Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/tAUTnwsJWzHCIxbFyeGYshjeG7M.roa
File:                     tAUTnwsJWzHCIxbFyeGYshjeG7M.roa (raw, json)
Hash identifier:          l8E4oHpxT828mi6eOQ6ir9nzn1aYpzDVDihYBlOnaf4=
Subject key identifier:   B4:05:13:9F:0B:09:5B:31:C2:23:16:C5:C9:E1:98:B2:18:DE:1B:B3
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       381E08EC
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/tAUTnwsJWzHCIxbFyeGYshjeG7M.roa
Signing time:             Sat 01 Jan 2022 09:59:27 +0000
ROA not before:           Sat 01 Jan 2022 09:59:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62337
IP address blocks:        178.175.188.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941492460 (0x381e08ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  1 09:59:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b405139f0b095b31c22316c5c9e198b218de1bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:47:69:2c:b8:61:8b:fe:ac:7a:d8:a1:4d:ea:
                    b1:48:cc:e9:0e:bd:79:ce:12:9d:44:34:78:01:76:
                    8a:49:6b:85:5e:9a:e3:79:70:7c:a5:6a:e7:ec:2a:
                    61:8b:5e:22:2d:29:6e:99:e2:33:c4:32:d4:3f:f9:
                    cb:bd:11:bf:bd:ab:df:ae:6c:7b:82:1c:99:21:54:
                    72:9a:1b:5b:00:01:24:cb:11:a5:02:8e:80:5c:be:
                    ae:13:b4:df:38:ea:dd:a4:e9:93:1a:57:c8:f3:a5:
                    26:70:b8:08:3c:f3:58:11:21:ad:37:bb:87:01:1a:
                    12:ec:34:87:c4:44:8c:8a:3d:6d:aa:e6:a4:cd:c3:
                    b5:b2:65:71:c0:56:2e:b5:91:12:29:16:06:06:eb:
                    6e:80:63:e1:a3:55:f6:7b:15:66:b7:39:01:d6:e8:
                    2a:db:61:67:4a:3c:62:15:16:83:45:3b:03:4b:c9:
                    10:a6:a6:c9:15:94:0a:7d:45:44:5b:f1:79:ab:78:
                    77:46:73:f1:b0:aa:df:e1:a5:c4:e4:e9:22:aa:f2:
                    93:0a:09:bc:f0:0a:6d:11:86:24:e5:32:48:78:ff:
                    59:87:53:f5:78:31:99:75:49:d2:7a:46:0b:a5:56:
                    a9:88:f4:4a:e5:78:04:1c:cc:f6:74:0a:a1:bb:ed:
                    25:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:05:13:9F:0B:09:5B:31:C2:23:16:C5:C9:E1:98:B2:18:DE:1B:B3
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/tAUTnwsJWzHCIxbFyeGYshjeG7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:53:24:1c:6e:6b:9e:86:72:21:66:f4:e7:61:a0:3b:89:bb:
         55:c9:c7:fe:5c:c9:19:9b:bd:4e:8b:8b:6b:61:b6:ae:2b:3e:
         ab:61:c7:5f:5b:ab:22:0d:d1:e0:ff:5e:bc:2e:10:26:50:8b:
         78:23:07:36:cf:ea:61:c8:fc:8d:79:6b:c9:9e:33:7c:d5:2a:
         1d:fa:86:3e:e5:6b:b4:bd:c1:bd:b8:f5:6b:89:46:15:07:22:
         f9:d7:d5:75:1a:28:31:48:c2:1f:85:1f:1f:2c:34:af:53:89:
         97:1d:19:41:95:e5:ff:d8:4e:70:1b:f2:07:f5:dc:40:9c:f8:
         2e:f7:17:29:77:bc:aa:06:1b:5f:9b:ab:b0:72:d7:d0:a2:c7:
         ac:ce:96:c0:8f:d3:88:4b:65:65:21:be:f0:97:30:4d:3f:f8:
         f8:ca:b0:69:8a:ec:1d:12:46:e8:38:0f:10:fa:4b:45:15:26:
         ef:d4:03:83:22:28:5e:b1:6e:e4:6c:99:e6:00:39:d9:f2:a7:
         99:ea:df:87:e8:72:b8:96:87:eb:be:cc:21:a8:18:25:88:92:
         6f:e3:f0:e1:b4:84:aa:18:f5:33:bf:99:87:e7:73:b5:ea:5e:
         64:fa:e2:e4:62:1f:68:57:ef:08:9c:eb:b6:91:58:bf:58:09:
         40:30:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:41 2025 by rpki-client