Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/QbHCJf5e_tz5ubWPpXuwdd0G-mI.roa
File:                     QbHCJf5e_tz5ubWPpXuwdd0G-mI.roa (raw, json)
Hash identifier:          vPWbQ5Wsx5QTepIurNqCkxFHD0NuPtVbNGYrfzSQu4E=
Subject key identifier:   41:B1:C2:25:FE:5E:FE:DC:F9:B9:B5:8F:A5:7B:B0:75:DD:06:FA:62
Certificate issuer:       /CN=b146b28951a21163dc9651b54c23936fccacf47b
Certificate serial:       44BF64AB
Authority key identifier: B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/QbHCJf5e_tz5ubWPpXuwdd0G-mI.roa
Signing time:             Sat 01 Jan 2022 14:57:22 +0000
ROA not before:           Sat 01 Jan 2022 14:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58282
IP address blocks:        5.179.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153393835 (0x44bf64ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146b28951a21163dc9651b54c23936fccacf47b
        Validity
            Not Before: Jan  1 14:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=41b1c225fe5efedcf9b9b58fa57bb075dd06fa62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:9a:c1:5e:5e:27:e0:e7:5d:a6:15:3c:a5:
                    af:77:f8:71:ad:66:55:01:68:87:76:ee:fd:fd:a5:
                    98:e8:c2:6b:1a:45:26:85:ff:a0:cf:0c:07:8b:f9:
                    13:ac:a6:1e:aa:b0:e2:b4:70:3f:57:cc:45:f0:9b:
                    01:af:38:d8:cf:9d:d2:72:f6:f8:05:92:9f:4b:d2:
                    2e:94:3c:9c:b2:24:cf:65:70:86:5c:65:b5:d9:a1:
                    9d:cb:da:e5:d3:5e:cf:92:6e:11:e5:dc:a3:f0:08:
                    04:cd:ea:ca:34:8c:87:ce:92:86:e4:26:1b:a6:c5:
                    45:30:7d:26:3d:40:1f:62:61:8f:c1:c9:c6:2e:92:
                    ed:a4:2d:27:72:db:ab:db:61:1d:e5:81:4e:15:ac:
                    dc:bc:e9:f3:83:98:9b:e2:a6:2d:17:50:21:32:66:
                    f5:e7:cd:7d:e9:43:6e:6e:50:1c:2d:5f:d5:79:d0:
                    62:d2:0b:fd:03:9e:ef:f1:4d:8b:55:6b:91:cb:01:
                    7d:2e:d2:ca:62:37:e8:d1:3d:29:97:3a:0a:03:72:
                    fe:6c:3e:07:ca:fc:dc:12:3f:73:68:95:55:9c:90:
                    25:fe:95:2b:e5:60:e0:17:19:53:00:d1:5e:58:df:
                    db:bd:4b:e9:99:7a:41:bf:4f:ed:c1:21:00:85:25:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B1:C2:25:FE:5E:FE:DC:F9:B9:B5:8F:A5:7B:B0:75:DD:06:FA:62
            X509v3 Authority Key Identifier:
                keyid:B1:46:B2:89:51:A2:11:63:DC:96:51:B5:4C:23:93:6F:CC:AC:F4:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUayiVGiEWPcllG1TCOTb8ys9Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/QbHCJf5e_tz5ubWPpXuwdd0G-mI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30b225-a165-4fc3-9342-b337f7e90915/1/sUayiVGiEWPcllG1TCOTb8ys9Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.179.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:9a:b7:1b:27:97:79:07:1c:04:e6:42:fc:45:b0:2f:9d:aa:
         89:28:a5:fc:08:90:fc:af:e1:0e:6c:39:25:8f:7a:dc:40:a1:
         6a:bc:da:8f:22:d3:42:cf:da:d2:25:1b:fd:3b:f1:60:5d:b7:
         9e:1d:4d:32:f3:75:ca:63:8f:fb:80:62:ee:18:5b:32:0e:62:
         fa:5c:02:5a:fb:c0:cb:1e:de:b7:a0:21:d7:2d:6d:7d:37:ec:
         22:9d:5e:97:59:5b:09:55:fb:fd:b4:2e:92:6a:f5:a4:d7:0b:
         00:3e:7b:c1:65:93:7b:d1:e0:4e:9e:b7:98:c6:36:1b:be:91:
         4c:a9:ef:4f:a7:eb:a2:ba:2e:f3:76:e4:d2:ce:fc:38:1e:1c:
         ca:21:5d:3a:cd:6a:db:ad:d2:d4:f0:9f:62:ba:b5:31:04:6b:
         64:3f:c4:69:c9:ab:a9:cd:99:7c:42:c7:50:56:fc:1b:82:1a:
         b6:34:ff:5a:37:28:49:70:f1:aa:8f:3f:26:eb:d7:11:25:97:
         4e:2e:5e:c5:83:a5:97:b0:0d:13:78:a7:90:3a:2a:ac:6f:2d:
         90:e0:68:cd:49:7f:ee:e4:45:ad:d8:30:4c:16:f5:44:4b:a8:
         c2:bb:32:26:f6:a5:95:21:1f:5c:a6:77:12:60:4a:2e:d4:e3:
         cf:4c:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:57 2024 by rpki-client on console-fra.rpki-client.org