Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/AmqxEeXhoOeiD8ooKnZpDPvIrYA.roa
File:                     AmqxEeXhoOeiD8ooKnZpDPvIrYA.roa (raw, json)
Hash identifier:          HCCKdI40yLpln+mqU2ycSuuLZhfwKN3LrJOcXkyy1jo=
Subject key identifier:   02:6A:B1:11:E5:E1:A0:E7:A2:0F:CA:28:2A:76:69:0C:FB:C8:AD:80
Certificate issuer:       /CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
Certificate serial:       02429D6B
Authority key identifier: 44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/AmqxEeXhoOeiD8ooKnZpDPvIrYA.roa
Signing time:             Wed 04 May 2022 08:23:34 +0000
ROA not before:           Wed 04 May 2022 08:23:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.195.44.0/24 maxlen: 24
                          185.195.44.0/22 maxlen: 22
                          185.195.46.0/24 maxlen: 24
                          185.195.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37920107 (0x2429d6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f2b4d93b2aaf3a02697223b792f60218cad2b6
        Validity
            Not Before: May  4 08:23:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=026ab111e5e1a0e7a20fca282a76690cfbc8ad80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:0e:8e:e8:6f:d0:96:24:0a:84:80:b6:ad:
                    e0:20:1d:d3:f6:77:e7:6e:7e:41:a8:92:48:97:28:
                    c4:dc:aa:81:f3:f4:1c:70:ac:6e:64:b7:30:32:6d:
                    d0:07:ea:ae:e9:a2:4b:05:f0:46:5e:e6:2c:7c:a9:
                    38:57:07:f0:b8:0f:b5:fb:39:dc:33:f1:1f:81:51:
                    79:2c:3e:37:b6:37:50:a1:ed:75:73:18:8c:10:b5:
                    07:41:8f:6c:92:7e:bd:ed:e8:d9:8f:cf:c9:45:c0:
                    fb:e6:cf:fe:99:48:dc:f0:75:bd:80:35:9f:2b:37:
                    a2:f8:fd:30:39:e3:dd:e2:b9:c6:36:27:e9:64:f5:
                    16:d9:c0:82:c9:0e:b6:21:eb:fa:7d:29:b3:20:6b:
                    f5:3b:19:f5:9c:2a:41:80:75:22:7d:a5:0f:5e:54:
                    87:4d:a3:15:b7:8f:72:a2:10:8e:37:a0:bb:29:08:
                    c3:0d:c5:6b:2c:6b:51:cf:cf:21:67:77:47:08:c9:
                    a3:a8:e8:fb:e2:17:6d:d5:fe:de:f8:2c:60:bc:7f:
                    8a:0e:d0:db:b6:21:01:e5:61:a3:74:25:8b:7c:fc:
                    f7:f5:21:6c:3d:69:84:1e:48:d4:69:0f:64:66:90:
                    c5:c0:8c:bd:92:b1:0d:55:86:4f:02:4f:a4:3e:1c:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6A:B1:11:E5:E1:A0:E7:A2:0F:CA:28:2A:76:69:0C:FB:C8:AD:80
            X509v3 Authority Key Identifier:
                keyid:44:F2:B4:D9:3B:2A:AF:3A:02:69:72:23:B7:92:F6:02:18:CA:D2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPK02TsqrzoCaXIjt5L2AhjK0rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/AmqxEeXhoOeiD8ooKnZpDPvIrYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/388110-0366-479b-9bf9-50d7f7eaa1ad/1/RPK02TsqrzoCaXIjt5L2AhjK0rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:5b:79:c0:fd:b3:0e:47:5e:56:46:2a:53:e0:6e:80:f0:
         a6:37:1c:bf:69:fc:c9:9d:9b:db:59:25:88:75:a4:c4:6c:0d:
         8c:89:c4:aa:55:30:70:03:d4:41:b9:0f:be:e1:d2:7c:d4:87:
         1f:47:69:5f:90:45:ff:df:9e:9d:2f:1b:b5:89:db:d9:35:ef:
         2b:12:ed:63:78:75:ef:9c:80:a5:41:f8:c0:8d:db:55:e4:dd:
         71:c6:96:68:91:19:ce:d1:9d:ae:87:d3:42:2d:2a:ba:ee:f9:
         f1:3b:d4:60:f0:b0:fd:5c:d6:b7:e0:ca:23:f2:3c:9d:a2:04:
         a1:35:d9:63:27:94:85:cf:5e:2d:c1:e3:56:5c:aa:09:34:6e:
         7d:81:42:a2:02:22:91:09:85:5f:fb:70:86:33:47:fc:b9:17:
         1f:b8:8f:31:e3:72:8d:e7:c3:26:a4:6b:ef:ad:9d:cc:dd:26:
         3b:33:6e:97:9b:1e:73:d3:52:31:ce:2f:1d:88:84:fe:aa:b8:
         6d:9c:a9:72:ff:ce:2f:da:68:73:69:f2:95:f1:86:6f:79:fa:
         de:40:0d:15:1f:cb:06:90:2d:33:80:45:f7:34:2f:62:f3:aa:
         b7:06:c4:dd:0a:7a:f2:21:08:ec:13:6a:08:ea:9e:e1:cc:0b:
         53:07:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:13 2024 by rpki-client on console-ams.rpki-client.org