Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/qrouTUm6umYlSlfkFuphp07n0bc.roa
File:                     qrouTUm6umYlSlfkFuphp07n0bc.roa (raw, json)
Hash identifier:          2QV5IuWCpwY9vj9w8DamUTLNXxiAaOoTfYDcrdmDOG0=
Subject key identifier:   AA:BA:2E:4D:49:BA:BA:66:25:4A:57:E4:16:EA:61:A7:4E:E7:D1:B7
Certificate issuer:       /CN=5b26e9376ae7ae4704be18f6f200074db0758231
Certificate serial:       0269065C
Authority key identifier: 5B:26:E9:37:6A:E7:AE:47:04:BE:18:F6:F2:00:07:4D:B0:75:82:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WybpN2rnrkcEvhj28gAHTbB1gjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/qrouTUm6umYlSlfkFuphp07n0bc.roa
Signing time:             Tue 21 Jun 2022 19:38:44 +0000
ROA not before:           Tue 21 Jun 2022 19:38:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1828
IP address blocks:        45.133.80.0/22 maxlen: 22
                          45.133.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40437340 (0x269065c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b26e9376ae7ae4704be18f6f200074db0758231
        Validity
            Not Before: Jun 21 19:38:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aaba2e4d49baba66254a57e416ea61a74ee7d1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:75:9b:bf:a5:2a:6d:8d:01:83:25:4d:6c:
                    b9:d5:02:56:ce:e2:6b:85:b7:f4:e5:e0:e8:b0:bd:
                    db:8e:f9:32:e7:4b:b5:30:3c:68:e7:b0:80:df:b9:
                    df:2c:95:3f:53:a1:4c:cd:80:63:4d:b7:dd:bd:b1:
                    c7:d8:3d:d0:6a:6b:48:9e:c0:a2:a2:27:9c:27:cb:
                    2c:39:5a:68:79:48:8d:d0:2d:e4:10:e6:82:71:d8:
                    b2:7c:72:52:21:26:61:aa:b5:a9:94:87:db:91:9b:
                    a3:55:0d:0e:9d:9f:3b:6c:bc:ec:d1:24:2c:8a:36:
                    07:29:64:c0:64:3c:cc:ed:4c:13:9d:49:b9:4a:70:
                    59:ec:08:53:de:70:b3:e2:59:fa:99:67:b2:90:68:
                    67:ec:7e:b6:52:9a:eb:4a:4f:0f:24:71:3d:35:36:
                    7f:b3:22:cb:de:6d:e2:0a:7f:6f:be:7d:1c:17:8c:
                    ed:fe:2e:c4:84:e3:3b:26:b7:3e:db:ae:b9:73:b3:
                    4d:b2:47:95:a1:cf:0f:1c:fd:23:e3:b3:9d:45:4d:
                    77:53:04:4c:2a:26:a7:42:2a:b8:73:f2:f2:91:6c:
                    70:30:c0:56:7b:d0:99:df:bf:eb:50:1d:83:f5:08:
                    d9:42:80:5a:55:9c:3b:7e:e0:15:d2:bd:6a:f4:34:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BA:2E:4D:49:BA:BA:66:25:4A:57:E4:16:EA:61:A7:4E:E7:D1:B7
            X509v3 Authority Key Identifier:
                keyid:5B:26:E9:37:6A:E7:AE:47:04:BE:18:F6:F2:00:07:4D:B0:75:82:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WybpN2rnrkcEvhj28gAHTbB1gjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/qrouTUm6umYlSlfkFuphp07n0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dd577b-606c-4ca5-a9da-2c4a848a3e81/1/WybpN2rnrkcEvhj28gAHTbB1gjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:68:3c:a4:e4:a8:76:81:53:14:87:79:23:86:6c:cf:92:99:
         c2:65:2c:fc:85:f2:ef:4d:ed:5a:af:76:59:7b:98:c2:ad:75:
         55:fa:47:34:79:f3:e0:6b:1b:af:b9:3c:56:e7:a2:e1:a0:6d:
         a2:ff:bc:4f:39:1a:51:f9:ff:e0:07:10:b0:60:5d:42:ec:01:
         a2:84:fc:16:7e:d3:f3:dd:2d:72:d1:27:af:32:b4:0a:f1:c9:
         cc:23:d5:39:0d:11:22:f0:8f:9f:7c:19:8d:31:a4:bf:0a:9a:
         f5:be:23:36:96:d8:7f:81:ea:a8:e6:f3:44:1c:f7:5b:e7:91:
         56:77:9e:ac:ed:2b:91:93:50:c5:47:64:24:dd:33:44:91:66:
         59:e3:96:c2:5d:05:73:29:3b:37:3f:6a:52:50:1b:e5:c3:73:
         a0:56:b8:1d:35:19:9e:fa:09:fe:47:83:c5:eb:af:22:70:92:
         d0:d9:da:e2:8b:4f:e0:54:ed:50:c0:5c:57:f9:34:78:73:b4:
         f2:88:34:f7:42:2c:df:d8:82:c4:70:dd:11:47:31:74:71:de:
         d7:64:a9:19:9e:18:e2:96:9d:75:77:49:c8:3f:09:7c:50:14:
         11:52:ab:ed:6a:42:05:e5:01:ee:ca:cc:bc:80:a1:ee:7b:0a:
         09:e0:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:30 2024 by rpki-client on console-ams.rpki-client.org