Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/E1de6oKZHtUvP6SkY6hTxmQpUXo.roa
File:                     E1de6oKZHtUvP6SkY6hTxmQpUXo.roa (raw, json)
Hash identifier:          9B0VURP7zwyqNa6fuWkJxaE92vk/74tatdmjVuhiVO8=
Subject key identifier:   13:57:5E:EA:82:99:1E:D5:2F:3F:A4:A4:63:A8:53:C6:64:29:51:7A
Certificate issuer:       /CN=c1bc9eff2dbfd54425ae6d709b84e48c1f05fc3e
Certificate serial:       9F7DBE
Authority key identifier: C1:BC:9E:FF:2D:BF:D5:44:25:AE:6D:70:9B:84:E4:8C:1F:05:FC:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbye_y2_1UQlrm1wm4TkjB8F_D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/E1de6oKZHtUvP6SkY6hTxmQpUXo.roa
Signing time:             Thu 27 Jan 2022 22:18:10 +0000
ROA not before:           Thu 27 Jan 2022 22:18:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51621
IP address blocks:        185.217.130.0/24 maxlen: 24
                          2a12:1580::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10452414 (0x9f7dbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bc9eff2dbfd54425ae6d709b84e48c1f05fc3e
        Validity
            Not Before: Jan 27 22:18:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13575eea82991ed52f3fa4a463a853c66429517a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:95:84:6c:28:4e:6e:90:17:19:94:79:16:
                    b3:74:f8:f7:f7:4b:aa:a6:3d:c1:d7:c7:92:9f:da:
                    ec:ce:6b:52:3c:12:d0:8b:2b:05:24:0b:b0:99:db:
                    d3:37:f0:a9:41:de:75:8d:e8:85:88:16:66:ed:8e:
                    50:e0:66:16:32:2a:20:ff:61:3a:42:72:97:e0:01:
                    e6:b8:c3:1e:27:60:9e:f8:83:04:83:a6:35:ec:34:
                    fe:b8:49:b4:e1:d8:21:55:f4:f8:c0:b3:48:7f:6a:
                    98:a7:82:c2:32:9b:d4:26:76:a0:e2:af:0c:65:fd:
                    95:fe:02:eb:db:38:a2:ac:4b:1e:17:ae:90:ce:42:
                    09:f6:f8:de:6b:66:c3:d0:5d:76:eb:7f:2f:db:f4:
                    23:c4:e4:ce:60:c9:c3:e7:d1:9f:5e:e4:76:75:56:
                    ab:e6:a8:c9:71:76:cb:b0:63:0a:c2:3c:db:6c:bc:
                    9f:5c:29:71:b9:25:91:a0:d1:0f:22:6b:94:1c:5a:
                    d3:12:fa:2e:04:f8:25:8f:8c:81:7d:9f:c7:f2:4d:
                    73:2c:ab:20:2f:75:73:bb:06:dd:b6:92:0d:c9:c9:
                    8b:d6:9d:05:39:ae:84:10:ce:b9:04:d7:e5:5d:60:
                    bb:b1:f4:4f:35:14:e3:d5:e6:a2:64:60:d2:c4:71:
                    7e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:57:5E:EA:82:99:1E:D5:2F:3F:A4:A4:63:A8:53:C6:64:29:51:7A
            X509v3 Authority Key Identifier:
                keyid:C1:BC:9E:FF:2D:BF:D5:44:25:AE:6D:70:9B:84:E4:8C:1F:05:FC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbye_y2_1UQlrm1wm4TkjB8F_D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/E1de6oKZHtUvP6SkY6hTxmQpUXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2cf0d5-e25e-48a5-bbe6-1f41df69e98c/1/wbye_y2_1UQlrm1wm4TkjB8F_D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.130.0/24
                IPv6:
                  2a12:1580::/29

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:14:ce:d4:cb:cb:ee:a9:8a:48:ba:2a:0c:bf:87:f2:f9:
         6f:35:ea:42:7a:56:08:cf:02:2b:8b:a1:a3:dd:4e:0e:f3:2d:
         da:e7:28:9c:34:c6:84:69:a2:ae:b2:63:7c:47:cf:b6:46:d1:
         84:19:c7:46:7b:85:63:69:67:70:6e:ca:01:7c:ee:2f:79:3d:
         33:37:4e:3c:31:32:db:be:c8:81:d2:03:12:94:33:de:eb:c6:
         a1:92:79:98:e7:7b:7d:cb:d7:58:a5:ab:44:34:bc:12:79:73:
         cf:27:c3:f5:a7:29:d8:6d:e9:ee:cb:33:0d:09:86:62:f6:1c:
         0d:d4:a2:51:1a:7e:1d:2e:31:8c:75:7f:4a:d5:38:64:0b:d4:
         a8:ae:60:b0:57:50:d4:56:4b:b1:9d:00:ff:23:be:e5:4c:5d:
         e0:9b:e4:65:5f:15:7a:c1:24:0a:b7:9c:14:07:ca:17:b2:16:
         a3:1f:9f:d7:f5:2f:73:03:47:b5:07:83:57:ed:d9:24:a1:1f:
         1a:d3:02:55:d1:97:12:68:8e:d3:e1:cb:ea:b3:f4:c2:08:a0:
         53:37:f4:09:9a:cd:8a:7a:35:ba:b6:54:a4:60:b6:c4:1c:30:
         82:fa:39:59:30:7d:67:82:26:43:de:6b:1b:5f:46:7c:42:a1:
         8a:1b:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:20 2025 by rpki-client