Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/jABG7182FMfKdPbM4c0rnOcU-F4.roa
File:                     jABG7182FMfKdPbM4c0rnOcU-F4.roa (raw, json)
Hash identifier:          rCx2mYDCUh1a2lna2tOLmBEGhZg4VS9a//LKUMmZqvI=
Subject key identifier:   8C:00:46:EF:5F:36:14:C7:CA:74:F6:CC:E1:CD:2B:9C:E7:14:F8:5E
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       092FD81C
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/jABG7182FMfKdPbM4c0rnOcU-F4.roa
Signing time:             Mon 31 Jan 2022 10:44:13 +0000
ROA not before:           Mon 31 Jan 2022 10:44:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        45.13.148.0/23 maxlen: 24
                          212.102.114.0/24 maxlen: 24
                          77.83.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154130460 (0x92fd81c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Jan 31 10:44:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c0046ef5f3614c7ca74f6cce1cd2b9ce714f85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:05:7b:d2:74:0a:4c:23:cb:2b:44:22:76:
                    42:17:29:1c:02:2b:e9:5f:14:39:66:e1:19:98:b2:
                    0c:c3:dd:ca:bb:d7:59:5b:52:c1:e7:1b:22:ed:db:
                    0d:be:f0:4a:30:b4:51:c2:97:f8:3e:9a:23:63:2a:
                    a2:b9:67:b9:50:a8:a6:c4:9e:86:04:bf:d0:11:69:
                    37:82:f8:69:80:8e:e0:aa:2a:76:ec:7f:6d:3f:8d:
                    43:33:04:6a:05:1d:99:3c:87:64:1e:63:3e:3c:cf:
                    8a:29:39:e6:c3:b4:d1:58:b9:77:43:38:d1:3c:55:
                    9b:97:29:ce:94:59:be:5d:50:22:8e:63:b6:f8:33:
                    95:b5:3e:24:30:f2:ee:b7:bf:0e:d6:ec:f0:5e:8b:
                    93:a8:fa:b3:e8:b1:25:9f:92:c1:ec:fa:c9:56:a5:
                    f9:b0:e2:f0:02:1b:f3:f4:4e:1d:cb:c7:b1:f6:78:
                    96:e8:b2:79:64:fa:c1:84:bc:e6:20:d9:fd:16:33:
                    70:66:c4:f1:e0:6d:68:50:d1:8e:a2:72:23:6c:d8:
                    f9:92:2c:49:a0:22:5f:37:e6:5c:1d:bc:14:4f:16:
                    09:33:b7:43:96:7d:09:36:74:47:e4:16:c4:36:da:
                    00:a7:a9:63:fa:0f:c3:d1:60:73:ae:aa:c3:fd:ff:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:46:EF:5F:36:14:C7:CA:74:F6:CC:E1:CD:2B:9C:E7:14:F8:5E
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/jABG7182FMfKdPbM4c0rnOcU-F4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.148.0/23
                  77.83.252.0/22
                  212.102.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:4b:de:5e:8d:bf:84:24:ef:05:03:f1:72:5b:29:85:66:e7:
         3f:39:29:0f:f4:52:bf:f0:c7:5f:58:c9:83:b7:07:35:3b:6e:
         4b:e6:b7:6d:69:14:66:b1:c3:84:dc:98:c9:eb:c9:59:e4:49:
         b1:c9:a2:58:31:cb:9b:f1:d9:7a:19:7b:a3:b0:a6:9e:63:a3:
         60:41:82:e9:a1:9a:7e:72:ee:e8:fc:55:4b:d1:d9:98:fa:b7:
         03:76:b4:d9:5d:66:50:d5:d1:48:d0:26:33:56:be:7f:47:6d:
         59:c0:28:74:71:65:35:01:82:68:13:10:55:27:bb:f7:a0:5d:
         10:89:a6:5b:05:66:d6:a5:5c:13:fe:5f:40:b4:b0:bb:f5:fd:
         f9:53:64:e3:3f:74:81:54:95:55:9d:24:ee:66:c2:73:e8:3f:
         6a:10:fe:87:77:b9:41:43:a1:b9:42:ea:82:1e:fb:76:a2:d6:
         83:23:4e:da:3e:82:ad:04:c2:7c:e0:fb:f0:fc:2d:87:88:65:
         50:49:75:84:b8:fd:95:d8:c5:66:9e:29:9b:2e:fa:4f:84:9e:
         bd:d0:8c:09:70:29:8a:7d:b6:5b:49:9e:17:8d:81:61:c3:ba:
         87:48:35:cf:01:9f:f7:16:2d:65:1b:7f:b6:14:24:28:92:0c:
         04:9a:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org