Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wMz_uCmAcC2WRHIkWHU4QYdr6lg.roa
File:                     wMz_uCmAcC2WRHIkWHU4QYdr6lg.roa (raw, json)
Hash identifier:          7FDbxQyusKlCFK9wZrIbtqicQleqmiKsGw9+3GIZbGE=
Subject key identifier:   C0:CC:FF:B8:29:80:70:2D:96:44:72:24:58:75:38:41:87:6B:EA:58
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019428247FF6C927CB7CCD829139AD15FB4C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wMz_uCmAcC2WRHIkWHU4QYdr6lg.roa
Signing time:             Thu 02 Jan 2025 17:51:08 +0000
ROA not before:           Thu 02 Jan 2025 17:51:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     46450
IP address blocks:        45.14.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:24:7f:f6:c9:27:cb:7c:cd:82:91:39:ad:15:fb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  2 17:51:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c0ccffb82980702d9644722458753841876bea58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:e4:81:04:f4:0f:06:df:2d:7f:24:7e:66:
                    bc:e3:db:85:2c:2a:27:32:ae:2f:a9:b1:95:00:af:
                    c9:c0:0c:e1:b4:99:7e:7e:d3:b8:cf:3b:6b:19:b5:
                    61:e5:f1:06:b8:7d:39:7f:4c:f2:f3:f2:de:3c:12:
                    a1:85:d3:0e:34:fc:f1:ae:6b:a8:b1:48:1b:97:45:
                    57:86:85:8e:92:a0:70:9b:ed:f5:c1:2c:29:e8:b0:
                    4a:fc:2d:a3:91:02:22:28:5d:b7:2d:b2:10:39:1f:
                    7f:3c:d9:e1:6c:b4:6f:1d:72:c5:40:77:da:e2:cb:
                    c7:6f:01:54:c3:aa:94:7f:bc:78:c5:1a:31:23:a8:
                    e4:19:51:0b:b5:67:e7:7d:fd:8e:1b:aa:e1:55:11:
                    ec:11:a3:4b:82:8e:0e:71:d0:ff:dd:b9:cd:95:2b:
                    55:10:0c:2f:48:c2:0c:e9:f6:d5:ee:39:28:72:1d:
                    a8:78:bc:8b:20:5c:0e:a6:37:fe:b9:80:d4:1b:e8:
                    a8:53:95:26:8d:de:d8:97:2f:d2:f0:da:ce:bb:ab:
                    67:c7:8d:63:50:e8:f6:d1:a4:e5:15:b8:89:5d:40:
                    67:83:fb:f1:3a:4e:d8:11:19:ed:69:32:b1:8b:f8:
                    d2:84:6f:d4:24:9f:04:d9:77:55:60:f7:40:a2:96:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:FF:B8:29:80:70:2D:96:44:72:24:58:75:38:41:87:6B:EA:58
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wMz_uCmAcC2WRHIkWHU4QYdr6lg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:2b:ad:f6:04:3a:e0:27:95:14:92:b9:3d:f1:49:b2:84:6d:
         93:c1:2f:b4:13:19:36:af:f1:5d:1f:2f:68:fb:e0:11:70:fc:
         7f:a5:73:7a:ca:d4:fd:6c:d0:e0:97:fc:93:a8:ef:84:8d:18:
         d8:39:78:85:f4:b2:b7:fa:2e:e0:3c:86:dc:cb:18:79:16:8e:
         3a:73:06:4c:60:51:10:d6:51:59:f7:45:2a:f2:86:4b:d1:b0:
         c6:6a:c7:56:fd:da:3d:28:8b:48:81:7b:37:70:4a:dc:6a:32:
         7b:14:ba:39:88:34:19:d3:0c:86:59:7e:b3:a3:ee:f6:94:1f:
         0a:96:7d:cf:ad:f0:14:9a:f8:0e:5e:21:f1:a4:96:77:1b:28:
         88:3a:a9:5b:c6:26:90:2a:47:a6:0b:fe:f7:f5:cb:b7:49:c2:
         4d:30:26:92:b4:63:76:2f:53:5b:84:7e:80:a9:b7:d1:90:b5:
         ce:4a:43:f6:d2:64:a4:6e:90:65:98:c1:ab:e6:9b:7b:a1:83:
         b9:95:eb:09:0e:e9:77:50:c4:02:1e:33:e1:1b:ec:83:12:59:
         f8:ef:8a:5e:c0:cb:31:17:55:f1:e6:3e:21:43:57:2e:a2:31:
         05:6f:58:a8:f9:dd:ca:6b:3a:2e:47:16:9d:9b:73:fa:68:36:
         71:87:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:30 2025 by rpki-client