Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/JTHp3naJQwAB9uboy7zRBhf1QJw.roa
File:                     JTHp3naJQwAB9uboy7zRBhf1QJw.roa (raw, json)
Hash identifier:          BAlhuCIO4dzz1fMK1xdHIhns5RTlUrvLu6g483235n8=
Subject key identifier:   25:31:E9:DE:76:89:43:00:01:F6:E6:E8:CB:BC:D1:06:17:F5:40:9C
Certificate issuer:       /CN=fb0726994524a2757a42c9d6e4e0e1726c795931
Certificate serial:       0185707997C51FED0772085C95FEF5D6158D
Authority key identifier: FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/JTHp3naJQwAB9uboy7zRBhf1QJw.roa
Signing time:             Mon 02 Jan 2023 03:14:54 +0000
ROA not before:           Mon 02 Jan 2023 03:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208525
IP address blocks:        45.80.108.0/24 maxlen: 24
                          45.80.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:97:c5:1f:ed:07:72:08:5c:95:fe:f5:d6:15:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0726994524a2757a42c9d6e4e0e1726c795931
        Validity
            Not Before: Jan  2 03:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2531e9de7689430001f6e6e8cbbcd10617f5409c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:96:67:0c:99:8f:f7:16:21:c3:56:cc:40:
                    cd:ed:75:aa:e5:59:21:fe:41:a6:2a:54:ee:f4:71:
                    d6:45:88:49:64:30:61:4f:c4:33:71:c1:79:dd:c8:
                    c6:08:9e:e3:45:5d:f7:56:0d:a4:33:dc:77:10:0f:
                    ab:ad:a2:a7:d7:99:9d:88:f6:6e:70:e3:82:7f:02:
                    fe:55:9c:ba:98:2c:aa:75:79:82:0e:64:51:07:04:
                    fb:87:d7:21:23:d4:02:8d:85:f6:93:40:6e:db:71:
                    f3:1c:44:c9:f9:37:f3:38:6c:84:cd:10:8d:87:2e:
                    b0:6f:45:eb:bc:a1:07:3e:7e:7e:47:5e:ad:43:83:
                    5e:4c:5a:b4:a2:39:99:f1:de:d8:69:05:fb:78:02:
                    49:01:c4:ba:18:e6:2a:71:e5:e3:6d:a5:f1:e2:48:
                    66:84:a5:f9:d1:13:d9:87:df:59:63:ab:27:43:45:
                    61:1a:71:98:60:b6:f4:22:6a:ca:1e:42:e9:9b:4e:
                    17:03:70:6d:0c:57:f8:71:f4:f3:48:42:30:4b:c9:
                    d7:0e:17:2f:54:2f:e8:e5:f5:89:01:c4:1c:f3:be:
                    c6:18:a3:c8:13:34:ce:c0:8e:20:ab:24:db:b8:5d:
                    50:21:60:3a:52:71:b7:33:21:58:32:b8:88:77:c0:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:31:E9:DE:76:89:43:00:01:F6:E6:E8:CB:BC:D1:06:17:F5:40:9C
            X509v3 Authority Key Identifier:
                keyid:FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/JTHp3naJQwAB9uboy7zRBhf1QJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/1-wcmmUUkonV6QsnW5ODhcmx5WTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:07:01:67:64:99:fb:3c:7c:ac:50:15:42:93:cc:4e:79:4d:
         40:1a:82:90:2d:12:8f:ec:71:3e:5f:70:5c:fd:37:87:05:2f:
         7e:d3:4e:68:c1:3e:52:16:f3:02:38:d8:bb:54:ee:a2:03:71:
         47:aa:77:e1:9c:f5:45:4b:af:da:54:d4:93:8d:b4:0e:98:50:
         91:29:3f:03:50:f8:bf:9c:b4:60:4a:a3:69:6d:4b:bf:7c:5a:
         a3:71:4e:e2:fd:0d:65:26:79:a8:1e:66:e4:85:e8:8b:51:7f:
         bc:98:c0:c8:c0:67:4e:33:db:16:c4:2a:3f:00:9c:63:6f:a1:
         c1:56:15:2f:94:03:75:6c:4a:46:e7:36:ce:9c:17:c4:c1:19:
         34:f8:f4:ff:97:27:38:ae:8e:b2:f5:44:8f:d8:be:1e:3c:40:
         86:8d:d3:bb:0a:66:11:8d:e6:4c:f4:03:16:f4:4e:d8:b2:b0:
         db:58:cf:0a:31:1a:05:6e:ba:dd:08:67:23:5f:59:3f:54:bf:
         28:e2:03:7e:d2:2e:ee:57:15:40:85:38:01:17:75:89:41:07:
         86:1c:b3:59:b0:09:31:f8:f0:be:74:7a:5a:54:d1:c3:79:aa:
         4a:aa:19:c2:c0:44:40:6c:94:f5:5f:e7:af:89:03:85:89:e3:
         57:be:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:24 2024 by rpki-client on console-fra.rpki-client.org