Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/7e96eFrPwpClR3rj33hQ7kTX9_8.roa
File:                     7e96eFrPwpClR3rj33hQ7kTX9_8.roa (raw, json)
Hash identifier:          dRHeVGUb/6ZVQ9/qKinozGuEPn+m5xgZD6X5PmMSUOc=
Subject key identifier:   ED:EF:7A:78:5A:CF:C2:90:A5:47:7A:E3:DF:78:50:EE:44:D7:F7:FF
Certificate issuer:       /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial:       057D0283
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/7e96eFrPwpClR3rj33hQ7kTX9_8.roa
Signing time:             Thu 02 Jun 2022 18:41:46 +0000
ROA not before:           Thu 02 Jun 2022 18:41:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        5.181.184.0/22 maxlen: 24
                          45.8.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92078723 (0x57d0283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
        Validity
            Not Before: Jun  2 18:41:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edef7a785acfc290a5477ae3df7850ee44d7f7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4e:ef:77:ff:bc:a1:bf:fe:78:d6:cb:b4:fd:
                    f6:b6:55:4a:1f:79:bb:90:37:bf:06:1a:6f:ed:fa:
                    cf:76:f5:dc:37:7c:bc:dc:fc:4e:ed:98:ee:b4:2a:
                    34:76:8a:74:fd:af:87:b9:17:0e:b7:53:0f:fc:77:
                    55:bd:8a:65:c5:4e:f7:97:8a:7d:7b:d6:0a:d0:32:
                    9a:1f:1e:01:78:b3:70:41:90:a2:ff:2a:d6:65:1d:
                    0e:fc:19:c4:d8:e9:99:a3:90:8c:f9:f9:3e:dc:cf:
                    33:26:e6:11:93:e8:1a:b4:72:86:ff:df:ef:08:93:
                    29:bc:43:12:94:9f:2c:b5:41:6e:b4:cd:d3:92:72:
                    c9:9a:43:cd:88:b2:f3:dc:e3:d9:e7:e3:cc:e9:ba:
                    b6:cd:9f:73:0e:9c:79:09:19:2f:5e:ca:10:e0:5f:
                    92:05:64:6e:65:86:c3:a7:6a:a0:a9:3d:46:1f:d1:
                    a4:27:3b:ce:5d:f0:94:85:94:b5:a4:c0:f0:0a:8b:
                    ee:47:d0:c7:2f:85:87:07:2d:2c:0f:2e:48:56:3d:
                    bf:eb:b1:9a:4a:6e:70:4e:3f:51:7d:27:30:78:92:
                    10:c4:30:38:cc:e1:05:34:cb:33:51:16:43:bc:ec:
                    a2:52:17:6d:09:bc:b9:b2:8f:94:37:d9:a7:f1:a7:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EF:7A:78:5A:CF:C2:90:A5:47:7A:E3:DF:78:50:EE:44:D7:F7:FF
            X509v3 Authority Key Identifier:
                keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/7e96eFrPwpClR3rj33hQ7kTX9_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.184.0/22
                  45.8.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:7f:bc:99:3a:48:4c:0e:2d:57:cc:2e:f3:33:82:ab:16:ca:
         1e:2e:50:fb:18:46:3a:9f:2c:5b:84:5b:d0:4c:7d:58:6f:59:
         19:cf:50:62:43:5e:8b:f2:41:4e:ea:3f:30:af:e1:cb:8d:41:
         61:ce:b5:4e:65:fc:e7:ad:e8:b6:59:7f:3e:7f:63:d0:cb:7e:
         c4:04:25:a9:35:3a:fd:73:4c:bd:c9:b9:80:1f:2c:45:f9:ec:
         ce:5d:b1:e0:3b:0d:3f:4a:17:fa:c8:f4:8e:ad:f1:7d:1e:30:
         47:68:8a:5d:ee:ee:54:8f:9e:98:49:14:ea:e1:f5:86:88:1d:
         56:c6:6d:c0:25:cb:2f:0d:5d:03:05:00:08:f5:23:06:10:53:
         24:97:c2:d8:67:72:2f:2f:78:d7:de:b7:28:f6:0e:97:32:fa:
         6c:cc:03:f0:48:81:a9:28:d9:6d:a4:4b:fc:bd:27:e6:32:bc:
         6b:ca:c0:9f:6e:5b:6c:80:3e:a9:d2:9a:d1:6b:8c:ac:18:63:
         e0:e8:c6:5b:25:d8:0d:1e:37:20:d2:4c:51:fa:2b:27:30:70:
         32:02:41:29:43:8f:27:7d:72:36:90:c1:2b:28:a8:ac:04:51:
         b0:b6:22:4f:eb:30:96:5a:76:94:e2:0f:22:1a:bb:19:96:ac:
         97:97:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:54 2024 by rpki-client on console-ams.rpki-client.org