Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/FbrJbS19e8g13CWVhI-Gj3AbRco.roa
File:                     FbrJbS19e8g13CWVhI-Gj3AbRco.roa (raw, json)
Hash identifier:          WgDdiKthwllJgmGWs2jUN8ZflWHd7+XQtsdWOzq7ZC0=
Subject key identifier:   15:BA:C9:6D:2D:7D:7B:C8:35:DC:25:95:84:8F:86:8F:70:1B:45:CA
Certificate issuer:       /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial:       0193E5B9A76B8E2116A1FF2191BE36BFD1B4
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/FbrJbS19e8g13CWVhI-Gj3AbRco.roa
Signing time:             Fri 20 Dec 2024 20:19:29 +0000
ROA not before:           Fri 20 Dec 2024 20:19:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212176
IP address blocks:        109.95.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:e5:b9:a7:6b:8e:21:16:a1:ff:21:91:be:36:bf:d1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
        Validity
            Not Before: Dec 20 20:19:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=15bac96d2d7d7bc835dc2595848f868f701b45ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:f3:a2:6c:e5:01:51:74:f7:ef:71:6a:ed:
                    09:d3:2f:da:f6:9d:be:95:6c:3c:9e:92:1f:a6:11:
                    a0:a3:87:ee:9b:ed:d2:4b:89:2d:c0:f0:1c:da:4d:
                    e8:0a:da:d5:3e:31:55:bd:22:4d:0e:4a:8a:49:5a:
                    3c:9f:8a:af:e3:e6:ed:4d:a5:47:20:8e:75:63:5d:
                    dd:b3:4f:b0:b5:ac:3f:7f:3a:8d:c5:a7:bc:e1:fb:
                    8c:b1:1d:64:a1:e4:a6:eb:37:c9:80:8d:d6:56:4f:
                    4e:eb:f5:51:8f:66:bd:b3:8c:31:b5:cd:9d:bc:f3:
                    bb:50:23:47:df:be:05:5e:72:5e:a5:7c:f0:b2:b3:
                    d8:5a:05:03:76:a1:c8:bd:f0:ce:fa:2d:6b:65:f1:
                    cf:e3:6b:52:aa:c7:33:e2:e0:00:f5:20:5e:70:45:
                    67:97:78:49:d9:c5:92:77:38:47:f0:8d:9c:18:ca:
                    b0:9d:66:7d:d9:ef:10:41:2d:a6:f7:21:87:f4:67:
                    bf:e8:8f:7a:39:01:c7:dc:e2:56:f4:9c:37:aa:b4:
                    74:87:11:16:c6:b1:ba:d9:db:0d:91:ee:e0:36:39:
                    13:7f:97:b5:c1:eb:e0:bc:95:65:e2:ca:7a:d2:0b:
                    7c:07:e6:1b:4c:79:f9:da:93:ef:71:be:10:d7:f4:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BA:C9:6D:2D:7D:7B:C8:35:DC:25:95:84:8F:86:8F:70:1B:45:CA
            X509v3 Authority Key Identifier:
                keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/FbrJbS19e8g13CWVhI-Gj3AbRco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.95.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:3a:68:d2:fa:42:10:65:9b:6b:7d:d8:0a:8d:8b:55:91:
         04:cd:c8:2b:a6:9d:ef:4a:c4:1f:28:bb:fb:c1:ef:7d:2f:12:
         e7:01:d6:5c:d5:8c:53:e6:06:9d:36:f9:4c:63:8d:39:3d:47:
         5a:51:c6:f7:b7:46:bf:8f:f9:c7:47:95:df:60:8f:82:37:da:
         6b:0a:d1:9c:ba:36:9c:4b:27:f2:5d:6c:5f:d2:a1:b6:db:08:
         45:b5:3a:6a:0c:a7:3e:fc:28:8f:cd:48:a2:3d:78:ac:50:ee:
         12:7b:07:54:7f:0c:90:77:b4:c8:df:0a:d6:d2:b1:e6:27:63:
         ae:81:c2:c9:89:3c:f6:eb:bc:df:7d:b3:4f:05:71:62:29:12:
         59:eb:17:03:96:80:30:79:7c:86:23:42:01:d3:0d:95:84:4e:
         92:ca:c9:d0:d0:39:38:d2:97:ea:f9:d1:f0:9b:c6:a1:da:72:
         10:df:7a:11:e6:af:93:02:47:84:c9:60:e0:7f:c2:99:ac:b6:
         1f:2b:4a:24:fc:93:ab:b7:a9:ab:90:a9:77:53:60:e4:42:99:
         c3:2a:87:1e:41:ce:06:63:4d:85:80:dd:04:f6:6e:00:35:e4:
         30:a5:fa:88:4a:52:4f:d3:b8:9a:48:94:07:bc:79:c9:61:f3:
         ab:56:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:03 2024 by rpki-client on console.sobornost.net