Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/J4ezUNVnf3t3Nwv-wZyG_id7lUw.roa
File:                     J4ezUNVnf3t3Nwv-wZyG_id7lUw.roa (raw, json)
Hash identifier:          cBkS1sTM0j7YNoqsMS9tgF3d1LGBjznO4G+egiZrCt4=
Subject key identifier:   27:87:B3:50:D5:67:7F:7B:77:37:0B:FE:C1:9C:86:FE:27:7B:95:4C
Certificate issuer:       /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial:       0183F09E54C5F26CA94C7DB5424B65419F99
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/J4ezUNVnf3t3Nwv-wZyG_id7lUw.roa
Signing time:             Wed 19 Oct 2022 14:20:51 +0000
ROA not before:           Wed 19 Oct 2022 14:20:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        45.146.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f0:9e:54:c5:f2:6c:a9:4c:7d:b5:42:4b:65:41:9f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
        Validity
            Not Before: Oct 19 14:20:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2787b350d5677f7b77370bfec19c86fe277b954c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ea:04:ff:45:75:12:88:7a:07:83:32:d2:d8:
                    60:2a:43:ba:2d:04:39:05:29:23:34:ad:10:a8:e1:
                    e9:bf:ec:76:c6:b0:1e:f3:84:a0:f6:b7:f2:f7:ff:
                    81:47:64:dc:a1:b0:f0:bf:63:0f:c4:93:bb:1e:a6:
                    7d:c3:05:69:38:bb:5b:10:97:5d:59:2a:04:47:dd:
                    bf:bf:09:64:c9:0a:9d:42:4f:cb:c8:95:c7:24:00:
                    d6:36:c7:53:19:e9:e2:5c:41:59:69:5b:e5:e4:6e:
                    c3:18:ba:7d:ce:5b:63:3a:d3:09:a0:f9:d9:d4:f6:
                    bf:55:64:cb:3c:61:ef:e2:e5:40:4e:53:88:41:59:
                    c4:df:1c:fb:f6:ab:10:03:dd:3a:51:d9:f5:b4:c9:
                    a7:8a:db:a6:e3:61:19:fe:5f:b4:ef:23:60:90:92:
                    ef:3f:c8:4d:71:1e:2d:f5:3b:38:27:65:79:02:64:
                    92:0e:39:4c:90:a0:3b:53:68:55:d7:e8:45:27:be:
                    fc:56:a0:7a:7f:50:60:48:8b:df:7d:5f:e1:df:9b:
                    15:27:2f:f0:6c:19:fa:f4:06:8d:93:34:de:b0:07:
                    a8:f6:59:a6:5b:ee:43:77:e6:1c:d0:67:d2:e4:fb:
                    02:76:22:53:26:5f:16:ba:75:3d:09:b5:73:65:62:
                    34:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:B3:50:D5:67:7F:7B:77:37:0B:FE:C1:9C:86:FE:27:7B:95:4C
            X509v3 Authority Key Identifier:
                keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/J4ezUNVnf3t3Nwv-wZyG_id7lUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:cb:e7:50:df:cc:70:52:07:73:04:0e:89:5e:d1:e8:c2:5a:
         66:72:16:17:2a:0e:a6:da:f3:38:a8:81:80:83:36:e3:a1:a6:
         4d:21:38:da:f0:db:9c:67:78:14:14:e8:d0:fd:8b:29:a6:f7:
         ae:8a:55:0a:cf:85:1d:a8:b2:e2:d7:67:dd:aa:76:29:83:b5:
         5a:08:c6:4b:07:d2:da:a1:37:19:05:d4:23:19:c5:bc:b2:16:
         ed:ee:11:62:95:68:e2:fd:76:c7:1f:a4:47:1f:ff:85:b3:4b:
         cc:a4:a7:97:61:bd:70:98:97:5d:84:aa:00:78:61:fa:d6:76:
         c0:b9:03:52:09:7a:56:65:3f:6c:1b:29:ee:fc:9b:87:c4:23:
         bd:fb:da:f6:b0:ce:e3:23:f8:b1:db:78:f7:e6:bd:cb:5f:55:
         7b:2c:c5:f0:e7:ef:4d:3f:a9:02:4c:48:bb:51:99:56:24:e2:
         dd:25:70:ee:1b:48:35:73:b8:19:e0:3b:da:a8:d2:15:2f:be:
         4b:7f:b9:59:eb:63:98:95:6e:65:bd:47:cd:f2:75:99:9c:b3:
         89:ec:d8:d2:49:5c:40:7b:d1:77:54:75:80:bf:32:96:2f:6e:
         7e:2c:fc:1a:67:dc:ae:96:dd:5e:af:2f:44:97:1f:93:c5:88:
         2d:59:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:30 2024 by rpki-client on console-ams.rpki-client.org