Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/fDlO35loIr6DatdJgpF010oWTEU.roa
File:                     fDlO35loIr6DatdJgpF010oWTEU.roa (raw, json)
Hash identifier:          +1OAn2GFFjMDLeCjyD4f7A5AsRbfcQw2Uifjlwjg0XQ=
Subject key identifier:   7C:39:4E:DF:99:68:22:BE:83:6A:D7:49:82:91:74:D7:4A:16:4C:45
Certificate issuer:       /CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Certificate serial:       01878366BEF66C605B95973D6B8C221649AC
Authority key identifier: 6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/fDlO35loIr6DatdJgpF010oWTEU.roa
Signing time:             Sat 15 Apr 2023 05:32:41 +0000
ROA not before:           Sat 15 Apr 2023 05:32:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19437
IP address blocks:        46.226.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:83:66:be:f6:6c:60:5b:95:97:3d:6b:8c:22:16:49:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8e9da43dfc793d4d5488097b4001ba40941904
        Validity
            Not Before: Apr 15 05:32:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c394edf996822be836ad749829174d74a164c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:9c:d0:72:ee:44:37:cf:d1:76:03:ac:f2:
                    92:60:c5:7d:a8:5a:43:57:e1:30:86:9c:c5:46:b2:
                    8b:40:57:be:d9:b2:1f:6f:a6:9e:6e:61:37:6b:ff:
                    c1:a3:c4:12:af:2c:2e:c3:7f:b0:93:f5:1c:ae:8a:
                    31:0f:13:6e:80:62:e8:aa:0f:69:d8:31:5c:e6:3a:
                    bc:c4:cc:68:89:e4:a0:4e:27:4f:e8:b9:78:d3:46:
                    53:73:cf:52:34:82:c5:37:09:8b:c4:19:20:a5:e9:
                    4a:86:9a:d8:81:91:5e:2f:fe:3d:98:69:b5:f3:ed:
                    1e:c5:fd:9e:ec:88:50:1e:f8:d0:26:c1:76:27:67:
                    d6:5e:22:04:73:60:e1:c6:9f:29:ca:9e:b9:39:44:
                    cb:51:bd:48:66:58:53:63:cf:fe:aa:d0:17:b5:83:
                    4f:de:52:df:7f:51:6c:36:57:eb:3d:70:43:b3:bb:
                    61:cc:86:39:f6:99:12:09:ad:3a:cf:49:e3:bd:a0:
                    34:38:d3:7c:9e:b5:12:21:99:da:10:db:b7:af:82:
                    94:20:f1:54:ac:d7:c4:a2:ee:00:2d:54:60:11:37:
                    94:27:e2:22:71:73:f3:39:62:22:fe:5e:75:33:1b:
                    e5:ea:61:76:63:1e:01:1c:e1:c6:f8:fe:39:5e:30:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:39:4E:DF:99:68:22:BE:83:6A:D7:49:82:91:74:D7:4A:16:4C:45
            X509v3 Authority Key Identifier:
                keyid:6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/fDlO35loIr6DatdJgpF010oWTEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/bo6dpD38eT1NVIgJe0ABukCUGQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:46:f4:9b:8c:8b:1f:34:af:c9:f9:d1:4c:b1:52:14:84:9a:
         99:dd:bd:28:2c:cb:7b:67:2f:9b:dd:e1:9d:95:21:a2:66:b3:
         99:05:3f:a4:cd:14:3a:6e:de:ee:e7:fa:8f:40:30:c8:a3:99:
         59:5a:62:18:cf:e7:4c:62:a1:0d:f2:84:f3:97:a4:b3:41:34:
         f3:8f:5f:c6:55:fc:c6:51:b8:08:13:3d:1b:91:79:78:1f:43:
         a4:20:c7:e8:27:5b:11:b8:ec:6e:8b:36:42:3a:f3:e2:5a:8d:
         d1:4d:b2:75:80:75:ba:79:36:d2:64:75:f1:90:97:a1:89:9b:
         1e:b9:9f:75:94:c6:f1:9b:b6:6c:3a:ae:3c:72:d8:59:81:bd:
         fa:3f:29:69:02:36:ae:36:c1:60:92:ff:56:a7:9c:0d:e8:49:
         5f:52:3c:07:20:df:c5:e8:67:fa:4f:97:c0:10:ff:bc:d7:33:
         ea:ab:67:51:2d:a1:cc:2b:28:d7:46:bf:c9:c1:af:94:0f:1b:
         b9:c2:79:4d:21:11:67:da:97:61:fa:6a:03:f1:e9:a5:55:70:
         84:21:58:90:05:ae:7a:df:93:e9:d9:06:6f:29:55:52:91:a2:
         1b:11:78:fc:a8:0a:14:83:b4:39:b6:04:81:e2:90:d0:dd:70:
         17:94:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:44 2024 by rpki-client on console-ams.rpki-client.org