Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-C_LYEl_oPQ-HPB3bYGn6Fnmpzw.roa
File:                     1-C_LYEl_oPQ-HPB3bYGn6Fnmpzw.roa (raw, json)
Hash identifier:          ZeKvOO2UNHLdVJygFF5Hv03Oarg+m3RVkSpNUYzBHDo=
Subject key identifier:   F8:2F:CB:60:49:7F:A0:F4:3E:1C:F0:77:6D:81:A7:E8:59:E6:A7:3C
Certificate issuer:       /CN=8d3458adcba08a1cd0ebf1b13b45a0bfac87d7d4
Certificate serial:       0183B6FD106B3172A07DAC9ACC81B8BF6BD9
Authority key identifier: 8D:34:58:AD:CB:A0:8A:1C:D0:EB:F1:B1:3B:45:A0:BF:AC:87:D7:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTRYrcugihzQ6_GxO0Wgv6yH19Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-C_LYEl_oPQ-HPB3bYGn6Fnmpzw.roa
Signing time:             Sat 08 Oct 2022 09:46:21 +0000
ROA not before:           Sat 08 Oct 2022 09:46:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206065
IP address blocks:        45.156.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:b6:fd:10:6b:31:72:a0:7d:ac:9a:cc:81:b8:bf:6b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3458adcba08a1cd0ebf1b13b45a0bfac87d7d4
        Validity
            Not Before: Oct  8 09:46:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f82fcb60497fa0f43e1cf0776d81a7e859e6a73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:39:63:d4:2c:ae:34:65:33:dd:d8:27:48:
                    0c:be:28:e8:85:68:2c:69:b9:d7:c0:04:a7:54:a2:
                    5f:70:94:65:e4:a6:0b:72:75:28:40:94:eb:0c:7d:
                    c7:68:c4:6f:09:5b:99:48:0d:b8:b4:79:6a:bd:6e:
                    30:e2:5b:8c:d9:0d:00:19:79:17:3e:98:61:3d:de:
                    e6:65:6c:40:02:cf:4d:0c:77:69:f2:5a:3c:8b:aa:
                    df:78:c1:66:e6:4d:67:7a:ab:9c:7d:e9:b8:ba:cd:
                    82:9d:ca:96:45:ea:eb:a1:35:8b:ec:4b:eb:aa:4d:
                    64:b1:c0:7f:69:81:89:b5:df:bf:a4:2f:82:85:35:
                    77:b3:24:77:46:f8:b6:97:d7:78:41:e9:ed:68:08:
                    cf:62:8f:dd:76:c7:c1:a3:9e:87:10:b4:07:24:2e:
                    71:ad:ec:f5:c5:16:d2:9d:8f:76:4e:03:2c:1e:c0:
                    43:d8:3f:14:ed:72:39:12:f7:b5:fe:11:95:df:09:
                    24:c7:32:61:05:f5:87:22:eb:8f:e5:b1:f0:e0:de:
                    36:0a:94:70:c9:d4:95:2a:db:15:0c:30:4e:92:db:
                    d4:30:47:66:9b:fe:6a:b3:9b:2b:fd:ca:07:9c:a0:
                    78:25:01:2d:fc:57:ec:ee:66:6e:79:25:fc:26:b0:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2F:CB:60:49:7F:A0:F4:3E:1C:F0:77:6D:81:A7:E8:59:E6:A7:3C
            X509v3 Authority Key Identifier:
                keyid:8D:34:58:AD:CB:A0:8A:1C:D0:EB:F1:B1:3B:45:A0:BF:AC:87:D7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTRYrcugihzQ6_GxO0Wgv6yH19Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/1-C_LYEl_oPQ-HPB3bYGn6Fnmpzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/jTRYrcugihzQ6_GxO0Wgv6yH19Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:a1:0e:6b:c2:61:a2:f1:1f:75:f0:e1:55:4c:f4:7f:97:ca:
         86:6d:0a:ab:74:3a:74:f8:73:c4:03:e3:55:74:d6:1f:0d:28:
         46:bb:c3:d4:0b:62:4e:a7:2a:cb:cc:fc:c1:d4:ac:29:02:d1:
         8e:23:c5:f4:af:f2:f4:a9:46:98:dd:11:95:0a:08:79:44:b3:
         0d:32:f2:18:db:5d:e7:8f:6b:1b:e0:f8:2d:cc:13:17:49:39:
         a7:c5:c0:a9:af:fe:e5:98:e6:5a:96:fe:0d:d1:27:c7:7e:47:
         e9:7c:ef:40:e4:e3:18:a7:df:93:e1:dc:a9:d4:df:f1:42:76:
         da:57:d9:64:ca:d9:60:4a:63:c8:1d:56:1b:75:3d:f4:e5:27:
         cc:68:06:73:fe:67:11:1c:b2:af:ea:d7:50:7d:c0:4a:d5:54:
         d6:7c:ee:bb:62:66:5c:05:37:d1:14:43:55:34:cd:7e:8b:6f:
         31:9a:29:8a:16:a8:7e:b9:f2:dd:60:fa:76:9d:d0:2d:8c:83:
         39:a6:0d:06:e0:3b:72:1b:72:01:b0:f4:9e:53:71:6e:80:35:
         b5:c6:56:80:db:fb:07:56:71:4e:4e:1c:22:6b:70:d2:83:ee:
         cb:bf:4b:86:57:b8:ca:9a:d4:05:fc:0d:83:04:22:84:05:71:
         6f:9b:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:29 2024 by rpki-client on console-ams.rpki-client.org