Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/c3239FJi93RnA55Qtgo6ULraTuw.roa
File:                     c3239FJi93RnA55Qtgo6ULraTuw.roa (raw, json)
Hash identifier:          iK7GSv8iRcYW2jygW5mtxcK49Dg1Og2BHGGldnDeCmg=
Subject key identifier:   73:7D:B7:F4:52:62:F7:74:67:03:9E:50:B6:0A:3A:50:BA:DA:4E:EC
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       39480B9F
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/c3239FJi93RnA55Qtgo6ULraTuw.roa
Signing time:             Tue 03 May 2022 13:26:12 +0000
ROA not before:           Tue 03 May 2022 13:26:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211279
IP address blocks:        178.175.178.0/23 maxlen: 24
                          178.175.176.0/23 maxlen: 24
                          178.175.174.0/23 maxlen: 24
                          178.175.182.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961022879 (0x39480b9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: May  3 13:26:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=737db7f45262f77467039e50b60a3a50bada4eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:88:3d:9e:05:8c:b4:6d:f4:19:6a:9c:30:
                    9f:1f:3c:0c:76:6e:9d:95:62:6f:b6:d3:55:47:b9:
                    e2:02:81:d7:4e:65:48:7c:ce:b7:57:41:ca:75:8c:
                    72:20:ea:5a:64:d0:ca:1e:d7:11:78:22:8e:38:89:
                    3c:d4:99:8e:b6:81:45:cf:44:b7:b0:05:e0:c8:13:
                    0a:39:94:2a:e1:a7:bb:ef:d3:2a:9a:75:61:20:d7:
                    32:9b:f3:df:5e:15:55:48:c6:62:b9:49:3f:e7:9c:
                    a2:2f:d4:75:45:be:84:4a:54:02:83:f0:d5:68:9a:
                    5a:3f:9e:50:7f:c1:ff:b9:db:af:df:8f:aa:28:ca:
                    59:ad:0e:b6:cd:17:ab:32:1e:3c:8a:ef:73:3c:b2:
                    d9:dc:06:0c:28:2f:68:77:e3:fa:66:83:fd:df:84:
                    e9:ae:4f:72:d0:77:3e:6e:56:c3:2c:fe:4a:ee:d6:
                    d4:0e:1f:03:17:57:92:12:15:73:b3:45:94:cb:6d:
                    e8:b2:fd:52:76:eb:6b:8b:93:61:1c:bb:0b:3d:d2:
                    a0:6e:7a:10:e8:6a:ad:7e:1c:21:62:35:7e:44:68:
                    9e:28:0a:71:73:8e:d4:2b:5b:81:4f:0d:8c:37:19:
                    c3:61:cd:b8:3d:a7:d1:23:91:12:c7:7c:95:b0:33:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7D:B7:F4:52:62:F7:74:67:03:9E:50:B6:0A:3A:50:BA:DA:4E:EC
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/c3239FJi93RnA55Qtgo6ULraTuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.174.0-178.175.179.255
                  178.175.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:5f:d7:79:e8:f9:9c:c4:4e:d6:01:bf:96:91:d8:30:5e:4e:
         9d:47:e0:b7:44:7e:4a:75:87:88:9d:a2:05:ea:fe:68:b6:dc:
         59:96:30:d0:0e:1a:43:b9:29:1b:2b:34:71:d7:e2:e2:b5:44:
         a8:a0:c4:76:a3:3e:69:b9:f7:25:13:1b:34:62:9e:19:af:45:
         36:f2:6f:77:6e:7a:96:34:38:d3:8a:b8:d8:f2:c0:a4:05:22:
         4b:64:7e:af:56:8f:d3:3f:09:27:c7:68:9f:c2:fe:c8:02:80:
         02:66:6f:81:f0:94:72:7d:e8:f9:74:61:89:4d:3d:88:ef:e2:
         7a:a1:7c:2b:98:5b:20:f0:18:7b:e9:c3:b0:51:9a:07:8b:8e:
         9e:9f:80:86:73:e4:2a:06:55:e6:35:0b:2d:19:2f:58:c5:96:
         f6:62:ec:72:44:31:07:ec:f7:70:7e:f7:24:fc:7b:9e:93:f6:
         2a:95:d8:52:42:b3:4f:b7:54:59:c9:4a:9a:e0:17:89:76:b0:
         ec:db:33:02:d8:45:e0:56:5a:62:73:1d:2c:58:4e:eb:df:95:
         da:d7:f4:86:e0:8c:55:ce:c5:79:68:78:2c:55:6f:c4:03:40:
         c8:03:d8:16:0d:2f:90:27:7e:ae:ff:97:9a:c4:84:50:9b:a1:
         f0:36:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:44 2025 by rpki-client