Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_lbBLvgNGAQH9RZGGhIiScJO0Fw.roa
File:                     _lbBLvgNGAQH9RZGGhIiScJO0Fw.roa (raw, json)
Hash identifier:          cG70WY6pNjBIjFmjOJsdnAYx5TUc3/4Xb6BcbhpWpTI=
Subject key identifier:   FE:56:C1:2E:F8:0D:18:04:07:F5:16:46:1A:12:22:49:C2:4E:D0:5C
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       02A45BA5
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_lbBLvgNGAQH9RZGGhIiScJO0Fw.roa
Signing time:             Thu 19 May 2022 20:01:29 +0000
ROA not before:           Thu 19 May 2022 20:01:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        46.254.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44325797 (0x2a45ba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: May 19 20:01:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fe56c12ef80d180407f516461a122249c24ed05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:6d:d7:f4:79:4a:2d:05:36:cc:a0:40:07:
                    4b:7c:0c:2e:46:d8:6b:08:65:2d:7c:98:ce:59:e0:
                    95:1d:4a:5d:b3:b9:94:7b:c5:b3:9d:23:fa:5e:b3:
                    0a:ae:dc:80:0e:f0:24:f9:f6:81:d9:cd:f7:4d:d2:
                    ae:d7:78:ff:2f:dc:7f:a5:aa:77:45:31:8d:9f:d0:
                    ab:bb:a9:2b:e8:c5:b1:8c:54:de:19:00:9f:9e:dc:
                    7f:78:c4:ed:1e:6c:ed:6d:d3:f5:4b:ec:1c:66:01:
                    d8:c4:4f:42:79:14:0f:48:45:46:0b:6f:9b:a7:ac:
                    3e:85:72:cb:32:34:9d:13:14:c8:7d:50:73:00:58:
                    1b:c3:d9:d8:fd:f4:12:6a:97:62:eb:f5:92:d3:1c:
                    7c:96:8d:7f:3a:59:08:5c:06:d6:b4:67:8d:67:b7:
                    0b:38:a3:ae:48:fc:7b:f5:37:c2:66:34:c4:43:11:
                    a1:56:c9:a6:eb:66:9c:a6:9a:53:dd:11:88:e3:81:
                    3d:13:3e:d1:77:75:3f:9c:8d:b3:4c:2a:0b:ab:2d:
                    3b:e6:c4:2b:3d:03:1d:ec:f0:0f:a3:99:c4:fb:02:
                    e7:3b:d5:b0:89:91:cb:1e:9a:02:e0:82:e3:ba:3c:
                    6a:34:79:26:08:f6:e8:0f:c2:9b:87:68:a2:87:ef:
                    87:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:C1:2E:F8:0D:18:04:07:F5:16:46:1A:12:22:49:C2:4E:D0:5C
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/_lbBLvgNGAQH9RZGGhIiScJO0Fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:2f:92:54:2f:a6:63:50:40:86:eb:4a:2b:b9:c1:2a:02:
         84:7f:ed:79:75:99:bd:12:af:5c:e2:55:f9:2e:86:ee:fe:5e:
         e4:82:21:4d:cc:74:41:7e:4f:59:6b:44:ef:83:1d:57:f3:09:
         e7:46:cb:1e:d5:6d:9d:41:22:52:0c:77:d8:98:2e:4e:1b:b0:
         61:a1:09:30:24:9f:c4:07:52:45:16:a0:d1:39:14:8f:19:38:
         fd:f2:32:bb:05:13:8d:00:08:0c:25:f2:f6:c5:19:20:c6:eb:
         30:fb:99:3a:b5:43:b4:53:82:08:e0:ba:56:c7:ae:e5:c4:42:
         18:75:7d:aa:6c:31:3c:80:d1:e4:2b:85:a2:de:d0:5a:a9:75:
         77:98:e2:a5:4c:9d:3c:1c:fb:61:56:43:19:f8:55:f4:6b:29:
         5e:1a:0a:2f:a6:8f:b8:07:0e:77:dc:1e:fd:5d:e4:28:0a:c4:
         9b:eb:36:19:9f:e3:7f:8b:5e:c0:48:c0:be:12:88:04:7d:21:
         6b:e1:e9:53:39:af:bb:b9:5b:37:ae:bc:54:d9:44:17:c3:57:
         d5:4c:e9:16:8e:43:ce:a1:3f:2f:8f:62:e3:d1:28:e4:6d:de:
         87:dd:a5:1c:41:19:43:bf:c6:22:e2:b4:73:50:19:12:bb:33:
         da:2d:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:43 2023 by rpki-client on console.sobornost.net