Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/DP-TGhLBWFsvXV-KXwuKTaImjpc.roa
File:                     DP-TGhLBWFsvXV-KXwuKTaImjpc.roa (raw, json)
Hash identifier:          SdeqwV4Z6rKv3ik2I04d8bOr6nQWAlAyYpS+fMRnaAA=
Subject key identifier:   0C:FF:93:1A:12:C1:58:5B:2F:5D:5F:8A:5F:0B:8A:4D:A2:26:8E:97
Certificate issuer:       /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial:       018FD296
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/DP-TGhLBWFsvXV-KXwuKTaImjpc.roa
Signing time:             Mon 13 Jun 2022 05:30:07 +0000
ROA not before:           Mon 13 Jun 2022 05:30:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137427
IP address blocks:        45.91.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26202774 (0x18fd296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
        Validity
            Not Before: Jun 13 05:30:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0cff931a12c1585b2f5d5f8a5f0b8a4da2268e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:78:c2:13:f8:30:ae:50:d9:82:46:70:15:
                    7b:ec:39:53:e1:61:68:dd:05:99:0f:c4:b4:61:cb:
                    1a:81:5d:67:c4:7d:c1:47:0f:00:08:fe:cf:ec:ce:
                    8c:e5:90:3b:b1:e6:f4:f7:0a:33:f7:11:d4:22:2f:
                    26:e4:66:23:1f:77:e5:4f:f1:a1:46:c8:4c:78:31:
                    6a:3c:e8:99:d9:2e:88:6b:0b:0a:b9:fa:9b:c5:63:
                    2f:01:f3:47:5c:8f:a6:1f:28:4b:90:4e:b2:01:61:
                    f1:72:20:44:af:f4:a9:b5:3f:58:17:a5:62:5c:ce:
                    0a:1d:8a:e2:d0:ee:bc:bd:4a:43:e2:a0:25:25:42:
                    eb:39:c9:77:fc:af:da:a1:3a:6b:76:72:89:7f:f5:
                    9e:28:8e:a9:ee:7e:59:c2:0f:c0:50:f8:12:3f:99:
                    f1:47:f1:53:e1:ba:59:f4:9b:8c:63:7b:86:b7:81:
                    e4:7b:59:2d:11:c0:56:c5:45:96:27:19:b9:50:6d:
                    9c:95:50:6c:6d:98:5e:88:2c:b5:7c:d3:3d:9f:03:
                    45:3e:89:bb:ea:98:6a:c5:98:64:60:2a:19:e5:66:
                    c8:cc:fc:99:7c:fb:21:c8:34:5a:fd:18:f3:ba:a2:
                    f5:fe:82:dc:0b:b7:95:a3:e5:aa:01:78:13:b2:02:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:93:1A:12:C1:58:5B:2F:5D:5F:8A:5F:0B:8A:4D:A2:26:8E:97
            X509v3 Authority Key Identifier:
                keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/DP-TGhLBWFsvXV-KXwuKTaImjpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f2:50:b2:5a:df:e8:c8:7a:d3:55:d3:d4:c1:9b:c3:7e:bd:
         bb:26:e0:6f:7d:f0:c0:fa:db:11:7e:1a:77:0f:24:df:65:02:
         e3:33:ee:d5:ec:5b:7c:26:1c:f7:04:71:0d:87:c9:5c:ab:ff:
         d1:e8:fd:07:2f:15:14:b8:76:f9:f5:c8:28:a4:ef:c5:72:5e:
         2d:77:b7:ed:d3:23:69:c4:a2:29:55:0e:04:43:ab:ae:ed:8b:
         9c:86:7c:e4:3b:a4:54:41:de:57:40:ca:91:b2:2e:3d:3e:00:
         6d:5d:08:3e:51:3c:2b:d4:21:50:a8:d7:74:db:40:59:60:68:
         83:6c:e1:af:f1:bc:e1:83:75:9f:48:f8:e4:a5:cb:ed:79:85:
         00:20:cf:4a:27:cf:e5:e4:ff:41:4a:f1:9f:68:95:07:55:9e:
         0a:de:ea:cb:21:64:8b:65:95:df:17:8d:ea:dd:e6:f2:5a:05:
         78:c6:e5:30:c1:30:57:86:dc:00:a0:11:a3:29:d5:a1:49:d9:
         d2:95:92:25:26:f1:b0:c7:a6:d1:9b:55:59:57:0e:80:8d:b8:
         42:59:57:e2:08:8c:f9:41:db:a9:bd:eb:6e:81:96:88:14:39:
         4e:7b:e4:f1:f4:09:74:09:4c:4a:dd:12:77:c4:6c:85:39:06:
         f2:dc:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net