Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/VEjLSMHUsjvd0xqSGXpGV-vgDBk.roa
File:                     VEjLSMHUsjvd0xqSGXpGV-vgDBk.roa (raw, json)
Hash identifier:          /mYI5c9wNKM6t6FAIVnuIqXMLcXAtUm7trPsy4WQqoA=
Subject key identifier:   54:48:CB:48:C1:D4:B2:3B:DD:D3:1A:92:19:7A:46:57:EB:E0:0C:19
Certificate issuer:       /CN=fb0726994524a2757a42c9d6e4e0e1726c795931
Certificate serial:       01899873B39DD5BCF69EC901BB2F3613D566
Authority key identifier: FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/VEjLSMHUsjvd0xqSGXpGV-vgDBk.roa
Signing time:             Thu 27 Jul 2023 17:44:26 +0000
ROA not before:           Thu 27 Jul 2023 17:44:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208525
IP address blocks:        45.80.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:98:73:b3:9d:d5:bc:f6:9e:c9:01:bb:2f:36:13:d5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0726994524a2757a42c9d6e4e0e1726c795931
        Validity
            Not Before: Jul 27 17:44:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5448cb48c1d4b23bddd31a92197a4657ebe00c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:32:df:ce:bb:bb:df:6e:64:56:38:07:86:
                    87:a4:6f:2c:4b:09:8c:26:21:22:07:d3:bb:bd:bf:
                    65:3d:b1:cf:0c:2e:f3:7e:62:30:74:89:e8:e6:40:
                    be:df:73:93:d0:8f:3e:70:aa:5a:95:ae:35:0f:b9:
                    4b:7c:74:6c:ff:72:cc:8e:ed:99:65:9a:cd:f5:2e:
                    8e:76:18:f0:24:a3:7a:05:13:56:77:06:ba:9c:87:
                    d6:b9:14:cb:a9:5a:d9:49:97:7b:b7:2a:4c:4e:73:
                    bd:e1:60:1d:95:36:95:8a:14:48:27:48:4d:97:24:
                    01:66:c0:44:a1:60:8a:bf:17:bd:fc:e5:72:b5:72:
                    f0:18:cd:52:09:39:33:c1:b3:a9:cc:2e:5a:a5:78:
                    19:43:40:e2:cf:17:d9:6c:ea:a9:fa:ca:ca:a5:2a:
                    76:4d:69:91:40:5f:c7:1f:b6:a7:7a:5b:3a:1c:31:
                    cb:5e:2a:7e:9f:19:bf:37:81:c8:ef:c0:43:b8:7c:
                    bb:31:9e:a1:63:56:c8:5c:fd:d7:09:1f:4b:34:4c:
                    67:3d:e8:3a:2c:69:ee:ac:1c:d4:84:b3:45:2c:47:
                    83:93:08:90:ae:dc:79:04:eb:b7:94:fd:9a:42:dc:
                    4b:ff:44:10:60:f5:9f:54:68:da:95:f9:cd:d4:1c:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:CB:48:C1:D4:B2:3B:DD:D3:1A:92:19:7A:46:57:EB:E0:0C:19
            X509v3 Authority Key Identifier:
                keyid:FB:07:26:99:45:24:A2:75:7A:42:C9:D6:E4:E0:E1:72:6C:79:59:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wcmmUUkonV6QsnW5ODhcmx5WTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/VEjLSMHUsjvd0xqSGXpGV-vgDBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4e03f0-9820-496e-bee5-74ec15e72ee8/1/1-wcmmUUkonV6QsnW5ODhcmx5WTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:33:c0:db:64:76:d3:ad:5b:22:7b:c8:82:4e:ca:93:c0:
         ab:c9:e3:da:a6:cb:9d:fe:22:0c:a9:c0:6b:bd:47:5c:b2:f7:
         e8:b8:d2:b5:ef:72:0a:1a:20:d3:32:ce:3c:dc:bc:88:ae:bd:
         36:ce:c0:2d:4d:ab:db:7c:bf:39:27:49:bc:ce:65:8d:1a:70:
         57:eb:4c:d0:99:83:b1:cb:7b:1a:ac:de:e5:1e:58:fa:96:21:
         b3:d1:22:75:33:14:92:de:0e:a8:bb:cc:39:4d:bb:09:e1:29:
         3d:5c:38:c4:3e:19:9c:90:54:ce:83:27:64:d2:85:63:a3:99:
         b8:fd:00:bd:e3:03:92:2e:3f:0b:83:c5:29:b1:e1:58:91:ae:
         8d:e1:ba:c9:58:da:a4:3e:cb:86:c4:95:f9:7e:f8:fe:1c:8a:
         fd:dc:d7:2b:9e:dc:83:cf:89:9b:ab:51:14:a0:48:92:e3:51:
         df:d0:5a:2a:c2:5e:20:d9:16:bd:a1:26:d9:ed:f8:26:87:dc:
         4d:9e:9a:f9:b4:6a:a8:bd:c0:a1:1f:28:13:d6:9b:50:e9:b4:
         ca:0f:68:46:33:07:b9:14:42:bb:4d:02:32:cf:77:ee:27:16:
         e8:60:4b:72:90:62:74:82:62:ef:8c:76:f3:6c:82:51:39:b9:
         a4:10:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:24 2024 by rpki-client on console-fra.rpki-client.org