Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/Npv434mcCqlAkJ_7zFnvJStIp5Y.roa
File:                     Npv434mcCqlAkJ_7zFnvJStIp5Y.roa (raw, json)
Hash identifier:          KYOsDj1Ljk6N/PzbF6FmgaqF8H0WK9zcpTecUh+5rwQ=
Subject key identifier:   36:9B:F8:DF:89:9C:0A:A9:40:90:9F:FB:CC:59:EF:25:2B:48:A7:96
Certificate issuer:       /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial:       0806092A
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/Npv434mcCqlAkJ_7zFnvJStIp5Y.roa
Signing time:             Sat 01 Jan 2022 03:55:31 +0000
ROA not before:           Sat 01 Jan 2022 03:55:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211567
IP address blocks:        193.111.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134613290 (0x806092a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
        Validity
            Not Before: Jan  1 03:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=369bf8df899c0aa940909ffbcc59ef252b48a796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:a5:db:f8:a1:1d:2e:d3:07:89:7a:a8:cb:
                    af:56:f0:51:17:0c:9c:3d:d0:10:6c:39:74:d4:aa:
                    d7:cd:51:bd:c8:84:d3:c5:1e:b2:7c:a9:c2:82:f1:
                    ce:5d:d7:e3:b0:a2:10:09:6d:64:99:2a:ed:3b:c2:
                    e2:af:9d:69:29:44:99:70:e0:94:65:b7:24:ec:bb:
                    56:1e:db:a6:c8:5a:86:9b:2c:fd:6f:74:83:94:cd:
                    b9:07:6f:de:bf:7d:de:c5:9f:31:27:0d:52:ff:a7:
                    57:c8:4d:00:1c:ac:f9:c9:ae:60:e3:fa:da:a7:83:
                    44:13:bd:7a:c7:48:4f:f5:a6:8b:d4:58:af:bf:1f:
                    94:3b:0b:01:f8:85:b3:16:ef:32:e1:5a:15:fe:ce:
                    bb:20:5d:e2:88:a7:ae:01:e6:57:63:b7:dc:85:1c:
                    05:71:93:07:6a:35:91:98:27:2a:2e:1e:1d:b5:e9:
                    99:02:6b:01:38:15:5f:2c:8f:b0:c3:a7:a3:37:54:
                    e7:70:51:54:a0:13:e8:c5:f3:a4:d3:4e:93:1f:d0:
                    0e:6b:38:70:99:9d:da:82:aa:ba:46:28:48:0e:e8:
                    88:c7:d6:31:38:84:5a:a4:ce:56:b5:8b:c3:56:db:
                    b2:df:92:69:98:1c:e2:0c:89:dc:2c:bd:05:eb:51:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9B:F8:DF:89:9C:0A:A9:40:90:9F:FB:CC:59:EF:25:2B:48:A7:96
            X509v3 Authority Key Identifier:
                keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/Npv434mcCqlAkJ_7zFnvJStIp5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:41:d7:e6:eb:94:4e:36:db:07:0d:66:cc:18:3e:f7:dd:
         ec:3b:57:f9:38:61:b3:7c:ec:03:de:14:22:fa:6b:fa:41:72:
         25:01:9d:3b:7b:c4:47:57:ff:69:f9:b6:99:48:db:29:90:94:
         68:5b:4b:cd:e9:0c:46:37:41:4e:9d:04:a4:61:c2:81:f8:3f:
         b0:c2:5f:a3:ce:75:ed:da:8d:61:a0:54:64:a1:60:df:d2:b5:
         3b:90:27:90:4f:59:fa:4e:b8:67:70:06:a8:61:90:8b:52:83:
         6c:d7:0e:5c:11:86:40:59:e9:0b:9d:47:fd:14:a0:6c:99:66:
         c2:9f:0a:ce:4d:85:8d:96:ee:1d:65:5f:b2:13:53:ab:4a:88:
         f8:49:44:c4:12:70:40:9d:d3:f7:54:9b:d8:3c:a8:55:ff:5e:
         39:7a:79:81:03:34:ac:de:fe:11:e3:90:34:99:28:58:e6:81:
         fc:0c:a8:e5:bc:42:d9:cd:0d:9b:92:e4:e6:0d:db:eb:1e:69:
         f6:a1:07:ed:99:9f:06:82:0a:83:73:a2:d2:6f:81:d2:f8:91:
         05:fe:b0:c9:b2:82:72:7f:50:f7:f5:87:c4:66:b0:8e:7b:33:
         a8:ae:84:f5:26:b1:ed:f4:a3:88:80:0c:95:13:0b:76:f0:15:
         26:af:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:59 2025 by rpki-client