Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Fb8Anx8VwbPbcr8Iq-X9b2rgvXI.roa
File:                     Fb8Anx8VwbPbcr8Iq-X9b2rgvXI.roa (raw, json)
Hash identifier:          vrkyBPYnVXr6rsFGh4r9frOanGaV1UMDRQy1W2mkdnc=
Subject key identifier:   15:BF:00:9F:1F:15:C1:B3:DB:72:BF:08:AB:E5:FD:6F:6A:E0:BD:72
Certificate issuer:       /CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Certificate serial:       0186783AFDEAE66DD64476E2B7108DE59663
Authority key identifier: 5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Fb8Anx8VwbPbcr8Iq-X9b2rgvXI.roa
Signing time:             Wed 22 Feb 2023 08:26:17 +0000
ROA not before:           Wed 22 Feb 2023 08:26:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135752
IP address blocks:        46.226.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:78:3a:fd:ea:e6:6d:d6:44:76:e2:b7:10:8d:e5:96:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
        Validity
            Not Before: Feb 22 08:26:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15bf009f1f15c1b3db72bf08abe5fd6f6ae0bd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:a4:4b:e6:54:81:20:b9:5f:22:69:e6:f1:
                    7e:00:29:92:ef:eb:57:8e:61:73:d1:f8:20:32:b8:
                    0b:a5:45:f0:f3:4c:fb:b9:0d:42:52:39:65:5b:eb:
                    0c:8b:35:62:aa:89:f0:f6:97:38:8f:2d:97:84:11:
                    54:86:95:9b:4f:a6:5f:ec:57:79:54:90:25:8a:c2:
                    b6:cc:ca:07:c8:27:52:74:b7:93:68:a5:2a:b3:9f:
                    d0:26:dd:99:66:99:fd:24:c8:1e:34:31:ab:00:43:
                    06:59:9f:b7:09:98:1e:5b:90:74:71:2e:47:7c:89:
                    b1:eb:98:fd:70:ec:b3:57:76:a7:26:29:0f:3f:98:
                    c9:fb:cf:dc:d5:92:c3:0f:e6:4d:ab:d5:e9:d3:72:
                    9d:1a:ed:64:02:6e:13:4f:c9:d0:66:73:dc:37:ec:
                    e6:c0:41:39:13:e6:cb:3a:be:e1:aa:23:b2:2b:05:
                    74:cf:40:2b:67:11:7e:25:85:25:96:ba:ad:74:96:
                    76:b5:1a:20:02:e3:80:0c:eb:c7:8a:fa:e0:6c:ff:
                    a0:c1:c6:9b:2e:97:4b:4a:5d:dd:2b:a5:65:11:3f:
                    3c:48:78:90:df:2b:38:50:f3:f0:3e:d5:aa:22:04:
                    ab:99:67:4b:f3:8b:c1:8b:ac:f1:2a:e2:87:3f:65:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BF:00:9F:1F:15:C1:B3:DB:72:BF:08:AB:E5:FD:6F:6A:E0:BD:72
            X509v3 Authority Key Identifier:
                keyid:5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Fb8Anx8VwbPbcr8Iq-X9b2rgvXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Wws-T78jbPFlG6c02htH9i9KukQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:24:73:71:b3:f2:f2:a9:91:52:00:e8:ac:55:47:ce:1d:
         ca:86:8d:fa:b0:4b:2a:dd:90:5a:bb:a2:8a:c6:65:9c:f2:78:
         0d:ff:66:85:f4:e2:7b:91:e1:8f:db:92:3d:f2:28:df:49:ab:
         7d:b3:96:5b:13:2b:f9:ef:6a:ac:b0:ed:bb:e9:c5:03:08:8a:
         e1:61:65:af:a3:03:7a:8f:26:42:e4:82:cf:5d:ab:e4:04:00:
         58:72:e0:9c:97:d0:65:80:81:ff:ac:0d:7f:05:d7:0b:8a:2f:
         7d:e6:47:0f:85:3b:ef:3a:3d:6e:b2:72:4a:c9:1d:0e:c1:cf:
         8c:73:99:87:3e:88:4c:d4:8c:f0:49:62:10:54:87:80:cd:5f:
         65:ba:de:c3:a9:59:f5:c0:15:bd:84:16:21:1c:80:00:ab:17:
         55:f0:27:c6:a1:29:14:4f:d0:59:f6:f9:6d:6a:a8:d7:7b:d6:
         5b:12:02:7d:7c:83:c4:6e:67:4f:a7:63:63:c1:ed:3d:38:65:
         75:bd:5e:c8:ef:08:a6:0e:c9:eb:c7:f4:6d:e7:95:a2:bc:48:
         dc:ca:f8:cd:c1:91:1c:39:6d:19:b2:78:df:26:a6:d0:45:e6:
         93:c4:66:4f:25:01:f2:1d:27:07:2d:e1:a4:7b:32:73:e5:8b:
         c6:27:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org