Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/F5hr0M7T3A7qppandkSaX0J-pv0.roa
File:                     F5hr0M7T3A7qppandkSaX0J-pv0.roa (raw, json)
Hash identifier:          /hLoSiZTE9X4BOJfheRYwEe9ihRjgcT/2GDlG1KRHiE=
Subject key identifier:   17:98:6B:D0:CE:D3:DC:0E:EA:A6:96:A7:76:44:9A:5F:42:7E:A6:FD
Certificate issuer:       /CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Certificate serial:       018779E37269167C9C1E26F2A9E4F6C11CF1
Authority key identifier: 6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/F5hr0M7T3A7qppandkSaX0J-pv0.roa
Signing time:             Thu 13 Apr 2023 09:12:41 +0000
ROA not before:           Thu 13 Apr 2023 09:12:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.226.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:79:e3:72:69:16:7c:9c:1e:26:f2:a9:e4:f6:c1:1c:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8e9da43dfc793d4d5488097b4001ba40941904
        Validity
            Not Before: Apr 13 09:12:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17986bd0ced3dc0eeaa696a776449a5f427ea6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7f:6a:32:c1:62:3d:47:c7:9d:f4:ab:98:d9:
                    81:5c:b6:ef:33:9e:77:4c:59:52:69:d0:9b:73:e5:
                    27:7c:f9:9a:bb:52:a5:2a:3a:2d:7d:ea:f8:83:8d:
                    0b:36:bb:d1:16:75:1d:1a:db:c3:df:dc:e6:9d:5a:
                    f3:0f:e8:c6:67:b7:fd:08:03:5f:2d:dd:6d:e1:99:
                    f1:20:a1:e3:66:18:86:0a:16:86:0d:c1:af:22:6f:
                    8a:46:1b:27:1d:ed:2a:83:00:ab:15:4b:1b:b3:ef:
                    84:58:58:c8:12:54:32:c4:66:86:15:99:50:c2:7a:
                    99:2e:4a:a7:ab:0f:56:ba:79:b2:f8:ef:b5:c1:19:
                    51:37:d1:4c:48:a6:cc:e6:c8:62:a1:d4:dd:d4:9c:
                    e2:92:a5:65:26:2f:a0:98:fb:b9:30:7c:57:96:bc:
                    ca:92:83:6c:7b:68:9d:61:d8:d2:80:69:1a:8b:0c:
                    ef:c0:7b:84:10:fa:ac:48:33:7f:ce:83:3e:68:42:
                    24:f6:3f:4c:6d:87:d5:ad:bf:7f:e1:26:23:26:1a:
                    c5:67:fe:2d:70:8b:51:14:cd:37:db:b5:e1:20:d0:
                    be:66:49:0c:99:f0:b1:70:94:5f:8d:e6:6d:2a:fd:
                    5a:53:c7:0f:b8:03:a8:c0:d4:f3:c6:25:e8:04:cd:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:98:6B:D0:CE:D3:DC:0E:EA:A6:96:A7:76:44:9A:5F:42:7E:A6:FD
            X509v3 Authority Key Identifier:
                keyid:6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/F5hr0M7T3A7qppandkSaX0J-pv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/bo6dpD38eT1NVIgJe0ABukCUGQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:fa:fb:aa:38:82:e4:82:de:ac:39:5e:e2:ea:c4:f6:66:
         24:d6:78:39:c8:ed:82:b4:b1:e3:c7:a4:f4:8b:b8:78:3e:80:
         fb:b1:ee:81:92:56:f1:be:10:da:61:af:0e:7e:79:1d:8f:f0:
         c7:56:e7:54:5e:ae:bc:d1:4b:32:b7:e1:85:d6:e6:64:8d:8f:
         a4:4f:ec:73:32:c2:8f:95:66:f5:f0:74:4c:5e:ae:b1:e1:4c:
         3c:b3:44:73:b1:e3:93:f5:7d:18:4c:aa:b8:4e:97:f7:5d:e8:
         92:d3:ab:1b:a4:fb:35:8a:4e:87:ea:13:35:0e:7d:f3:c1:09:
         f6:e3:90:50:6c:91:fe:d7:ff:ef:30:ce:21:5d:5c:28:42:67:
         67:5d:46:43:f6:18:f9:fd:d6:df:b6:2f:75:76:11:d3:9f:75:
         6c:03:b9:fe:3d:f0:da:e7:15:61:83:8c:a7:69:5c:73:77:6f:
         b3:fa:12:24:4c:40:9c:ce:5b:4f:e4:96:17:d2:f0:18:11:76:
         40:48:33:73:7a:d4:4b:9b:1b:c5:56:fb:7d:f8:60:9a:28:ec:
         fa:f2:c2:d1:6f:ee:6c:6f:3c:01:89:8b:4d:b6:58:8b:93:83:
         7c:f7:4e:5e:af:77:9a:82:e3:af:57:85:0a:94:4f:30:4f:51:
         81:d3:39:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:35 2024 by rpki-client on console-fra.rpki-client.org