Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/6r1_4VnTYEDfgArnMmDpcnAj_qs.roa
File:                     6r1_4VnTYEDfgArnMmDpcnAj_qs.roa (raw, json)
Hash identifier:          ScyZxVBI6lhx25KL4ngwZihF3WKorVTNRJwLDKvKaac=
Subject key identifier:   EA:BD:7F:E1:59:D3:60:40:DF:80:0A:E7:32:60:E9:72:70:23:FE:AB
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       0193D1518BCE92E4AD7EB0A45F07F9CEA65B
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/6r1_4VnTYEDfgArnMmDpcnAj_qs.roa
Signing time:             Mon 16 Dec 2024 21:13:22 +0000
ROA not before:           Mon 16 Dec 2024 21:13:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5650
IP address blocks:        194.179.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:d1:51:8b:ce:92:e4:ad:7e:b0:a4:5f:07:f9:ce:a6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Dec 16 21:13:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eabd7fe159d36040df800ae73260e9727023feab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:ad:7e:70:52:54:9c:d0:be:30:cd:27:a6:
                    2f:02:70:30:cd:f9:6b:81:ea:a9:62:a5:b2:4c:04:
                    3c:5d:20:49:f5:ba:96:25:47:22:d9:cd:fa:ca:cd:
                    5c:83:fc:4c:15:5d:95:8e:eb:e7:7f:ee:3e:06:f9:
                    16:33:91:48:89:f5:2f:cd:09:c2:79:68:73:1e:50:
                    0c:ef:3d:c8:a1:4a:e2:37:c5:a6:23:34:57:d1:6e:
                    78:a6:69:49:16:74:5f:bc:a2:13:23:05:53:56:48:
                    a3:ba:bd:8e:73:45:f2:df:60:a6:83:de:0b:60:f1:
                    c2:97:13:f3:d0:4f:70:9f:5d:49:98:0d:1a:5a:c8:
                    f5:39:a9:f6:b8:ec:62:ad:36:65:cb:d1:0a:b1:77:
                    f6:73:36:04:bb:1b:eb:9d:58:74:25:19:f6:48:02:
                    b7:70:a8:0c:98:25:d2:54:78:f8:ec:8e:cc:33:9d:
                    75:34:bc:fd:52:3c:1d:00:27:be:57:62:93:79:46:
                    ee:25:70:fb:a6:b4:27:0c:c2:5a:87:ed:77:75:e7:
                    39:0d:dc:81:92:cb:46:be:7e:ab:2b:89:de:85:96:
                    43:68:26:97:6e:09:c0:72:d3:48:1c:af:19:07:be:
                    2e:22:8a:c2:e1:96:62:20:64:8b:c4:8f:b9:3a:2a:
                    02:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BD:7F:E1:59:D3:60:40:DF:80:0A:E7:32:60:E9:72:70:23:FE:AB
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/6r1_4VnTYEDfgArnMmDpcnAj_qs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:40:53:51:26:33:f7:03:f7:c2:56:82:7e:7e:6d:3c:6d:
         74:01:e6:fb:52:51:06:7b:01:97:27:6c:8c:05:a3:d4:70:c2:
         64:80:c3:72:ae:77:04:f2:15:01:85:ae:88:a3:35:0b:42:3a:
         71:b3:8f:4d:66:f4:ca:d6:d5:92:7c:20:ef:95:d8:08:f0:3f:
         a1:33:db:df:07:ae:10:8e:85:f9:7b:f8:0a:f0:00:54:e2:bd:
         33:4a:83:37:71:70:f3:3c:ce:13:30:20:07:ea:f1:35:99:24:
         e5:43:1a:58:56:1f:31:12:c3:4e:6a:04:75:fa:91:0e:2c:1c:
         a7:0b:63:e0:e6:6d:46:40:9b:30:40:c4:f8:10:56:50:7e:51:
         2f:42:6b:b0:56:1a:06:e7:55:97:50:e9:35:cd:04:6e:6e:13:
         0a:81:9a:67:a4:e3:9a:35:63:27:ae:3a:b5:92:ac:03:be:40:
         5b:92:3e:a1:b8:14:37:6c:5d:46:d2:73:85:bb:36:2e:24:8b:
         c7:f0:ef:26:cd:ab:05:ee:2f:45:3f:0f:a3:85:97:92:a6:ae:
         a9:99:c8:72:d9:ad:1c:f8:a5:64:46:86:e6:27:16:77:ef:36:
         68:16:6b:f7:5b:c2:b2:7b:b0:bb:50:80:88:17:19:e8:f9:ba:
         fd:43:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:30 2025 by rpki-client