Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/LuBj4ebpfQj2Q5S7WpNuWza6vFE.roa
File:                     LuBj4ebpfQj2Q5S7WpNuWza6vFE.roa (raw, json)
Hash identifier:          Q3ngjUKTPSHWHNX52PBQiCmawjj+7TuGob889Q7eg4g=
Subject key identifier:   2E:E0:63:E1:E6:E9:7D:08:F6:43:94:BB:5A:93:6E:5B:36:BA:BC:51
Certificate issuer:       /CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
Certificate serial:       0955BD19
Authority key identifier: 82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/LuBj4ebpfQj2Q5S7WpNuWza6vFE.roa
Signing time:             Sat 01 Jan 2022 02:53:24 +0000
ROA not before:           Sat 01 Jan 2022 02:53:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397695
IP address blocks:        144.57.32.0/21 maxlen: 21
                          144.57.56.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156613913 (0x955bd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
        Validity
            Not Before: Jan  1 02:53:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ee063e1e6e97d08f64394bb5a936e5b36babc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:9d:75:9a:22:ca:ea:99:5f:b2:6e:64:05:
                    48:36:04:8c:d0:63:d3:40:bc:9b:2c:f8:fa:1b:a5:
                    36:be:63:90:79:bb:d4:f4:7e:19:dd:10:cc:30:96:
                    51:7c:8a:03:7e:d4:72:d2:ad:6f:9c:97:0a:4f:c9:
                    44:88:be:63:95:2a:d8:c8:8b:7b:05:6a:99:f1:da:
                    2c:dc:27:28:b2:00:52:d0:51:5e:ed:0b:16:f0:1d:
                    7b:06:33:a3:e4:3d:d3:21:bb:8d:cf:88:9a:b7:4a:
                    67:13:26:7d:8d:6c:9c:41:55:ca:3d:46:8e:7f:c9:
                    73:cd:0a:e3:f5:2d:9f:6f:f7:23:b0:cd:99:c3:f5:
                    3a:13:7e:24:83:f9:e1:ec:6b:8f:7d:b9:09:aa:52:
                    da:d1:6d:6d:6c:d0:47:0b:30:57:01:2b:f2:a1:bc:
                    49:f5:ac:b0:2d:7b:b3:75:cf:67:61:9e:09:ee:5f:
                    8d:f4:a5:7f:3a:62:49:3a:07:ce:c4:7b:02:cb:d8:
                    29:f1:6f:75:6a:8a:ba:41:cc:bf:2c:90:b3:d3:cc:
                    35:98:7f:04:cb:92:f9:18:8f:f5:02:e0:7e:5f:e0:
                    6f:ba:21:d0:02:1e:9b:c1:b8:d7:bd:26:ed:4f:9d:
                    72:6a:cf:3d:73:82:f3:f8:09:bc:66:18:3a:91:f3:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E0:63:E1:E6:E9:7D:08:F6:43:94:BB:5A:93:6E:5B:36:BA:BC:51
            X509v3 Authority Key Identifier:
                keyid:82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/LuBj4ebpfQj2Q5S7WpNuWza6vFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.57.32.0/21
                  144.57.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:61:7e:4e:78:10:93:54:56:16:c3:4c:da:d0:81:c9:0d:16:
         f0:ba:4c:93:37:8e:c7:47:05:93:41:09:e7:63:c7:19:ef:2e:
         b0:42:ed:c2:1c:88:4d:b6:28:c4:44:7e:f7:22:33:ee:8b:13:
         84:90:37:0c:90:05:26:25:a9:a8:ff:77:f3:d2:fa:b2:7a:ba:
         b0:66:3c:27:39:2f:c7:b6:4b:0a:86:7c:28:aa:c3:ff:90:a3:
         27:95:3d:22:ac:ce:36:c9:c6:82:5e:47:c3:35:b5:fb:4d:33:
         79:68:22:44:3f:91:42:cf:a7:47:62:ed:dc:f9:21:41:78:6f:
         2c:45:e8:70:6f:3b:60:ec:4b:de:52:5a:2a:b1:2b:2f:57:cb:
         ca:87:b8:b8:f9:ec:d2:14:c4:c5:e6:6c:e5:d3:b7:86:69:5e:
         9e:5f:54:5d:8b:df:e6:a7:b0:46:ea:97:48:45:8a:74:06:17:
         e5:d4:e5:4b:5e:9a:4e:ac:71:d4:ff:e4:5a:0b:dc:39:5d:30:
         6a:90:ec:6c:95:78:6a:34:e3:33:6a:9f:f1:3a:23:14:ee:a0:
         39:c9:74:d8:22:98:43:6f:f3:b7:8a:83:17:61:36:a8:39:5a:
         b5:39:04:d7:f2:9a:9f:ae:7d:b0:b4:d4:48:18:6e:f8:85:b6:
         68:01:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:25 2024 by rpki-client on console-ams.rpki-client.org