Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/l299Chv-dZQAnwTrGctNvLNL5xs.roa
File:                     l299Chv-dZQAnwTrGctNvLNL5xs.roa (raw, json)
Hash identifier:          p6sT/uFEnlTE+Kj+ugqmEMZOYovPK4wBr5J55vQNPmc=
Subject key identifier:   97:6F:7D:0A:1B:FE:75:94:00:9F:04:EB:19:CB:4D:BC:B3:4B:E7:1B
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       06EBA176
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/l299Chv-dZQAnwTrGctNvLNL5xs.roa
Signing time:             Thu 21 Apr 2022 07:58:31 +0000
ROA not before:           Thu 21 Apr 2022 07:58:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398464
IP address blocks:        193.228.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116105590 (0x6eba176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Apr 21 07:58:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=976f7d0a1bfe7594009f04eb19cb4dbcb34be71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:37:15:ae:7d:66:d8:5e:66:a4:e8:dd:ef:
                    01:9b:eb:28:fe:fb:45:a1:ad:7d:7f:3f:d1:52:3f:
                    41:05:c0:6e:a4:c8:5e:a2:ad:c1:98:80:2b:c0:4e:
                    a4:30:39:f1:d5:1e:82:74:87:82:2e:5f:3c:26:3c:
                    2d:35:d2:69:92:5c:eb:27:b1:7a:d9:d3:c8:37:a1:
                    31:98:8c:65:bb:fc:6a:d1:a1:fd:fd:e7:c2:70:51:
                    37:a7:22:03:9e:d9:ec:a5:01:1c:7b:64:30:76:d3:
                    4e:95:40:29:58:8b:61:4e:b0:7b:1c:44:a6:1b:b0:
                    c4:31:c8:82:52:39:a3:84:43:d8:db:e6:8c:b4:ab:
                    8f:57:93:85:b1:33:52:05:c2:a9:64:34:fd:d4:4a:
                    d3:6d:e2:34:9a:0c:b1:77:8b:34:af:c3:fd:48:1a:
                    4c:3e:84:3e:2a:b8:88:70:88:eb:3b:4e:45:41:d2:
                    2c:83:09:99:f7:80:09:95:ab:2c:5e:78:3e:6b:13:
                    19:54:63:f1:ac:ec:0f:7b:6d:59:bf:24:9d:ac:de:
                    4d:df:ec:61:ab:91:99:d3:11:15:b1:9d:7f:73:99:
                    7b:60:b8:d2:14:02:cc:fa:bc:f0:fb:90:8e:48:cc:
                    e1:ed:08:c2:7c:f3:c7:5e:a9:30:15:dd:46:a7:26:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6F:7D:0A:1B:FE:75:94:00:9F:04:EB:19:CB:4D:BC:B3:4B:E7:1B
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/l299Chv-dZQAnwTrGctNvLNL5xs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:1d:0f:8c:0d:a3:3e:9b:4b:dd:b7:a9:92:1c:89:e4:93:
         6a:4e:bb:0c:52:66:2e:9b:b5:7d:1b:45:76:7a:ae:3d:f9:c6:
         2d:d5:c3:49:e0:8c:b3:9f:ee:80:a2:ea:49:ac:a1:17:12:a9:
         7d:56:6f:52:f9:b2:d0:91:aa:d0:46:4a:4f:c5:10:5a:56:f9:
         ab:e1:68:45:07:ed:3b:96:5f:99:4a:ea:97:52:b3:11:ae:d3:
         84:a6:89:b9:1e:fd:42:b2:e0:a8:00:57:69:91:dc:13:f8:32:
         b3:21:82:2b:fc:9a:a0:b8:f4:c9:2a:4f:f5:d4:08:a4:e1:55:
         6b:bc:c7:ad:e4:6d:50:ed:1c:00:8a:4c:97:0f:d8:59:7c:c9:
         3f:36:1f:f7:86:b1:b6:c7:6c:08:bd:96:c0:fa:e7:2b:24:b4:
         cf:b9:de:12:73:06:9f:fc:e0:40:c2:f6:7d:a1:9d:ee:1c:3c:
         1c:6f:59:93:1a:a3:19:4b:29:74:73:d5:6c:b4:e3:2f:c8:ad:
         63:89:39:11:3c:f2:f9:36:05:d5:d9:4e:29:d2:1d:a0:88:36:
         e2:2a:fd:c8:34:72:d4:29:94:26:12:b0:f8:74:bb:85:3b:0b:
         82:d0:b4:05:c5:36:f6:cc:92:54:00:c2:83:3f:93:b7:6f:d0:
         fc:a7:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:48:38 2025 by rpki-client