Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/JELEJtELHlL2YUFP_QHBKk8eEXs.roa
File:                     JELEJtELHlL2YUFP_QHBKk8eEXs.roa (raw, json)
Hash identifier:          Tsx6KS66dZMwPjEdWLAbOFQivp9KaarZ5GtQCfN679c=
Subject key identifier:   24:42:C4:26:D1:0B:1E:52:F6:61:41:4F:FD:01:C1:2A:4F:1E:11:7B
Certificate issuer:       /CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Certificate serial:       03C72469
Authority key identifier: 37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/JELEJtELHlL2YUFP_QHBKk8eEXs.roa
Signing time:             Sat 01 Jan 2022 00:51:43 +0000
ROA not before:           Sat 01 Jan 2022 00:51:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3214
IP address blocks:        45.129.85.0/24 maxlen: 24
                          45.129.84.0/24 maxlen: 24
                          45.129.87.0/24 maxlen: 24
                          45.129.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63382633 (0x3c72469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37529d57a6db1ec827cbae446ad39f39d1a519da
        Validity
            Not Before: Jan  1 00:51:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2442c426d10b1e52f661414ffd01c12a4f1e117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:c9:8e:da:a2:e3:bf:fa:bd:ff:25:bd:d7:
                    42:d6:7e:96:a6:4e:a6:52:23:af:74:ab:80:53:9d:
                    67:91:83:34:56:19:8f:dc:89:ec:aa:0a:e5:95:56:
                    88:e0:ff:90:db:99:ab:d9:06:9c:5e:b3:99:7e:dd:
                    0c:48:7d:78:73:a5:23:df:92:8d:ce:15:e1:d1:a7:
                    64:10:e9:fd:99:90:87:11:44:02:85:2e:e4:5d:7e:
                    3c:68:65:1a:20:b2:4a:f0:0b:c7:ba:77:d6:59:b4:
                    b8:1c:d5:94:c9:ae:40:50:80:ac:1d:9a:83:5e:dd:
                    72:c0:f9:fb:29:79:be:3c:a8:40:54:ac:af:87:cc:
                    21:95:ad:25:94:38:7d:c9:e4:0c:64:c1:46:df:c6:
                    f0:ca:6e:73:b9:21:59:50:7b:3c:19:87:17:c8:71:
                    65:e5:23:55:9e:cf:6a:5d:fe:a9:78:05:2b:78:d8:
                    20:6c:ac:77:0e:ff:13:b1:82:b6:75:e7:d1:42:22:
                    37:9b:c0:94:6c:d5:79:ce:76:d4:8d:2b:c7:d3:16:
                    95:34:98:a4:1a:50:3d:5c:89:e4:e9:fa:6a:a7:7e:
                    5f:20:4e:57:fc:de:0c:e3:c1:b4:3b:38:dd:8d:ad:
                    b6:3c:d6:d4:8d:7c:5e:2e:60:dc:65:58:c8:fe:20:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:42:C4:26:D1:0B:1E:52:F6:61:41:4F:FD:01:C1:2A:4F:1E:11:7B
            X509v3 Authority Key Identifier:
                keyid:37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/JELEJtELHlL2YUFP_QHBKk8eEXs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:c7:40:fe:78:23:67:89:35:19:ae:7d:5f:79:36:aa:4a:98:
         f2:f7:0e:01:f6:48:46:11:b6:bc:56:95:af:a3:26:71:99:06:
         4a:7d:2e:a4:83:56:c9:b5:6c:13:ff:46:3d:73:81:96:5b:2c:
         c7:63:59:e7:36:97:99:dc:f5:99:e8:97:bf:4a:3e:b2:c7:df:
         03:79:2a:23:19:59:da:38:17:84:bf:e9:65:42:9a:0f:b8:c2:
         6b:14:77:8b:50:8c:98:9e:60:0c:2e:c2:3a:b3:85:cb:12:9e:
         9f:b0:cf:61:b1:55:05:e0:9b:ea:91:2c:cf:0f:80:cc:91:75:
         41:67:ae:a0:58:1f:c1:d8:e7:27:13:49:5e:59:c9:76:fc:e7:
         77:3c:41:7b:2a:ea:e1:62:ce:12:15:6c:28:d3:69:73:09:73:
         49:89:af:cb:6d:7d:55:53:f1:6a:04:77:47:91:76:7a:0b:08:
         12:06:58:10:1d:66:68:51:13:00:09:89:f6:af:62:a3:b0:b1:
         be:04:88:f7:00:42:7e:e4:10:b4:3a:17:de:b5:71:4a:13:4b:
         8f:3f:17:1a:1d:f6:4f:ea:07:40:76:46:8a:3d:01:6a:f3:27:
         e1:be:0b:3c:47:4b:93:2d:d4:0c:c9:c9:01:47:7c:c6:74:02:
         13:a6:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org