Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/wrrLuOka5oubd_Y_9ZodbELn4uQ.roa
File:                     wrrLuOka5oubd_Y_9ZodbELn4uQ.roa (raw, json)
Hash identifier:          jA6W/N7ShrOus6G5mROBKeoF1eGcANBCsnDiuI0z6eo=
Subject key identifier:   C2:BA:CB:B8:E9:1A:E6:8B:9B:77:F6:3F:F5:9A:1D:6C:42:E7:E2:E4
Certificate issuer:       /CN=1ec104278c95e7054950933761d465af457c5818
Certificate serial:       1717308F
Authority key identifier: 1E:C1:04:27:8C:95:E7:05:49:50:93:37:61:D4:65:AF:45:7C:58:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/wrrLuOka5oubd_Y_9ZodbELn4uQ.roa
Signing time:             Sat 01 Jan 2022 11:59:21 +0000
ROA not before:           Sat 01 Jan 2022 11:59:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     45033
IP address blocks:        185.43.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387395727 (0x1717308f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec104278c95e7054950933761d465af457c5818
        Validity
            Not Before: Jan  1 11:59:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2bacbb8e91ae68b9b77f63ff59a1d6c42e7e2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:b9:b9:2a:be:92:2e:84:03:f6:62:bb:99:
                    ba:a1:f6:8d:2a:59:22:e0:81:95:71:2e:44:dc:88:
                    ba:1d:40:63:c8:b9:95:30:be:1f:a2:3a:52:9c:bd:
                    9b:c9:bc:44:d0:f4:be:3e:33:43:50:33:9e:ce:d8:
                    ab:97:d7:10:8b:84:47:a9:eb:6f:39:00:4a:38:66:
                    91:fd:17:39:80:56:28:ab:f4:0e:ef:61:d5:92:25:
                    15:2d:5d:11:a3:f3:ef:df:9e:c6:5c:b6:fa:31:06:
                    47:e4:cf:61:de:78:ab:d4:da:68:d6:26:0d:e6:39:
                    a0:6b:0b:84:4a:c0:49:80:28:9a:fb:6d:47:b7:de:
                    5a:51:36:d6:38:05:35:21:ac:3f:17:4c:b7:2f:7e:
                    3b:bb:cb:93:65:88:71:4d:88:01:ff:06:c8:ee:2e:
                    73:f2:e0:e8:f7:84:d1:c6:a7:83:ce:a2:4b:cb:d3:
                    63:56:b4:8f:9a:0f:32:f6:73:f1:38:b5:9d:e4:25:
                    b9:66:12:11:38:96:cc:b1:5b:02:e1:e9:20:ae:17:
                    a3:53:06:f6:87:8d:f7:d1:92:f3:ad:bd:b0:8d:af:
                    42:0a:6a:02:de:5a:ec:b3:46:14:87:dc:a4:4e:ea:
                    1a:55:f4:f9:aa:10:95:c3:63:53:26:4a:2e:b2:b3:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BA:CB:B8:E9:1A:E6:8B:9B:77:F6:3F:F5:9A:1D:6C:42:E7:E2:E4
            X509v3 Authority Key Identifier:
                keyid:1E:C1:04:27:8C:95:E7:05:49:50:93:37:61:D4:65:AF:45:7C:58:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/wrrLuOka5oubd_Y_9ZodbELn4uQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.43.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:08:be:6b:1d:c7:12:8b:c2:9e:19:f9:e0:41:f0:a9:65:
         34:ba:62:59:d1:c5:93:83:07:b9:9f:b5:9d:d3:10:d1:5a:50:
         7f:c5:81:cc:17:6a:79:89:30:18:46:71:ea:68:f3:6c:b7:c4:
         6a:ea:32:6b:91:55:bb:fe:4f:a8:a4:a7:f4:3a:3d:6d:c2:4a:
         c5:9d:3c:ca:ab:28:d0:53:16:39:92:79:e9:2f:ec:c1:57:28:
         2c:7e:81:e2:98:13:e0:8e:25:4b:cc:f0:43:cd:09:f0:e3:aa:
         2e:d1:b3:75:ec:cd:d6:30:52:8a:0b:ed:2c:a8:5f:da:f2:0f:
         e8:d6:f5:3e:b3:f7:18:6e:48:0e:b5:69:18:3e:7c:3c:2f:fc:
         07:2b:e2:85:31:40:9f:a8:13:72:fb:eb:2e:30:3f:d5:9b:92:
         c2:8a:ed:40:9b:13:8f:ce:a5:f6:80:a4:f7:ba:ac:1b:41:4b:
         a4:e5:37:f9:b6:a6:c4:e3:c2:b4:ea:90:eb:0c:fd:af:80:39:
         65:2b:f9:ef:be:12:db:df:f5:79:df:9f:ae:7a:97:da:46:86:
         ea:fd:d6:e1:c5:af:ce:1b:60:3d:f4:2f:cf:ac:95:3c:b4:4b:
         30:c6:ad:19:e5:40:c9:35:ef:0b:fd:53:f3:59:0a:b0:d6:fc:
         55:92:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:11:21 2025 by rpki-client