Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fEpq9DdIP9_2nad6jXW1KwPbOmY.roa
File:                     fEpq9DdIP9_2nad6jXW1KwPbOmY.roa (raw, json)
Hash identifier:          jNRyz0mfdBPIr+myxBnVzRJNjsmPS2tkxn+QYcZLgCU=
Subject key identifier:   7C:4A:6A:F4:37:48:3F:DF:F6:9D:A7:7A:8D:75:B5:2B:03:DB:3A:66
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       01941F8C7256444F1F2734C601D84F0D5718
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fEpq9DdIP9_2nad6jXW1KwPbOmY.roa
Signing time:             Wed 01 Jan 2025 01:48:05 +0000
ROA not before:           Wed 01 Jan 2025 01:48:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207239
IP address blocks:        195.64.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:72:56:44:4f:1f:27:34:c6:01:d8:4f:0d:57:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: Jan  1 01:48:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7c4a6af437483fdff69da77a8d75b52b03db3a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:ef:93:26:e2:13:51:23:74:d4:d7:a8:39:
                    bc:6e:40:58:e9:23:ee:e0:63:92:7d:c4:d9:75:77:
                    f0:5d:7e:4e:bd:d7:56:7b:58:a8:6c:0f:db:9f:65:
                    5e:2f:27:fe:0e:a1:27:63:7d:49:99:6a:22:83:98:
                    e0:10:07:3e:cc:66:28:5a:d7:58:c9:f3:06:12:c3:
                    e7:8f:53:8a:89:6a:81:b9:ed:9c:d4:14:29:d0:5f:
                    4e:5c:8e:80:98:77:65:70:df:7b:c2:ee:30:6c:d8:
                    f8:16:08:04:30:6b:a2:1a:b8:27:46:eb:b4:e9:65:
                    b9:08:18:7e:71:cb:55:d8:31:a3:2c:a7:6c:26:bd:
                    79:bd:d5:6d:25:dd:bd:51:5b:18:8a:c4:39:ac:82:
                    e0:74:6e:e4:3f:a7:4c:73:c9:57:f4:42:15:9b:7a:
                    58:24:d0:c1:ca:e6:b5:5b:f7:15:8b:e1:ec:61:2d:
                    86:a0:65:75:16:48:53:c3:6b:c9:fe:cc:57:57:bd:
                    75:8a:7a:97:85:ea:4f:c0:77:1f:71:bf:92:40:8a:
                    68:51:a4:74:6c:14:43:d8:f7:59:53:08:9c:e4:57:
                    fc:dc:3b:6d:24:a8:75:cf:2c:8d:5f:5f:a2:5a:00:
                    bb:92:78:11:49:5f:64:b1:80:2f:7f:92:48:48:70:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4A:6A:F4:37:48:3F:DF:F6:9D:A7:7A:8D:75:B5:2B:03:DB:3A:66
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fEpq9DdIP9_2nad6jXW1KwPbOmY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.64.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:47:d4:fa:c7:fc:70:65:16:96:be:a3:0c:29:43:cf:79:
         b2:1d:66:2b:4f:54:dd:1b:d8:8d:e1:ed:0a:a5:be:cc:dd:da:
         9b:c9:fd:f2:6b:fb:9f:f2:eb:42:37:27:05:f8:5d:3b:e3:4a:
         f4:ef:67:61:ae:5f:8a:3a:d0:34:93:c9:3c:42:e0:8c:e4:16:
         99:07:72:a8:28:4e:25:59:d8:28:dc:b4:8f:19:3c:51:88:36:
         61:01:2c:1a:e8:0d:1a:66:e0:f9:dd:2d:25:08:a4:42:aa:3c:
         e2:3c:9c:b8:0e:74:64:0e:8c:07:1e:49:f7:9a:eb:91:d8:42:
         86:04:02:2d:ce:51:df:60:ad:6d:65:ee:f5:f4:34:6a:fa:b2:
         e7:52:29:43:d9:ed:53:41:b2:68:f5:bf:e2:00:bb:33:75:df:
         e2:f1:61:d2:90:ac:25:08:1a:a0:a3:18:1d:1b:53:1b:89:e8:
         a3:47:6e:9d:01:66:01:22:b9:09:68:a8:8e:42:35:63:06:19:
         ae:05:72:c5:29:1a:83:8f:d3:36:0e:3c:2b:59:f2:a4:49:08:
         fe:17:d6:96:cd:fc:0b:2f:d0:b0:86:a2:54:ef:57:5e:61:d8:
         00:e3:e5:1c:ac:5a:45:1d:9a:90:44:6b:78:dd:a0:37:83:77:
         1b:95:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:50 2025 by rpki-client