Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/coQJYsnDCo_1MJbTxhid6qX0sPc.roa
File:                     coQJYsnDCo_1MJbTxhid6qX0sPc.roa (raw, json)
Hash identifier:          DpCp1AgVBu3lk0qxY0Yw2STOMjSbJTdGD9iqWXjeMnQ=
Subject key identifier:   72:84:09:62:C9:C3:0A:8F:F5:30:96:D3:C6:18:9D:EA:A5:F4:B0:F7
Certificate issuer:       /CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
Certificate serial:       05BBC874
Authority key identifier: B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/coQJYsnDCo_1MJbTxhid6qX0sPc.roa
Signing time:             Sat 01 Jan 2022 00:55:31 +0000
ROA not before:           Sat 01 Jan 2022 00:55:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48357
IP address blocks:        45.154.205.0/24 maxlen: 24
                          45.154.206.0/24 maxlen: 24
                          45.154.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96192628 (0x5bbc874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30bf5d9085fe5afe5e201d7c236cef9be9235af
        Validity
            Not Before: Jan  1 00:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=72840962c9c30a8ff53096d3c6189deaa5f4b0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:23:92:1c:18:4e:cd:a7:a6:0c:90:91:16:dc:
                    45:a9:da:fe:b2:fc:49:f5:bf:f1:12:0f:87:69:c9:
                    e6:f7:c5:f5:2f:44:cc:bf:72:2c:1d:2f:b6:30:46:
                    ca:74:46:75:8f:a2:e7:c3:1e:ef:f5:24:e6:1b:71:
                    2d:73:ea:39:8a:6d:11:cb:c3:b0:6e:e1:3a:6f:e1:
                    26:e1:eb:ca:4c:a0:3a:65:a4:7e:7c:48:e4:8f:d9:
                    07:4d:d6:1f:d2:bc:3e:e1:6a:8f:a4:14:8b:29:31:
                    77:ff:31:1f:87:6e:60:f6:dc:a6:c2:19:5c:d0:d4:
                    c6:f8:40:fa:1e:ae:5e:a5:c7:53:b6:a2:1f:9b:a1:
                    0c:4d:3d:f3:4e:39:b7:b4:3e:17:e0:19:e8:da:33:
                    1c:43:16:f6:cb:cf:b8:40:01:3c:67:56:3d:30:7a:
                    cf:ea:60:e7:d5:b3:c4:1e:bc:99:b7:77:f0:79:ff:
                    35:47:f9:3c:20:fe:90:10:33:cc:7e:4f:c3:9f:99:
                    04:5c:c4:a7:7d:cf:7a:b3:70:13:c9:d3:3a:68:f6:
                    57:b6:04:b2:16:29:1e:db:d8:fd:73:b7:66:71:92:
                    f4:0a:5a:92:c8:5f:f7:e0:61:79:28:5e:c6:ff:77:
                    4d:95:bb:7a:fe:68:04:fe:66:cc:95:65:76:25:fc:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:84:09:62:C9:C3:0A:8F:F5:30:96:D3:C6:18:9D:EA:A5:F4:B0:F7
            X509v3 Authority Key Identifier:
                keyid:B3:0B:F5:D9:08:5F:E5:AF:E5:E2:01:D7:C2:36:CE:F9:BE:92:35:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swv12Qhf5a_l4gHXwjbO-b6SNa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/coQJYsnDCo_1MJbTxhid6qX0sPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d2f2c0-51ab-4ada-a26e-25b5bc8dd63c/1/swv12Qhf5a_l4gHXwjbO-b6SNa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.205.0-45.154.207.255

    Signature Algorithm: sha256WithRSAEncryption
         19:5a:dc:f2:36:90:1e:15:a3:83:6e:74:c8:55:0b:5a:dd:ca:
         0a:b8:a4:f4:23:30:02:a5:61:bd:8b:3e:05:07:5f:e0:cc:02:
         6d:e4:3c:5e:95:b1:80:19:73:11:5c:7e:56:e4:d7:95:71:9d:
         3d:83:30:98:5a:63:92:38:22:2a:6c:3f:0f:40:cb:63:b2:39:
         94:2c:14:92:d3:51:55:c9:83:c0:5b:22:be:2a:d6:f8:48:1a:
         54:e1:05:18:3b:b1:05:96:75:94:92:47:91:1d:3d:71:67:99:
         5d:ae:8d:a7:66:e5:5c:71:35:38:f1:5b:e8:1d:20:e2:10:73:
         46:2d:a2:23:59:09:bd:44:3c:8e:67:67:43:2d:06:8e:f1:0a:
         7b:1f:ea:d3:9e:84:d2:81:66:fb:79:00:7b:b6:90:2a:56:31:
         ce:65:e2:a1:07:8b:68:6d:6f:c6:e1:72:9f:ed:2c:29:9d:58:
         36:53:9b:90:03:71:10:b9:7a:fb:f5:01:21:a0:6f:22:48:a9:
         95:79:0b:f3:66:a9:af:96:01:44:61:ab:ce:4f:9c:61:7e:9f:
         62:e8:19:d4:6c:f4:a2:96:c3:60:55:a9:88:0b:45:4d:ab:b8:
         ff:be:16:ea:ce:2d:1c:8e:d4:f1:7d:9f:9f:4a:e9:b9:ed:f0:
         b4:d6:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:44 2024 by rpki-client on console-ams.rpki-client.org