Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/GxVlSL9WEWJDN2uLRpYbQ-aiCxU.roa
File:                     GxVlSL9WEWJDN2uLRpYbQ-aiCxU.roa (raw, json)
Hash identifier:          4QGsh1yqqkKoKXoEvSwDVOK1BmI99oNZijFxx2sRABs=
Subject key identifier:   1B:15:65:48:BF:56:11:62:43:37:6B:8B:46:96:1B:43:E6:A2:0B:15
Certificate issuer:       /CN=dea565facfca8a374fe6f0cda4710d52905dac9c
Certificate serial:       08D7013C
Authority key identifier: DE:A5:65:FA:CF:CA:8A:37:4F:E6:F0:CD:A4:71:0D:52:90:5D:AC:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3qVl-s_KijdP5vDNpHENUpBdrJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/GxVlSL9WEWJDN2uLRpYbQ-aiCxU.roa
Signing time:             Sat 01 Jan 2022 08:55:05 +0000
ROA not before:           Sat 01 Jan 2022 08:55:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197737
IP address blocks:        185.44.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148308284 (0x8d7013c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea565facfca8a374fe6f0cda4710d52905dac9c
        Validity
            Not Before: Jan  1 08:55:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1b156548bf56116243376b8b46961b43e6a20b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:1b:bd:e8:85:67:46:5b:7b:e3:c9:fe:79:
                    e0:42:99:35:c1:00:55:0a:31:ae:5c:c3:80:9b:bb:
                    73:bc:00:92:ad:b7:90:dc:ac:1c:d3:82:60:94:8e:
                    25:54:f7:fb:a3:07:9d:0a:bb:20:49:dc:a4:29:50:
                    43:ee:9c:05:4f:c0:f7:0b:95:d4:7a:cd:0a:ac:20:
                    db:dd:47:98:db:7d:fd:57:81:46:47:b4:b0:ab:bf:
                    68:27:db:2f:7e:5a:7c:84:1f:41:1e:6e:a4:b2:de:
                    5c:00:ff:84:63:53:7d:75:36:53:1f:0d:51:4c:90:
                    b5:fb:6c:38:d6:5f:db:b0:58:d0:ce:2d:af:ee:7b:
                    13:ea:52:1c:43:d3:ff:d1:cf:eb:14:ba:29:3a:cd:
                    09:db:7a:b0:31:20:e4:b7:b2:8c:46:03:47:5f:86:
                    89:4d:06:ef:4f:f3:7b:b3:1d:f3:79:5d:07:41:76:
                    96:f1:30:90:d6:7d:66:55:08:24:52:d0:51:2c:f8:
                    1e:07:79:f8:7f:54:4c:64:e9:56:4f:54:8c:5a:2b:
                    8e:f2:23:b7:f6:a7:bf:de:c4:10:26:9d:a1:dd:c1:
                    0e:04:57:f8:d6:03:fa:4d:5e:48:e7:a2:ad:b6:e6:
                    25:9c:ca:7d:29:75:7d:d2:67:b4:3b:79:79:1d:61:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:15:65:48:BF:56:11:62:43:37:6B:8B:46:96:1B:43:E6:A2:0B:15
            X509v3 Authority Key Identifier:
                keyid:DE:A5:65:FA:CF:CA:8A:37:4F:E6:F0:CD:A4:71:0D:52:90:5D:AC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qVl-s_KijdP5vDNpHENUpBdrJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/GxVlSL9WEWJDN2uLRpYbQ-aiCxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:bf:d6:cc:11:b8:b5:38:92:61:27:a8:5d:3d:29:4c:fc:ac:
         0f:18:7a:19:16:84:8c:cf:cf:58:77:02:5b:de:3f:a9:00:d5:
         2b:75:25:10:d7:c4:a6:ec:53:af:7f:5d:96:ec:f7:b5:28:7a:
         40:25:71:24:e4:c8:55:37:24:10:5a:b3:e3:d5:22:39:f2:4d:
         90:23:b8:44:e1:94:69:bc:0a:2e:63:a4:57:69:5e:bd:f9:ec:
         b8:b2:38:a8:e2:a7:50:c4:a7:7a:01:4c:d0:da:7d:3d:23:77:
         6d:12:93:23:59:8a:ed:23:55:91:6d:a9:f6:44:71:bb:d0:87:
         78:1b:67:b1:00:66:c0:84:f7:0c:03:74:6d:dc:03:19:4c:bb:
         79:7f:69:fd:48:46:a3:d6:82:85:b3:ac:95:f6:2b:95:7a:08:
         18:d8:3b:77:2d:d2:b8:c1:99:5b:12:9d:3c:48:e5:97:14:e7:
         82:40:6d:fa:b6:16:33:d7:f2:27:d0:e4:bb:eb:7f:76:46:43:
         04:da:6b:47:ef:4c:35:5a:bc:8e:87:98:8a:16:19:56:41:53:
         d4:77:93:69:37:5b:1b:ec:51:62:1c:04:78:7b:65:61:d7:91:
         7b:ba:dc:7d:8a:c0:43:98:6d:68:17:a8:c1:30:fa:3b:cd:d4:
         8b:07:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:38 2025 by rpki-client