Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/wfLB_B2GL5jP98vuNSclxfZcWZ8.roa
File:                     wfLB_B2GL5jP98vuNSclxfZcWZ8.roa (raw, json)
Hash identifier:          JY7p6y/j98Drb17lgviT54mKwkQy+bsiPdtqFhgiOWM=
Subject key identifier:   C1:F2:C1:FC:1D:86:2F:98:CF:F7:CB:EE:35:27:25:C5:F6:5C:59:9F
Certificate issuer:       /CN=51f40bfbe31f1e3bfefb363d58de9bd8a27d8715
Certificate serial:       0867C510
Authority key identifier: 51:F4:0B:FB:E3:1F:1E:3B:FE:FB:36:3D:58:DE:9B:D8:A2:7D:87:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfQL--MfHjv--zY9WN6b2KJ9hxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/wfLB_B2GL5jP98vuNSclxfZcWZ8.roa
Signing time:             Sat 01 Jan 2022 07:03:43 +0000
ROA not before:           Sat 01 Jan 2022 07:03:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39020
IP address blocks:        45.80.14.0/24 maxlen: 24
                          45.80.12.0/24 maxlen: 24
                          45.80.15.0/24 maxlen: 24
                          45.80.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141018384 (0x867c510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f40bfbe31f1e3bfefb363d58de9bd8a27d8715
        Validity
            Not Before: Jan  1 07:03:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1f2c1fc1d862f98cff7cbee352725c5f65c599f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:6b:2d:0b:cc:5d:88:bc:27:2c:3a:ca:7d:
                    f4:6d:3b:e1:87:d3:e8:1e:95:92:b6:d0:34:12:e6:
                    53:f9:87:ff:0d:cd:b2:47:58:d9:9c:42:2c:70:ed:
                    1e:e7:3f:85:20:58:80:a2:ce:53:97:f3:2f:e7:87:
                    bd:54:ad:da:87:7c:0a:20:c3:41:1e:ee:ef:b5:1a:
                    b7:1f:3b:95:cf:0a:5f:d3:0e:ce:c3:da:5d:a3:14:
                    ee:5b:5d:4a:1e:35:92:55:ec:89:4b:39:86:d0:a8:
                    4f:f5:c3:d3:99:31:b3:27:82:63:92:5d:d6:87:d5:
                    9f:85:28:f1:5f:f2:08:3b:36:af:cf:96:49:06:98:
                    28:13:33:b0:da:47:58:71:19:53:d4:98:97:7f:7d:
                    d3:64:2c:9a:58:44:33:70:08:cb:33:83:7e:e5:e7:
                    7e:5d:bd:5e:78:eb:7a:5f:3c:68:7c:12:5e:9c:11:
                    0a:c7:a6:3c:96:09:1e:ee:38:3d:9d:b5:a3:d0:58:
                    03:c9:98:9d:ad:30:24:8e:53:58:c0:ad:6f:d1:51:
                    cf:f9:c7:b8:c8:ad:c5:16:aa:e4:f9:d5:2b:f4:d6:
                    73:53:ae:c3:6b:57:d1:b2:80:44:c9:00:56:fa:9d:
                    95:19:e2:a0:cc:55:27:84:44:49:5c:2c:08:e8:4b:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F2:C1:FC:1D:86:2F:98:CF:F7:CB:EE:35:27:25:C5:F6:5C:59:9F
            X509v3 Authority Key Identifier:
                keyid:51:F4:0B:FB:E3:1F:1E:3B:FE:FB:36:3D:58:DE:9B:D8:A2:7D:87:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfQL--MfHjv--zY9WN6b2KJ9hxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/wfLB_B2GL5jP98vuNSclxfZcWZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/UfQL--MfHjv--zY9WN6b2KJ9hxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:98:ef:90:ee:52:15:c6:5e:06:7f:24:7a:cb:4f:35:e2:c8:
         ea:08:e6:d6:cb:19:5c:fe:1d:d6:5a:84:f4:d5:89:53:e7:44:
         d2:83:1c:fe:81:5a:7a:32:86:40:76:db:f8:dd:bf:4e:99:42:
         f1:a4:72:17:31:1a:37:93:6d:dc:0f:b0:dd:8f:64:78:91:7b:
         d3:34:30:60:99:8b:f4:4d:f1:f2:64:81:bd:9b:91:63:8c:d7:
         30:5a:0a:62:7f:c6:9a:e6:c8:a5:84:94:69:0b:6f:93:5a:9a:
         4e:94:1b:0f:9a:b1:74:9b:d8:d0:c3:2d:59:66:6b:15:1f:b7:
         fd:66:34:14:ab:3f:ba:2a:bd:12:0f:49:64:b1:cd:ad:f8:d9:
         e1:85:d5:5f:19:89:71:06:43:e0:19:6a:8f:06:4c:ca:24:7c:
         fd:50:49:b0:45:dc:a2:b7:3e:1b:11:87:b6:1a:8f:81:69:86:
         d9:ce:94:1b:5a:23:90:19:df:9d:47:68:7b:d0:e4:25:00:0b:
         db:39:2d:56:db:a1:3f:ae:bf:f1:4a:12:cf:05:59:8e:84:32:
         df:e8:28:51:7e:68:df:c9:f1:6c:6f:04:2d:41:d0:35:cc:04:
         4b:11:9d:c2:db:76:f1:f7:d8:cb:cf:9a:27:12:b5:0d:7a:3b:
         b5:ac:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org