Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/LdvTuzo5GPWxb3DVAIJgW-ogk-0.roa
File:                     LdvTuzo5GPWxb3DVAIJgW-ogk-0.roa (raw, json)
Hash identifier:          bg7gHAUbUelCC3Q1IUjt9VjOe3XYtzUvw0SVy14u7So=
Subject key identifier:   2D:DB:D3:BB:3A:39:18:F5:B1:6F:70:D5:00:82:60:5B:EA:20:93:ED
Certificate issuer:       /CN=b0843cd8ffefea74f45432d0fac3e79068a5dfd9
Certificate serial:       011AC5B9
Authority key identifier: B0:84:3C:D8:FF:EF:EA:74:F4:54:32:D0:FA:C3:E7:90:68:A5:DF:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sIQ82P_v6nT0VDLQ-sPnkGil39k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/LdvTuzo5GPWxb3DVAIJgW-ogk-0.roa
Signing time:             Sat 01 Jan 2022 09:00:28 +0000
ROA not before:           Sat 01 Jan 2022 09:00:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57665
IP address blocks:        185.226.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18531769 (0x11ac5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0843cd8ffefea74f45432d0fac3e79068a5dfd9
        Validity
            Not Before: Jan  1 09:00:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ddbd3bb3a3918f5b16f70d50082605bea2093ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:9b:bc:71:46:1d:79:23:b1:c5:ff:36:88:
                    58:ef:24:0c:01:ec:d3:6f:68:01:0b:c7:52:b6:8a:
                    b2:de:0f:0b:28:f0:a4:08:f1:46:a3:09:62:00:04:
                    a5:49:8e:43:24:c5:c5:42:ff:c0:f3:6e:4c:43:93:
                    8f:0b:5d:42:92:cb:30:0c:7f:fc:0f:b4:17:c5:00:
                    3a:2d:a6:45:ae:61:53:99:4b:13:00:bf:73:46:6a:
                    cb:c3:0a:b2:bb:f2:ac:14:e4:f7:73:98:be:0a:ac:
                    ed:9e:2d:3e:ea:91:c7:66:22:86:11:9c:3a:95:9f:
                    63:c4:13:f6:a1:14:6d:49:95:c8:a2:32:f8:91:9e:
                    a7:39:4f:ac:b8:52:02:b4:45:f2:08:d0:1a:5e:2c:
                    1b:d7:31:52:5d:da:6f:c9:59:0e:51:22:68:d8:42:
                    ed:10:6c:5c:f9:7e:9e:38:c9:19:4e:e4:d5:39:a6:
                    de:8e:44:1a:18:41:2f:60:0c:11:62:d1:26:08:75:
                    65:89:e6:23:9a:dd:2b:b1:13:ea:e7:f6:03:9a:7f:
                    70:f3:0d:dd:10:29:2e:09:fe:a6:94:56:9d:9c:73:
                    02:40:e9:39:eb:0d:d4:db:35:69:aa:a4:84:61:f1:
                    13:a7:27:89:04:29:9b:73:9b:ea:b5:2b:94:e9:56:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DB:D3:BB:3A:39:18:F5:B1:6F:70:D5:00:82:60:5B:EA:20:93:ED
            X509v3 Authority Key Identifier:
                keyid:B0:84:3C:D8:FF:EF:EA:74:F4:54:32:D0:FA:C3:E7:90:68:A5:DF:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIQ82P_v6nT0VDLQ-sPnkGil39k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/LdvTuzo5GPWxb3DVAIJgW-ogk-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea2b45-4fb0-4b6a-9291-c4ec15579fa8/1/sIQ82P_v6nT0VDLQ-sPnkGil39k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:48:fc:a2:19:d2:2c:76:98:b6:29:d3:00:86:12:94:3a:d8:
         02:a3:52:af:e7:f2:d7:f4:05:ba:4d:8a:e5:e1:48:14:48:4d:
         30:13:58:6e:5e:d7:73:2a:0d:0e:2e:1e:51:8e:0b:4d:5b:65:
         17:61:ed:ab:28:b9:fd:fe:8f:05:88:cc:82:bf:e7:2a:87:e4:
         7d:16:c2:b4:c5:af:3f:e5:b0:4c:bf:f6:ea:95:94:e4:76:54:
         5b:27:e3:ba:47:16:8f:35:02:97:2c:d8:03:98:86:1a:d3:b0:
         d2:4d:af:4e:6f:84:76:c8:f2:91:9c:88:33:c1:97:ff:08:11:
         f2:ff:d3:b6:24:bf:0e:ff:1a:20:d4:50:c7:a5:b9:57:09:cc:
         17:1f:aa:d9:5e:d1:fe:1d:3a:80:db:de:3a:f0:52:bd:c8:ed:
         55:72:5e:44:b4:1e:d7:58:54:5f:b2:23:5d:c2:20:84:c4:3a:
         47:fa:73:5f:95:8e:31:56:59:f6:f6:fe:8c:9d:fb:fe:34:be:
         6e:3d:2e:23:32:e3:6e:a7:25:0c:01:65:fa:e0:f3:8b:a6:58:
         8f:69:95:73:8a:c4:ee:40:53:bd:97:f7:ff:bd:a3:64:06:32:
         59:83:cb:6e:4b:92:a1:62:8a:3a:57:88:2d:9e:85:67:65:e3:
         c6:62:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net