Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/yG1rn90L-j2hpLq48u3lthC6nnw.roa
File:                     yG1rn90L-j2hpLq48u3lthC6nnw.roa (raw, json)
Hash identifier:          uQScDlU8QT6Eml5bWnGmmTE3uIXfnMKuYK15pfy3B44=
Subject key identifier:   C8:6D:6B:9F:DD:0B:FA:3D:A1:A4:BA:B8:F2:ED:E5:B6:10:BA:9E:7C
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       382A38DA
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/yG1rn90L-j2hpLq48u3lthC6nnw.roa
Signing time:             Tue 04 Jan 2022 12:23:23 +0000
ROA not before:           Tue 04 Jan 2022 12:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61208
IP address blocks:        178.175.154.0/23 maxlen: 24
                          178.175.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942291162 (0x382a38da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  4 12:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c86d6b9fdd0bfa3da1a4bab8f2ede5b610ba9e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:96:cc:33:bd:39:cd:96:4c:22:fa:ae:e7:
                    42:e5:1a:24:23:f7:0b:75:63:4a:a0:d1:f0:13:17:
                    18:53:1d:43:7b:5d:81:50:0b:9a:97:b2:6d:96:8d:
                    d8:bb:be:e5:12:80:2a:b3:0b:94:c6:de:02:fa:6f:
                    5d:a5:df:54:8b:a7:40:98:3c:26:5e:fe:e5:21:af:
                    d5:98:9f:2a:5c:9f:ec:5c:bf:8e:bf:97:43:5d:d0:
                    11:f5:6c:18:d9:4b:d0:83:3e:ba:61:16:f5:f5:a5:
                    b6:69:70:59:e4:f0:54:d6:0b:c1:f7:43:07:2d:43:
                    39:35:26:06:ad:98:74:2f:37:1f:58:d9:bb:39:f7:
                    4f:fc:a3:92:0e:01:eb:39:3b:7d:83:6b:19:9b:ff:
                    73:07:ec:e1:b7:07:b6:78:fd:b0:ee:0c:9a:c7:26:
                    aa:57:e2:67:0c:95:c7:57:6c:05:ee:cf:b8:d0:59:
                    b1:ff:d2:7c:7c:7e:a2:f2:a8:59:39:ec:a4:45:20:
                    43:5b:7f:aa:22:53:0a:01:5b:7c:f7:d6:c3:a6:93:
                    6a:1b:8f:b8:a2:e9:8e:7c:bf:63:d7:27:fb:87:2d:
                    c9:2f:3d:de:ca:a3:5c:0c:fe:4a:b1:3a:8d:05:7f:
                    9c:a8:6f:f2:a1:f6:a7:bf:25:de:b2:97:f4:67:81:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:6B:9F:DD:0B:FA:3D:A1:A4:BA:B8:F2:ED:E5:B6:10:BA:9E:7C
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/yG1rn90L-j2hpLq48u3lthC6nnw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.154.0/23
                  178.175.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:b7:ab:56:4b:48:79:58:1f:ee:b7:d7:af:9d:7d:40:97:7f:
         ee:a6:16:91:5c:f1:58:46:8c:fa:d4:b1:e4:3c:ce:04:71:d4:
         8e:68:60:15:ae:b3:26:e3:06:96:6a:a1:d5:80:8f:34:82:3a:
         15:8b:83:2a:8b:9d:70:f8:13:bc:7f:0d:75:96:43:5d:ec:78:
         f1:08:10:b8:50:7a:24:77:bd:8a:75:d5:c3:b7:24:e1:58:26:
         d5:09:84:d6:4f:85:09:d9:60:e4:6f:c0:30:cc:19:fc:88:fa:
         b1:35:86:fa:f1:25:8e:77:85:02:77:c3:85:ac:a4:58:61:92:
         06:96:bf:dc:7b:ef:63:72:f5:b3:d8:a7:93:92:fa:86:fa:88:
         e1:e4:c6:9a:42:3c:1e:5f:c2:65:21:1c:e7:1e:78:d1:3d:7d:
         50:8a:d7:6c:a2:1e:80:36:3d:c0:fa:18:97:a7:c9:4a:55:30:
         68:18:9b:60:a3:44:eb:d7:3a:cf:8d:80:91:fd:12:43:4c:19:
         5d:26:6a:35:0c:f9:0c:34:d5:c8:35:80:8e:ca:20:6f:34:16:
         09:a0:cd:71:73:73:5f:5b:cd:fe:96:90:6b:6c:2d:21:cc:a0:
         76:f2:88:da:d1:34:ec:2f:3f:70:95:6e:50:74:f6:95:92:be:
         74:8d:e3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:44 2025 by rpki-client