Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/_bd1uUXdWfimJKjSRLsLwjuEcR8.roa
File:                     _bd1uUXdWfimJKjSRLsLwjuEcR8.roa (raw, json)
Hash identifier:          uctm/cSaahCT9GH/ghFykbr6OfbIpXkqwxi32eXN9Ao=
Subject key identifier:   FD:B7:75:B9:45:DD:59:F8:A6:24:A8:D2:44:BB:0B:C2:3B:84:71:1F
Certificate issuer:       /CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
Certificate serial:       019420D630EA446EF69825D1B6873FCC97FA
Authority key identifier: 78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/_bd1uUXdWfimJKjSRLsLwjuEcR8.roa
Signing time:             Wed 01 Jan 2025 07:48:15 +0000
ROA not before:           Wed 01 Jan 2025 07:48:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201997
IP address blocks:        185.59.184.0/22 maxlen: 22
                          185.59.184.0/24 maxlen: 24
                          185.59.185.0/24 maxlen: 24
                          185.59.186.0/23 maxlen: 23
                          185.59.186.0/24 maxlen: 24
                          185.59.187.0/24 maxlen: 24
                          2a02:6ca0::/32 maxlen: 32
                          2a02:6ca0::/48 maxlen: 48
                          2a02:6ca1::/32 maxlen: 32
                          2a02:6ca2::/32 maxlen: 32
                          2a02:6ca4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:30:ea:44:6e:f6:98:25:d1:b6:87:3f:cc:97:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b04fbafaa36b71fcd36eca50b5fe0e88dd3551
        Validity
            Not Before: Jan  1 07:48:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fdb775b945dd59f8a624a8d244bb0bc23b84711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:e7:c5:95:fb:cb:d7:e3:de:2b:03:f0:8d:
                    b6:66:44:3a:73:ba:e8:a6:b9:9e:c0:ec:bc:5e:5f:
                    ae:59:de:ea:49:6c:3a:b9:85:ed:2a:a0:ad:61:1c:
                    cd:d3:b1:d4:8f:ce:15:2b:0d:03:2f:42:7c:2b:2b:
                    f0:24:60:ec:55:1c:b1:73:f7:41:2c:5a:b8:f5:fc:
                    64:53:78:f4:7a:0e:3c:b9:bb:01:e5:e0:a9:ca:51:
                    76:0d:7c:9d:4b:30:c6:33:c3:c0:7e:40:b3:12:fa:
                    3e:4f:93:36:9c:28:a1:9c:35:6b:21:f3:a5:3e:73:
                    59:8d:06:05:21:50:47:bd:e7:df:00:11:82:bb:3c:
                    2f:4d:d1:30:4a:cd:25:a0:31:7f:e9:7e:65:42:be:
                    d2:6b:df:7c:4b:a3:51:6b:16:97:83:19:0f:eb:5b:
                    f5:40:04:f0:98:5e:4e:16:f8:9b:56:99:ba:a1:24:
                    c5:b6:68:8e:80:5b:d1:a2:02:b0:ad:e3:c3:ad:6a:
                    e0:07:f2:2e:e0:9a:14:9d:66:58:7d:da:79:27:07:
                    23:68:b8:c4:df:ea:46:f4:da:03:f6:cd:88:43:52:
                    4d:19:dc:7c:e1:82:a7:49:7b:7c:d8:45:1e:87:a5:
                    bc:07:81:b7:c2:d9:bb:f3:96:d9:60:b7:b7:ae:6e:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B7:75:B9:45:DD:59:F8:A6:24:A8:D2:44:BB:0B:C2:3B:84:71:1F
            X509v3 Authority Key Identifier:
                keyid:78:B0:4F:BA:FA:A3:6B:71:FC:D3:6E:CA:50:B5:FE:0E:88:DD:35:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLBPuvqja3H8027KULX-DojdNVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/_bd1uUXdWfimJKjSRLsLwjuEcR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c41c74-0b82-40e7-a0bf-0aae1ccd874b/1/eLBPuvqja3H8027KULX-DojdNVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.59.184.0/22
                IPv6:
                  2a02:6ca0::-2a02:6ca2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a02:6ca4::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:ce:b9:9f:55:23:99:a7:cf:9c:cc:90:53:2b:bc:5b:69:
         ae:e8:e8:08:c7:6d:99:be:c3:2d:b0:87:b4:33:6e:8b:0a:82:
         ff:4b:f7:6b:70:b2:f9:f9:ef:c6:87:1d:f0:b3:50:e0:35:de:
         4d:46:59:88:e9:0b:a8:14:c6:8a:43:c9:8f:36:5b:56:4d:ff:
         39:a4:91:bd:79:48:36:48:10:2a:62:c0:94:65:07:fe:63:39:
         fd:a1:d1:be:38:5f:4b:cc:a3:e5:5a:5f:7c:a8:30:f8:04:c1:
         69:65:37:ee:87:f4:46:16:83:26:94:e5:97:e7:77:7d:3d:5d:
         61:66:67:98:7b:b8:90:9c:14:e4:67:c4:5b:34:93:6c:3e:6a:
         5f:3d:89:46:bb:b6:69:d8:e8:ef:c8:7a:7a:3a:e1:d9:5f:fa:
         ca:9f:71:96:50:29:d6:86:39:0f:a2:fa:d6:9c:db:20:f2:6e:
         44:d2:3a:1e:66:23:0e:c7:59:26:4a:84:fc:4b:26:94:db:01:
         a4:5c:b0:cd:ea:fc:55:c2:1a:d8:40:12:dc:9c:42:ea:30:e8:
         5d:ae:3d:89:96:e9:8a:86:ea:8e:7d:6f:28:ab:d4:7a:b8:18:
         7f:82:3e:d0:13:e1:8d:ad:78:35:db:36:18:8d:60:d7:58:5e:
         34:1b:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:06 2025 by rpki-client