Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/HsoHRodEDsJEhju1uACZ9AWGB7E.roa
File:                     HsoHRodEDsJEhju1uACZ9AWGB7E.roa (raw, json)
Hash identifier:          FZgNordO4d1y1qsyTEbdZka1QMMrdA03wN8yHaPPc0M=
Subject key identifier:   1E:CA:07:46:87:44:0E:C2:44:86:3B:B5:B8:00:99:F4:05:86:07:B1
Certificate issuer:       /CN=a17a2aac73645631ef9311d4b2ca9d355f7f8c1b
Certificate serial:       0E75FBC3
Authority key identifier: A1:7A:2A:AC:73:64:56:31:EF:93:11:D4:B2:CA:9D:35:5F:7F:8C:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oXoqrHNkVjHvkxHUssqdNV9_jBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/HsoHRodEDsJEhju1uACZ9AWGB7E.roa
Signing time:             Sat 01 Jan 2022 13:56:30 +0000
ROA not before:           Sat 01 Jan 2022 13:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47527
IP address blocks:        194.247.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242613187 (0xe75fbc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a17a2aac73645631ef9311d4b2ca9d355f7f8c1b
        Validity
            Not Before: Jan  1 13:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1eca074687440ec244863bb5b80099f4058607b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:0c:ca:26:bf:26:be:46:e4:d9:6c:c2:30:
                    cb:1f:8f:09:2f:54:cb:40:83:da:d9:87:97:41:cb:
                    8b:5b:4f:cb:cb:41:e0:52:48:94:ec:c2:bd:09:24:
                    ad:f7:9d:bc:dc:04:a4:6c:50:25:f3:c5:5b:69:a0:
                    69:11:99:d7:7f:28:7b:0a:07:41:5f:e1:0e:ee:96:
                    cb:58:6f:30:f7:bf:2e:a9:31:e6:73:cc:e2:79:91:
                    22:29:0e:aa:fb:bd:af:36:6b:25:6d:c0:90:df:f4:
                    01:ae:cd:b3:18:2c:06:ad:91:f0:aa:d1:c9:3c:f6:
                    7e:18:07:ff:6e:38:56:01:95:65:ea:1e:50:f3:bb:
                    8f:2d:22:d4:45:39:c8:7c:db:e3:da:7a:15:48:6a:
                    b7:b4:ac:4a:2a:7b:11:79:f5:30:d6:bc:61:8d:2b:
                    31:b1:47:90:d8:56:c5:06:0e:3d:bb:cd:f3:7e:63:
                    d5:69:95:83:aa:34:a1:67:67:e8:9b:b6:90:3c:fe:
                    89:1d:37:31:f1:77:ff:37:81:68:cb:4d:0b:7f:bb:
                    b6:20:a4:82:05:87:b6:da:1d:9d:9b:9a:a4:ce:15:
                    0e:70:6c:71:37:16:13:a3:b4:4e:00:23:4e:be:99:
                    b1:d5:2b:6a:54:16:d4:0a:ce:fa:0e:cd:a7:57:21:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CA:07:46:87:44:0E:C2:44:86:3B:B5:B8:00:99:F4:05:86:07:B1
            X509v3 Authority Key Identifier:
                keyid:A1:7A:2A:AC:73:64:56:31:EF:93:11:D4:B2:CA:9D:35:5F:7F:8C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oXoqrHNkVjHvkxHUssqdNV9_jBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/HsoHRodEDsJEhju1uACZ9AWGB7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/oXoqrHNkVjHvkxHUssqdNV9_jBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.247.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:11:32:ad:6e:2d:b9:15:5c:81:db:fe:ba:02:bc:7b:ca:39:
         32:0b:61:aa:cb:73:eb:e7:a3:f2:26:48:a8:3a:26:9f:e7:33:
         25:28:57:5e:39:fd:1e:f1:0b:12:66:d4:98:20:ff:1c:39:43:
         7e:bf:00:da:6b:6b:08:24:81:5e:ac:83:c2:cf:f7:d6:36:8d:
         5f:20:9c:40:73:e9:c7:a4:84:12:2c:27:e5:55:83:40:4f:b5:
         70:eb:59:98:af:d6:8b:21:64:74:ec:65:01:da:a8:a6:f7:b6:
         49:d4:b4:c7:08:c3:a8:92:c1:d8:ab:32:9a:9b:d9:7e:3d:4d:
         16:3d:a1:1a:32:a2:5c:5d:cc:a2:95:4a:9f:7a:00:9c:97:91:
         fe:57:6d:ec:1f:5c:fd:29:cf:48:a8:1d:b4:0e:f5:18:f1:f7:
         cc:19:84:45:99:24:d9:34:b2:d2:51:ba:60:e5:9a:dd:ab:bf:
         d9:be:29:34:94:30:0b:eb:0d:4c:21:3a:74:56:e2:8f:c3:c3:
         34:b9:1f:bd:d9:1b:36:00:d4:00:2e:4b:d4:32:70:34:9c:75:
         4d:90:6d:94:ba:c6:a3:6b:61:54:cf:a4:a9:e5:4d:59:cd:72:
         e5:14:4e:b4:18:fd:fb:7c:b5:a7:40:1c:54:10:6a:2c:65:72:
         60:63:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:11 2025 by rpki-client