Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/E4hmhJqZm1KjCB2uXEgS5fkbt74.roa
File:                     E4hmhJqZm1KjCB2uXEgS5fkbt74.roa (raw, json)
Hash identifier:          dpuBfEmrU4CooNRwkLqCG3vF8kcJL+qly2cxJ/H81zQ=
Subject key identifier:   13:88:66:84:9A:99:9B:52:A3:08:1D:AE:5C:48:12:E5:F9:1B:B7:BE
Certificate issuer:       /CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Certificate serial:       0109E743
Authority key identifier: 5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/E4hmhJqZm1KjCB2uXEgS5fkbt74.roa
Signing time:             Sat 01 Jan 2022 05:55:36 +0000
ROA not before:           Sat 01 Jan 2022 05:55:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        46.226.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17426243 (0x109e743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
        Validity
            Not Before: Jan  1 05:55:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=138866849a999b52a3081dae5c4812e5f91bb7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:da:b2:4f:97:35:e0:ec:fd:0c:0c:9e:c2:
                    59:8f:7f:1f:06:d9:c7:60:c5:8a:2a:62:19:22:10:
                    bb:2b:ce:a7:0d:c9:40:53:bd:7f:09:d4:06:94:ac:
                    1c:8b:78:55:7e:0c:0c:06:28:b9:9c:84:9b:44:18:
                    28:45:b3:22:15:61:f0:43:ca:04:1f:a0:c0:bd:c2:
                    65:9a:10:88:1a:bf:5a:4a:b2:e6:a6:23:fd:85:5b:
                    b4:56:e2:d1:49:cb:93:aa:f4:9e:c4:a2:5e:11:7c:
                    0f:95:e0:af:54:0e:92:c4:e6:a1:e7:d0:12:d5:6d:
                    a3:6d:69:7f:ec:2f:6a:f4:0f:0e:27:a9:19:57:d9:
                    6b:74:12:7b:9b:86:1f:ca:d7:57:9f:62:b7:75:cb:
                    a7:b3:48:e9:3e:10:d4:dd:31:0e:14:97:b7:7a:97:
                    00:9d:a8:69:c9:af:c9:a5:63:e5:35:ca:b1:77:dc:
                    9d:53:0d:c2:3e:72:10:74:c8:41:3f:cf:41:a0:04:
                    a5:4f:3f:8c:d7:2c:45:31:11:ca:f4:ed:71:e6:d2:
                    db:f8:ec:5f:4e:fa:ce:35:77:9d:38:20:a1:12:b8:
                    2e:39:4c:7c:ce:ca:40:aa:47:b6:b0:e6:06:7e:79:
                    bf:4e:1d:3e:2a:33:75:86:41:24:77:2c:f0:2f:9f:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:88:66:84:9A:99:9B:52:A3:08:1D:AE:5C:48:12:E5:F9:1B:B7:BE
            X509v3 Authority Key Identifier:
                keyid:5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/E4hmhJqZm1KjCB2uXEgS5fkbt74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Wws-T78jbPFlG6c02htH9i9KukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:eb:a0:fc:09:ae:08:5f:4f:e2:78:0b:23:d0:35:a3:ab:af:
         ff:b3:52:64:8e:5a:c0:2b:77:b2:a4:a7:d9:62:22:be:b1:c7:
         90:ff:5a:8b:23:0b:2e:f3:68:63:13:61:1e:90:66:4b:c6:03:
         9f:91:0d:24:32:00:5a:6d:ea:4f:55:e2:03:85:ab:25:0d:e0:
         63:15:58:92:b7:bc:af:f1:3e:1c:6b:68:59:51:be:ae:91:90:
         02:32:01:b7:e7:c0:a5:c3:f2:6a:c9:d1:2c:80:ef:bd:6f:e7:
         81:fe:e3:57:bd:b9:a5:49:72:63:82:b2:6a:48:33:38:4d:4d:
         a6:de:9b:93:49:00:08:12:e1:b8:66:46:ca:b9:4f:ec:64:3d:
         7a:7e:67:61:ef:bd:18:99:97:3f:a8:00:ef:6f:85:1e:11:f4:
         5b:f7:9c:8d:41:16:20:e3:71:44:26:0a:20:f8:f7:c7:f8:97:
         fb:e3:32:63:b5:b7:cb:f3:83:15:53:7b:4c:d7:16:34:21:37:
         9c:5a:0f:5c:86:4a:ed:d0:bf:ab:6c:18:56:b0:91:44:51:27:
         d6:9a:56:ab:89:1a:cf:4a:ec:b0:4a:09:66:ce:43:56:f3:99:
         ea:2c:e0:bb:65:a7:0f:e8:c1:68:06:98:2b:02:75:b2:14:05:
         18:92:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:35 2024 by rpki-client on console-ams.rpki-client.org