Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/yt8Il7Ie2VOi64fWsU2IYPLetiQ.roa
File:                     yt8Il7Ie2VOi64fWsU2IYPLetiQ.roa (raw, json)
Hash identifier:          1IFL+Jplb5y++ydOjBQadgYZPbQcw6JcI/CNBmPBJCI=
Subject key identifier:   CA:DF:08:97:B2:1E:D9:53:A2:EB:87:D6:B1:4D:88:60:F2:DE:B6:24
Certificate issuer:       /CN=b3633287b55c76c191774ad54ec7c6fb291c822e
Certificate serial:       01258043
Authority key identifier: B3:63:32:87:B5:5C:76:C1:91:77:4A:D5:4E:C7:C6:FB:29:1C:82:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s2Myh7VcdsGRd0rVTsfG-ykcgi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/yt8Il7Ie2VOi64fWsU2IYPLetiQ.roa
Signing time:             Sat 01 Jan 2022 04:57:47 +0000
ROA not before:           Sat 01 Jan 2022 04:57:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15626
IP address blocks:        130.255.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19234883 (0x1258043)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3633287b55c76c191774ad54ec7c6fb291c822e
        Validity
            Not Before: Jan  1 04:57:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cadf0897b21ed953a2eb87d6b14d8860f2deb624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:44:fb:41:c5:8d:60:d1:df:22:b8:0f:61:
                    f8:04:f3:25:24:ff:de:e5:7c:35:27:c3:d8:43:2e:
                    b8:e6:1e:8a:03:7a:0c:46:3d:dc:28:29:f7:75:31:
                    65:cf:33:ba:c9:9c:36:28:db:9a:ee:d9:d7:9f:6e:
                    1a:08:05:e1:bd:a3:72:e9:21:ed:9c:8b:84:43:3a:
                    ee:9d:7d:b4:20:4c:f2:a9:5d:d4:b9:03:06:ec:ff:
                    eb:ba:2f:aa:fa:30:ab:82:67:23:e5:e5:96:46:6a:
                    41:13:46:cc:4e:54:f7:2e:94:12:cd:65:f5:52:ba:
                    3c:7c:95:5c:f3:be:9a:ac:b8:54:b5:e1:60:ed:3c:
                    7a:d6:a4:b7:a6:a5:21:e4:57:7b:19:4a:08:ea:d1:
                    cb:8d:47:1a:30:df:48:4b:33:f9:08:37:bc:21:4a:
                    64:4c:d7:ac:ce:b2:d0:4f:cc:5f:26:b4:9a:3a:21:
                    ee:ba:6a:48:eb:68:af:b1:51:1d:45:46:78:8b:44:
                    3c:8e:78:24:d3:e8:e7:db:ac:eb:30:ec:fd:15:08:
                    4a:49:33:93:75:42:5c:c4:87:de:48:c4:15:c1:32:
                    97:c0:e8:5b:a1:e5:3e:f9:ea:e8:67:01:45:61:bc:
                    8d:dd:17:41:29:79:01:d4:a1:1e:ca:57:bf:44:0a:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DF:08:97:B2:1E:D9:53:A2:EB:87:D6:B1:4D:88:60:F2:DE:B6:24
            X509v3 Authority Key Identifier:
                keyid:B3:63:32:87:B5:5C:76:C1:91:77:4A:D5:4E:C7:C6:FB:29:1C:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2Myh7VcdsGRd0rVTsfG-ykcgi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/yt8Il7Ie2VOi64fWsU2IYPLetiQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/49e2e5-7b2a-4b2e-a130-35c91d502d6d/1/s2Myh7VcdsGRd0rVTsfG-ykcgi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.255.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b0:0b:e2:7f:73:e6:46:6c:ed:8d:79:8b:61:ef:28:09:c1:
         d8:f5:21:11:d6:9c:54:7e:08:06:d4:5e:d6:e8:d9:5c:a4:02:
         91:98:ed:0d:86:d3:4d:82:b7:cf:c3:1e:5e:22:90:39:1b:3a:
         41:9e:cc:db:6f:05:14:5c:25:cb:2b:57:ca:28:95:29:59:22:
         a6:6c:9e:d9:30:0e:8b:94:69:ae:c7:b2:05:14:64:27:11:78:
         28:ef:d0:46:97:79:90:bc:c3:7c:08:b0:67:e4:0a:f7:d6:92:
         72:d2:ff:84:26:d3:b7:68:e1:19:38:e3:0f:c3:34:a5:32:e9:
         3a:ec:3e:cc:6e:66:ff:9c:95:ed:a1:34:7e:a1:18:6f:cd:26:
         b9:fa:7f:83:04:9b:78:3a:f0:d5:80:8e:55:64:2f:cf:68:40:
         84:8b:7e:12:0a:fa:95:cc:42:b9:42:f4:53:22:05:44:69:a7:
         34:80:f0:cc:5c:c1:56:8c:ba:0c:e5:ad:3b:90:b8:e4:d3:28:
         04:a1:cc:c9:0a:11:9e:86:50:3a:97:fa:d5:98:15:78:1e:bf:
         48:66:df:c1:9c:e3:3d:ac:85:b1:c8:25:66:b5:b8:d3:c0:64:
         de:2e:ec:d7:6d:09:71:e0:33:a1:63:91:de:bc:33:1e:3b:2e:
         0f:95:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net