4a:8f:d4:08:6d:4b:1e:9b:b9:
                    c8:88:6e:93:43:46:7f:49:a6:5a:f5:76:b1:ff:f8:
                    3a:3c:d0:15:da:cc:c8:af:29:c1:29:73:bc:25:52:
                    b3:3d:a7:e3:64:a2:d7:e0:fb:53:00:08:ee:65:a8:
                    7d:d8:42:32:ff:c1:02:84:40:e3:9b:24:a8:12:9b:
                    c0:39:98:9f:83:5d:f9:22:58:53:b0:b8:45:28:e8:
                    de:9c:15:c3:ec:c8:cb:49:59:7f:72:b2:3c:fc:ca:
                    34:72:66:70:fd:44:35:8e:61:24:10:f4:c2:3b:e1:
                    c1:ab:15:4a:40:13:d1:6f:40:92:05:a4:02:af:1d:
                    32:9e:6b:91:7a:b3:64:8f:41:38:d0:33:45:c0:d7:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2B:86:FE:85:84:CA:37:65:D4:84:41:E4:9B:66:D5:7C:04:FA:CD
            X509v3 Authority Key Identifier:
                keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/VSuG_oWEyjdl1IRB5Jtm1XwE-s0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.56.0/24
                  109.95.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:ce:7a:db:c3:f7:00:bf:91:03:6a:0d:82:d4:af:7c:5b:
         24:67:61:6f:5f:8a:00:19:dc:4d:a2:b1:bb:1b:e6:11:fb:cf:
         8f:32:74:c3:5c:2d:5d:db:8a:2f:18:ce:72:2e:f2:d5:ab:d0:
         73:c3:13:20:3b:cc:b3:74:d7:2b:02:0f:bc:41:68:e2:2a:cb:
         fc:2e:3d:3a:ee:48:17:64:c3:28:35:cb:1f:30:11:0f:6a:a3:
         db:48:12:00:56:0a:e9:5a:b6:eb:d3:5f:ab:a9:f0:bb:88:40:
         b0:8a:b1:a3:45:05:e5:2e:d6:96:fb:38:a6:cf:1e:28:3e:f6:
         51:96:3b:86:4a:6e:28:81:c9:13:ac:77:1c:8f:48:23:d2:58:
         31:f1:37:b8:24:56:3c:cf:f8:7c:49:46:12:7b:72:06:eb:ac:
         92:ab:0a:be:ae:3a:50:81:ed:c7:ff:b3:26:53:ed:b5:94:f7:
         3d:75:2b:7a:11:00:6d:1a:d8:6e:ee:2d:17:74:8c:2f:3a:71:
         ba:ca:0d:e5:f7:02:57:2d:c2:f6:13:2d:8f:b9:5f:64:7f:0f:
         dd:78:a5:4c:e7:ae:49:68:27:b6:00:72:db:f9:2f:31:90:f4:
         e4:40:37:85:b0:f9:2e:b0:5e:f8:d1:76:06:88:7f:53:d7:4f:
         aa:d3:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org