Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/RkY52MruIYGMT7VjzgbKvQL2NO4.roa
File:                     RkY52MruIYGMT7VjzgbKvQL2NO4.roa (raw, json)
Hash identifier:          +EC5SER05W7bq98l2ZlGkEu4lS7UQ8pIu2Qob9cXFFQ=
Subject key identifier:   46:46:39:D8:CA:EE:21:81:8C:4F:B5:63:CE:06:CA:BD:02:F6:34:EE
Certificate issuer:       /CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
Certificate serial:       035D54BF
Authority key identifier: EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/RkY52MruIYGMT7VjzgbKvQL2NO4.roa
Signing time:             Sat 01 Jan 2022 15:01:43 +0000
ROA not before:           Sat 01 Jan 2022 15:01:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57497
IP address blocks:        45.139.102.0/24 maxlen: 24
                          45.139.103.0/24 maxlen: 24
                          45.139.100.0/24 maxlen: 24
                          45.139.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56448191 (0x35d54bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
        Validity
            Not Before: Jan  1 15:01:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=464639d8caee21818c4fb563ce06cabd02f634ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d8:20:d5:06:2e:6a:81:90:57:27:7b:72:5f:
                    68:0e:77:e8:8f:c2:1b:39:23:ba:f6:62:48:b4:ea:
                    a8:f7:7f:4d:02:3b:a8:41:04:96:ab:92:2b:6f:01:
                    48:2d:4c:f1:f6:9f:59:57:ce:bf:a7:62:01:a7:69:
                    34:92:8e:c4:b9:3d:a5:ad:70:39:1a:bf:dd:44:dd:
                    d6:a3:f5:8f:89:88:a9:65:d3:d5:a6:50:ab:10:b4:
                    8b:9b:19:a3:96:60:4b:32:ed:2f:c4:21:14:5e:6d:
                    e2:f3:10:06:1c:a8:f3:08:69:cd:71:be:79:d3:2e:
                    fb:80:9a:ef:48:02:46:a4:d5:b1:2e:0a:59:32:6c:
                    b9:21:0c:80:fd:ae:58:f9:51:86:c2:d9:48:00:af:
                    c6:c1:cb:80:12:dc:d3:40:50:ca:09:c3:d7:87:b0:
                    9b:f7:15:28:6a:43:f0:b2:83:be:8f:13:6c:55:4a:
                    67:65:60:db:43:15:ed:4a:e4:46:2d:55:9a:ca:e7:
                    03:94:3f:f5:53:db:a4:ae:02:96:95:c8:24:0d:2e:
                    d9:61:15:d3:22:f8:b6:5e:ff:50:f9:7e:94:33:b1:
                    cc:8b:f5:59:fa:22:38:10:55:b3:67:f7:a7:3a:d9:
                    20:17:7d:54:1f:b9:ca:c5:9c:27:91:f6:3a:2d:11:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:46:39:D8:CA:EE:21:81:8C:4F:B5:63:CE:06:CA:BD:02:F6:34:EE
            X509v3 Authority Key Identifier:
                keyid:EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/RkY52MruIYGMT7VjzgbKvQL2NO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:18:a7:52:4a:49:44:ee:1b:54:b7:10:52:e4:d7:34:52:2c:
         5d:86:6f:ad:d0:f1:fd:2d:05:1c:b4:59:a4:1f:56:7f:3f:b5:
         42:3e:39:59:87:04:88:45:51:7c:7b:2e:54:e8:4a:b4:20:d1:
         37:07:37:23:12:68:07:f9:b7:21:fd:59:4d:b1:2b:ea:7d:b0:
         89:62:a8:a7:f5:4e:bc:c1:97:a9:ca:cf:82:ee:0c:4a:34:68:
         ef:88:b6:55:78:db:b6:2d:f2:2b:05:a6:03:45:51:7d:9f:58:
         ee:fe:88:49:6b:41:b8:e4:50:3c:a2:05:55:b6:3f:dd:d6:09:
         75:87:13:84:28:3a:0c:0f:48:83:ac:9e:ea:51:c1:95:71:ff:
         60:27:5f:72:b2:27:ec:a3:09:f5:77:7f:0f:b1:e7:5e:30:14:
         9d:56:62:e7:46:fa:9b:94:96:e0:2c:08:dd:08:51:c3:e2:88:
         90:6d:2a:c6:06:e8:62:2a:77:a2:4b:30:74:e6:48:48:58:89:
         b6:d8:2a:fa:fa:e2:2b:52:62:67:be:46:d3:02:c0:48:2a:7f:
         09:25:99:6c:e4:a4:77:a2:88:96:2c:1e:d1:2e:ce:69:1e:ee:
         2d:f8:43:64:9f:3a:96:a0:06:54:1c:7d:b2:df:0a:56:87:33:
         b6:4d:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org