Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/144uVVd4x6Q5NXfR75UM-apMitY.roa
File:                     144uVVd4x6Q5NXfR75UM-apMitY.roa (raw, json)
Hash identifier:          4Gj8sgeozNnJ1skUut+UKhRoHJ9G9H6QJVXSGELMmCs=
Subject key identifier:   D7:8E:2E:55:57:78:C7:A4:39:35:77:D1:EF:95:0C:F9:AA:4C:8A:D6
Certificate issuer:       /CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
Certificate serial:       016E4285
Authority key identifier: 55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/144uVVd4x6Q5NXfR75UM-apMitY.roa
Signing time:             Wed 12 Jan 2022 16:42:25 +0000
ROA not before:           Wed 12 Jan 2022 16:42:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        62.122.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24003205 (0x16e4285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
        Validity
            Not Before: Jan 12 16:42:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d78e2e555778c7a4393577d1ef950cf9aa4c8ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:83:3f:f4:ae:f6:46:89:37:85:99:b7:7e:96:
                    e9:9c:c9:76:6d:39:7a:44:62:1d:cb:a1:06:7a:4b:
                    33:2e:65:20:5c:51:73:51:19:76:79:29:7f:54:da:
                    82:e4:83:63:af:cc:70:32:ac:80:13:67:b3:4e:26:
                    dc:60:5d:f8:31:d6:37:65:0a:83:d0:d7:f4:17:49:
                    35:7f:c8:e2:74:ed:65:1c:91:7f:e4:43:ea:a2:3a:
                    47:86:e8:4b:c8:02:7f:1e:ca:b0:b9:55:7c:0d:11:
                    30:f5:2b:55:15:e3:ba:8e:b9:d2:c8:b7:fc:51:a5:
                    80:e0:e4:97:0e:6b:01:2a:25:f2:96:d9:36:a1:55:
                    bb:6f:8e:9c:69:5c:fd:8b:1f:6c:b2:13:46:c3:f2:
                    17:6c:a5:22:a8:22:3c:79:bf:dd:66:c2:ac:d3:ae:
                    07:18:a0:ec:8f:a5:4e:52:11:ff:b9:b7:88:89:d2:
                    7d:0e:a9:34:8a:fd:94:3c:71:53:b6:fb:52:0e:80:
                    81:35:b8:0f:36:86:30:bb:05:7b:9e:74:ee:7b:82:
                    bb:73:e7:f5:9e:27:e6:5a:1c:c2:19:87:d2:c3:ab:
                    11:cc:9c:fa:b2:33:22:e9:09:8d:e2:9e:c5:93:3a:
                    9a:7f:93:05:89:c2:85:1c:c0:64:67:16:bf:a8:65:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8E:2E:55:57:78:C7:A4:39:35:77:D1:EF:95:0C:F9:AA:4C:8A:D6
            X509v3 Authority Key Identifier:
                keyid:55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/144uVVd4x6Q5NXfR75UM-apMitY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/Vd58G1xSZby5DBRMVjB2_c-rah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:93:76:fc:e4:d9:09:56:14:ca:91:01:9d:cf:32:af:71:
         de:c7:96:23:e2:de:6f:ee:26:bd:39:9f:af:ca:f7:d7:8a:43:
         a8:23:12:4e:a0:77:f6:4c:07:e1:b4:15:13:fe:8a:4e:3d:89:
         2e:09:11:29:06:51:5b:47:ea:a9:3d:ce:59:62:4e:29:c4:4c:
         df:83:76:88:e6:d2:06:be:43:eb:ba:66:c5:c7:a3:d6:2a:d3:
         4a:f1:fd:e5:f2:48:60:b1:87:6f:c1:18:28:73:77:9e:61:1f:
         c7:a5:2d:fb:6a:1c:d0:eb:95:3b:b0:a7:82:20:7c:8e:99:2f:
         33:60:a1:99:f1:d1:d1:f7:94:6a:db:b2:02:1f:cb:09:a1:be:
         25:06:20:1c:48:1b:17:55:1d:26:13:0d:93:55:ff:10:1d:b2:
         1b:41:d0:fb:15:ba:78:30:04:53:5c:39:72:40:3b:82:00:42:
         b5:53:6a:d2:a5:83:8b:f2:ae:a2:ab:56:43:9b:3e:6d:3c:3e:
         b5:b3:6b:53:89:73:bb:73:e7:e5:47:25:87:65:56:e8:8d:dc:
         03:c8:6d:84:0d:fc:bb:37:ea:10:b1:09:be:2a:fc:a1:b7:6b:
         66:4d:74:ac:d9:d4:2b:83:8b:52:27:80:de:e7:60:16:d3:3f:
         c8:b8:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:24 2025 by rpki-client