Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/1ShWDVysf642xcBXZTDPzcthNX4.roa
File:                     1ShWDVysf642xcBXZTDPzcthNX4.roa (raw, json)
Hash identifier:          bsdVq0QQ8yADlrh4U81yJ4r48fv2F8exnmuSkaViCKw=
Subject key identifier:   D5:28:56:0D:5C:AC:7F:AE:36:C5:C0:57:65:30:CF:CD:CB:61:35:7E
Certificate issuer:       /CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
Certificate serial:       018CC7274B3A638B9E7042C5B5415A744F41
Authority key identifier: 73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/1ShWDVysf642xcBXZTDPzcthNX4.roa
Signing time:             Mon 01 Jan 2024 22:31:30 +0000
ROA not before:           Mon 01 Jan 2024 22:31:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206995
IP address blocks:        45.80.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:4b:3a:63:8b:9e:70:42:c5:b5:41:5a:74:4f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73588934a0b0d648daf94dd9e629d3dd22ed5abf
        Validity
            Not Before: Jan  1 22:31:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d528560d5cac7fae36c5c0576530cfcdcb61357e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:d7:4d:41:8f:a8:42:22:1f:5b:97:b7:76:
                    e3:40:cb:e6:e4:de:d1:45:85:1a:56:c4:33:f0:b4:
                    af:30:ca:00:92:25:f3:09:1e:81:3c:23:b1:fb:bb:
                    0e:41:a0:9a:04:6d:8d:b2:cb:ca:58:35:23:68:f5:
                    d9:15:2b:7f:f3:cf:49:e7:fc:76:31:e4:14:e0:15:
                    ed:71:f5:e6:e0:0d:14:a0:5a:52:f8:b3:41:a4:45:
                    ef:ea:89:aa:1f:7d:7e:fd:da:f5:f9:77:ca:f8:19:
                    a2:93:42:cf:73:66:32:17:1b:0a:ed:6d:ac:02:5a:
                    3e:8f:c7:5b:b2:e2:84:e5:33:94:c1:ab:bd:b5:3f:
                    84:0d:72:a7:7c:73:fc:c8:83:db:47:12:7c:42:c5:
                    b3:94:49:4d:36:de:cf:05:1d:74:a9:55:a0:31:7f:
                    2b:0a:2a:8a:b6:13:31:6e:63:09:be:8f:b8:87:d6:
                    95:e2:50:d7:cf:a2:d3:c0:8f:55:9a:20:38:78:8b:
                    bd:c6:cb:77:41:55:7b:ac:5a:a7:01:0e:5c:40:34:
                    92:0b:4a:39:1a:d6:6e:e2:51:06:17:3d:36:cf:48:
                    34:af:bc:1a:1c:b3:a5:1b:3a:61:27:80:ed:4b:23:
                    30:0e:72:30:54:d4:8d:78:c8:06:49:a2:87:b0:61:
                    ee:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:28:56:0D:5C:AC:7F:AE:36:C5:C0:57:65:30:CF:CD:CB:61:35:7E
            X509v3 Authority Key Identifier:
                keyid:73:58:89:34:A0:B0:D6:48:DA:F9:4D:D9:E6:29:D3:DD:22:ED:5A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1iJNKCw1kja-U3Z5inT3SLtWr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/1ShWDVysf642xcBXZTDPzcthNX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e3494d-e7aa-4d21-a8ad-7d4c0b7d7861/1/c1iJNKCw1kja-U3Z5inT3SLtWr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:9d:42:61:ad:66:b1:ae:22:cd:81:82:ff:ba:46:dc:21:2c:
         a0:a7:60:41:d7:57:56:06:3a:58:f7:6c:24:3d:a1:24:dc:bf:
         9a:79:b6:3a:af:fa:c3:77:76:b1:da:cf:ea:da:a7:92:ec:a4:
         aa:b7:02:b5:86:3f:fd:b2:f6:19:27:b9:44:81:16:41:ee:05:
         19:4c:f3:86:57:fc:61:78:9c:b9:58:89:7b:b0:94:21:3d:49:
         bb:41:1d:42:4c:9a:cb:cf:4d:d6:05:c0:55:34:1b:b1:6b:ae:
         9f:4e:88:84:a3:bc:0b:59:ae:81:a7:3b:0f:6f:3f:57:9e:55:
         97:a0:b9:6e:53:a9:93:82:37:f4:c1:92:00:63:79:7d:c0:1c:
         98:50:bc:a9:f1:8d:d2:d9:9a:da:74:1c:2f:ab:10:b2:23:05:
         b1:b7:dd:09:db:1d:5d:27:20:88:9d:d1:76:83:20:c4:f7:62:
         24:db:7d:0d:62:08:3d:59:fd:b4:9d:09:7c:ff:ac:bb:57:86:
         54:ad:c9:f7:1b:d5:a5:8a:28:be:35:70:f0:e7:36:65:cb:7a:
         17:44:80:3e:1e:30:7d:8e:b9:57:f8:b5:e7:96:a4:e1:25:b0:
         9b:e2:58:11:da:12:60:7f:57:1b:c8:77:3a:57:9c:24:1d:79:
         cb:dd:55:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org