Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41f84f-a80c-4247-b707-6ac526ed1b60/1/cZEUzJrxn0Zu5vnZGLwYi3bUJi4.roa
File:                     cZEUzJrxn0Zu5vnZGLwYi3bUJi4.roa (raw, json)
Hash identifier:          kOYCizjLm8fQof9AMb1hbt/gdCkx9P3L65+zFAtPq7M=
Subject key identifier:   71:91:14:CC:9A:F1:9F:46:6E:E6:F9:D9:18:BC:18:8B:76:D4:26:2E
Certificate issuer:       /CN=835defb86d4665b7abda63bfe8d9b07d06f96b27
Certificate serial:       077B3834
Authority key identifier: 83:5D:EF:B8:6D:46:65:B7:AB:DA:63:BF:E8:D9:B0:7D:06:F9:6B:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g13vuG1GZber2mO_6NmwfQb5ayc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/41f84f-a80c-4247-b707-6ac526ed1b60/1/cZEUzJrxn0Zu5vnZGLwYi3bUJi4.roa
Signing time:             Sat 01 Jan 2022 04:51:40 +0000
ROA not before:           Sat 01 Jan 2022 04:51:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209916
IP address blocks:        45.83.248.0/22 maxlen: 24
                          2a0e:8a80::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125515828 (0x77b3834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835defb86d4665b7abda63bfe8d9b07d06f96b27
        Validity
            Not Before: Jan  1 04:51:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=719114cc9af19f466ee6f9d918bc188b76d4262e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:09:19:a4:c6:4e:81:13:49:79:85:53:19:
                    4b:b2:63:fd:cc:54:27:15:b6:d1:6a:66:8a:a2:2a:
                    cf:1a:91:00:91:d7:ae:a9:ec:ab:ad:29:5b:5c:51:
                    47:90:06:98:06:ac:81:e6:bf:2a:71:dd:0d:15:cb:
                    3e:7b:62:41:3a:c3:e6:eb:f6:5f:76:dc:1f:2b:bb:
                    93:82:68:fa:82:73:d1:9c:9d:43:4d:84:ce:48:95:
                    19:66:c1:37:0e:a0:be:f7:f8:f0:12:38:da:00:98:
                    3f:45:e8:3f:fa:de:b1:02:d0:65:86:e5:66:5c:54:
                    47:4f:c3:d9:8b:e7:c5:03:e9:28:3c:08:e1:42:db:
                    17:e1:d0:eb:44:1b:cb:18:0e:ae:2c:cd:d4:ce:1b:
                    2a:e6:63:02:d9:d1:f6:e3:a7:88:4f:63:ce:79:5c:
                    35:21:17:01:d6:66:99:dd:c4:f5:88:1f:f1:5a:4f:
                    3f:ee:e1:b4:50:22:6e:ee:e0:89:0a:a8:ec:a0:09:
                    4a:00:07:07:cd:77:44:ff:4f:c3:86:30:53:28:a2:
                    34:2c:b8:d2:9e:b0:23:60:75:7c:cb:39:5b:c2:68:
                    eb:d1:69:0b:35:5c:c6:27:80:89:5a:dd:73:a7:49:
                    13:ab:82:3b:95:5f:d0:77:33:b0:e4:c3:0e:fd:23:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:91:14:CC:9A:F1:9F:46:6E:E6:F9:D9:18:BC:18:8B:76:D4:26:2E
            X509v3 Authority Key Identifier:
                keyid:83:5D:EF:B8:6D:46:65:B7:AB:DA:63:BF:E8:D9:B0:7D:06:F9:6B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g13vuG1GZber2mO_6NmwfQb5ayc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41f84f-a80c-4247-b707-6ac526ed1b60/1/cZEUzJrxn0Zu5vnZGLwYi3bUJi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41f84f-a80c-4247-b707-6ac526ed1b60/1/g13vuG1GZber2mO_6NmwfQb5ayc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.248.0/22
                IPv6:
                  2a0e:8a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:74:ef:9b:c1:ae:01:ec:f3:9c:18:07:4c:94:ab:c8:01:
         64:bf:d1:cd:55:14:a9:01:19:66:a4:d9:fd:52:0e:01:9c:da:
         d1:c5:d2:d3:d3:0b:52:06:e5:08:5a:9f:b3:ef:e4:2e:63:28:
         1b:a0:04:76:56:e5:f0:e9:f4:88:d6:e7:df:69:89:7d:e3:2f:
         82:19:26:f3:4f:65:9c:ed:24:67:67:ae:e3:cc:6e:c0:2f:42:
         1a:f6:32:dd:5f:91:44:4e:5a:d6:b9:8b:d7:19:d1:00:a4:4c:
         72:e8:9a:d8:ed:24:db:54:19:6f:f6:be:27:73:8d:bd:a5:40:
         4d:16:00:6a:73:08:07:6a:d8:d0:de:9d:b1:2b:db:47:ae:54:
         24:cf:25:7b:80:2b:4f:bb:4e:ea:05:22:fa:f8:88:44:45:ce:
         46:b8:68:30:86:36:2e:31:a2:2f:2f:08:f6:6d:d9:72:92:4b:
         7b:cf:f3:bf:09:e8:3d:5a:cf:3c:ea:11:94:95:dc:fe:dc:1c:
         4b:8f:61:e8:19:3d:04:f3:e9:58:db:b0:1a:aa:29:1e:25:9a:
         46:e2:0a:12:23:76:27:ff:e6:e2:15:b8:4f:c9:ad:10:ff:c8:
         0b:af:2a:28:bf:69:8a:cb:cc:35:b5:d5:6e:e9:31:0d:1e:19:
         6b:4f:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:50 2024 by rpki-client on console-fra.rpki-client.org