Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/6SX6q71ktgOZoXtgAVJ9d_Qz_JU.roa
File:                     6SX6q71ktgOZoXtgAVJ9d_Qz_JU.roa (raw, json)
Hash identifier:          +xxB+JleK5e15QxDsG4Hw4RvOhLnohiJkp471VvNpLQ=
Subject key identifier:   E9:25:FA:AB:BD:64:B6:03:99:A1:7B:60:01:52:7D:77:F4:33:FC:95
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       3820A7D8
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/6SX6q71ktgOZoXtgAVJ9d_Qz_JU.roa
Signing time:             Sat 01 Jan 2022 09:59:29 +0000
ROA not before:           Sat 01 Jan 2022 09:59:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206445
IP address blocks:        178.175.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941664216 (0x3820a7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  1 09:59:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e925faabbd64b60399a17b6001527d77f433fc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:78:66:f5:4a:90:04:d0:95:12:fc:d3:8b:
                    bf:f4:0c:89:66:fe:15:2e:f8:42:2e:df:74:7d:48:
                    f7:21:88:bb:f3:b7:81:61:81:28:f7:63:1a:b8:15:
                    ee:3c:7e:c2:40:ce:4c:6e:aa:9b:72:d5:0d:3b:56:
                    39:70:57:4d:26:79:e8:56:96:df:27:d2:d5:4d:b0:
                    f6:58:42:88:b8:59:bd:44:af:e5:5a:87:c5:82:13:
                    fc:c4:0e:b9:6d:9f:e1:2b:7b:12:17:f2:97:ed:fd:
                    45:ad:30:34:ef:a4:69:ce:79:2e:d6:05:26:7b:67:
                    bb:3d:9a:ff:b2:28:8b:f3:b2:f1:86:1d:1f:27:bb:
                    29:73:a6:93:a1:4b:bf:6b:7e:8e:a6:79:18:75:a9:
                    33:f5:ab:34:78:3b:69:31:1e:4b:32:87:76:ac:45:
                    f0:18:2c:21:33:cb:03:85:16:58:44:b8:c8:9f:f2:
                    af:0d:ac:2e:69:39:bb:3d:e2:e7:ff:9f:c6:0c:20:
                    89:92:2c:70:c9:86:a2:0a:29:d6:a0:d7:f8:f0:0a:
                    5b:95:d4:10:2a:24:9a:b8:a6:56:0b:7a:02:da:f5:
                    5a:84:16:f6:58:cd:5c:ab:13:12:79:04:04:94:a9:
                    81:a3:e4:32:c5:3a:23:b5:3a:7c:67:3d:1b:98:2c:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:25:FA:AB:BD:64:B6:03:99:A1:7B:60:01:52:7D:77:F4:33:FC:95
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/6SX6q71ktgOZoXtgAVJ9d_Qz_JU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:16:60:3c:db:c7:ef:0c:cb:b5:ab:c4:7d:c8:db:74:27:53:
         36:d9:20:78:43:0c:f8:bc:35:2b:8e:ed:7e:32:78:83:34:37:
         1b:c8:93:f2:31:5a:4e:0f:4d:64:26:fe:ce:9b:d6:c8:3f:a6:
         c4:75:0a:28:cb:97:f6:eb:b9:b0:2c:91:7b:27:b2:5c:3a:31:
         93:fa:dc:0a:0d:99:23:38:13:3a:ea:c1:c3:5b:93:e2:b8:4b:
         fb:73:ff:e2:35:b0:4a:76:aa:d9:85:30:9e:6c:77:5d:ad:c8:
         ce:9f:3f:80:97:28:fb:3c:4b:1f:ba:e8:a9:29:b1:a2:40:f4:
         dd:17:88:c2:27:b1:df:d9:9c:8a:45:a0:d4:e0:b8:2a:c1:22:
         86:57:66:36:02:f1:b8:d2:6f:ae:25:65:88:ca:39:0d:f7:74:
         a8:d6:f4:e0:ef:56:b0:9f:e8:a4:b2:9c:a5:83:bb:ef:a0:42:
         f9:ee:cd:0f:55:0e:9b:5a:41:7d:63:71:f3:24:95:12:dd:be:
         42:f9:09:0e:5d:97:07:74:f3:92:12:19:08:73:87:ac:f4:82:
         47:59:c8:8b:13:e5:bb:a5:a5:4e:84:bb:46:8e:50:91:7d:5d:
         34:51:97:52:a7:35:54:de:71:48:d9:af:20:55:7a:2a:33:84:
         36:f1:a2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:09 2025 by rpki-client