Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/GCyEIawcT5jHkBwTpo6_JHEEgjI.roa
File:                     GCyEIawcT5jHkBwTpo6_JHEEgjI.roa (raw, json)
Hash identifier:          KlHvHClkMl83Yv9ynzEtPquShvbZPqwLA3//hSGxLsY=
Subject key identifier:   18:2C:84:21:AC:1C:4F:98:C7:90:1C:13:A6:8E:BF:24:71:04:82:32
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       040ED506
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/GCyEIawcT5jHkBwTpo6_JHEEgjI.roa
Signing time:             Fri 15 Apr 2022 15:37:41 +0000
ROA not before:           Fri 15 Apr 2022 15:37:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     10753
IP address blocks:        92.114.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68080902 (0x40ed506)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Apr 15 15:37:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=182c8421ac1c4f98c7901c13a68ebf2471048232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:f1:d5:d0:4e:3a:b3:db:49:62:40:54:f5:
                    64:25:2b:1f:19:ec:90:31:70:d2:7d:bf:62:b4:f8:
                    a2:ce:65:ad:4e:06:0c:28:eb:99:25:11:cc:27:3a:
                    88:a8:37:7a:49:a4:3a:df:3e:ab:4b:0f:25:b8:cc:
                    73:79:43:2b:a7:e1:38:55:e3:a6:bb:c2:1b:b3:7a:
                    81:42:d5:aa:ae:8f:0a:0e:a4:b6:89:4a:f2:22:c2:
                    dc:fd:2d:39:4a:c3:43:91:26:33:e0:d2:cf:ad:6a:
                    5c:3f:db:97:ee:82:8f:3a:69:0b:b7:9b:76:5f:89:
                    7b:9c:b8:3e:7a:fa:10:53:80:ce:03:d8:3a:7c:42:
                    f2:49:c8:96:29:4f:98:3e:1a:32:6b:90:99:ce:0e:
                    6e:37:a8:9e:1c:3c:54:7c:3b:93:34:1a:40:48:f1:
                    22:2c:44:67:bf:e2:22:72:19:b7:c7:df:ab:a9:39:
                    90:6a:1e:be:e1:62:41:25:32:e9:a7:16:78:31:8f:
                    42:94:00:1b:fa:05:85:d6:7b:57:1f:29:85:ec:06:
                    99:c6:5e:72:8a:41:5d:e3:a0:53:0d:8f:6b:a5:47:
                    72:df:e9:95:d5:b4:22:2b:64:28:33:36:bf:f7:48:
                    5d:ef:f5:c8:1c:55:bf:97:59:6d:ba:3c:23:8c:4c:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2C:84:21:AC:1C:4F:98:C7:90:1C:13:A6:8E:BF:24:71:04:82:32
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/GCyEIawcT5jHkBwTpo6_JHEEgjI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e4:a7:1f:2e:2d:32:0f:f1:28:30:0b:8f:35:db:0e:b8:6e:
         7a:60:4b:28:a8:2c:47:32:22:b6:53:e4:8c:fb:60:a4:88:c6:
         03:18:56:8a:49:97:84:ba:22:c8:b6:b7:eb:e0:8c:45:c4:dc:
         9c:6a:17:fe:1c:45:e6:93:da:a6:c9:b0:86:7a:6a:64:c3:90:
         7a:87:da:e9:c2:d5:1b:f9:c9:45:92:cf:64:07:69:26:5d:aa:
         ae:d3:23:75:a0:41:42:41:10:4e:6c:00:76:67:03:34:72:11:
         fa:c4:84:2e:d5:a7:21:7a:b2:b1:d5:a7:70:a0:a5:b0:c3:a8:
         31:fe:28:08:45:a5:79:cf:80:44:f1:82:02:fc:c1:f6:9d:05:
         92:88:b1:9e:4d:88:b1:c0:b2:16:62:62:8a:eb:3c:44:f3:48:
         1c:e7:0a:d5:7a:ef:2b:91:7e:62:c1:ce:bb:f2:4d:06:74:d7:
         2e:95:ff:bc:b4:b7:8a:76:30:ad:5f:b2:a2:54:ee:f0:d1:c9:
         da:fa:d9:01:e7:71:16:29:71:78:1f:2b:63:90:fc:a3:93:09:
         2b:6f:14:74:ae:fc:a5:43:15:6d:a0:33:9b:33:95:e8:d0:ee:
         08:b8:41:0c:3c:b0:a3:2c:f0:73:35:fc:ca:d7:f9:a7:e7:81:
         f3:0c:fc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:26 2025 by rpki-client