Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/WSKr1lCLXGBCiW2PxPmF_zyy0Bs.roa
File:                     WSKr1lCLXGBCiW2PxPmF_zyy0Bs.roa (raw, json)
Hash identifier:          1IvjT4e0oR4uV39L+pVoAzOY48GwbcZjn3e08NKpGR8=
Subject key identifier:   59:22:AB:D6:50:8B:5C:60:42:89:6D:8F:C4:F9:85:FF:3C:B2:D0:1B
Certificate issuer:       /CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Certificate serial:       018345BD24DF869C1D2B5039F6382BAE7044
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/WSKr1lCLXGBCiW2PxPmF_zyy0Bs.roa
Signing time:             Fri 16 Sep 2022 09:59:27 +0000
ROA not before:           Fri 16 Sep 2022 09:59:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        45.8.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:45:bd:24:df:86:9c:1d:2b:50:39:f6:38:2b:ae:70:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
        Validity
            Not Before: Sep 16 09:59:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5922abd6508b5c6042896d8fc4f985ff3cb2d01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:42:b6:08:32:a2:ff:8d:d8:59:49:53:28:
                    b0:a5:3a:5f:ef:a7:2e:c7:df:f3:4b:0a:5e:10:5b:
                    39:e0:67:9e:48:9c:f3:21:d3:98:19:aa:f4:bb:d0:
                    56:cd:aa:d1:ef:32:36:e9:d0:b6:b1:4b:ef:37:c2:
                    34:0e:ee:0b:49:6d:bf:de:b7:09:e8:a4:7f:8f:08:
                    4d:28:3e:67:03:27:cf:75:16:31:46:78:90:bc:c4:
                    a0:99:18:a0:83:14:9e:b8:1b:52:ab:5f:4e:50:82:
                    f3:54:bf:0b:0f:85:2e:95:57:94:88:ab:82:bb:d1:
                    44:34:ad:94:5d:84:a3:c2:4d:2d:0b:25:38:b1:8f:
                    23:ca:97:69:6b:90:a1:05:7e:68:9a:27:84:fa:01:
                    99:7c:e8:d4:cf:9b:70:85:37:7e:59:02:fb:b8:ee:
                    8b:9a:0e:e2:24:d7:a5:1a:51:ae:86:83:51:c8:6b:
                    48:51:41:01:4c:7f:c3:d9:1b:ec:88:5f:37:5b:a2:
                    08:5e:f2:15:c9:55:38:98:c9:0c:20:5a:f2:c9:3d:
                    ee:0c:b2:70:6b:e0:e2:1d:47:b2:1e:05:79:ae:26:
                    7c:d8:11:0d:ee:df:01:26:7b:27:30:ed:03:5d:fd:
                    0d:f6:80:55:1d:e0:11:70:e8:67:00:0a:96:5f:5e:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:22:AB:D6:50:8B:5C:60:42:89:6D:8F:C4:F9:85:FF:3C:B2:D0:1B
            X509v3 Authority Key Identifier:
                keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/WSKr1lCLXGBCiW2PxPmF_zyy0Bs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:21:74:13:20:98:fe:0e:8e:41:d5:98:1e:17:2f:0e:7e:
         78:1e:55:d9:36:a9:81:7c:99:21:b6:25:7a:6a:85:60:6c:e5:
         8e:43:5d:6e:32:d8:b6:8f:c5:46:c8:a9:25:f4:c3:cd:53:95:
         93:cb:33:0b:d5:20:f4:d7:4f:e6:85:c3:b8:2a:69:91:78:99:
         b2:b6:d9:d0:59:c7:35:56:d7:aa:a8:73:9f:e6:fb:43:5f:17:
         31:35:df:39:39:7b:d5:51:4a:7c:0e:31:69:5e:e9:f9:45:07:
         d3:52:77:e1:97:36:37:80:48:1b:c1:be:23:17:8f:97:9b:7c:
         dd:54:50:c7:5c:c5:50:07:0d:9e:e5:54:33:7a:e1:a7:70:fd:
         a4:f3:77:6c:1d:4a:0e:41:5c:ca:c1:d6:f0:87:f0:02:3f:1d:
         6e:d8:7a:ee:eb:de:bb:95:ed:ba:f9:58:54:b2:a4:e5:ab:ba:
         8b:44:3b:07:15:b1:bb:d8:1d:61:f3:ed:3d:72:72:7d:c4:39:
         b2:52:e0:b9:6f:ac:ab:11:99:54:e3:33:49:1f:14:df:94:fb:
         f8:43:e3:c1:0c:52:d3:cb:c9:d6:61:d4:f3:6b:52:fa:b6:57:
         01:99:f9:c4:fb:0b:1f:01:58:a2:0d:0d:59:8a:76:a2:a2:89:
         6e:54:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:42 2024 by rpki-client on console-ams.rpki-client.org