Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JhaMp8awVLTwyj1UW-Fed7wMDTA.roa
File:                     JhaMp8awVLTwyj1UW-Fed7wMDTA.roa (raw, json)
Hash identifier:          8i5UZ4y4mww8PTn49i1wogGX8L4W/QFhnNtbrawSi4U=
Subject key identifier:   26:16:8C:A7:C6:B0:54:B4:F0:CA:3D:54:5B:E1:5E:77:BC:0C:0D:30
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       019427B5A114C02D38998FFA0ED38A7996A3
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JhaMp8awVLTwyj1UW-Fed7wMDTA.roa
Signing time:             Thu 02 Jan 2025 15:50:02 +0000
ROA not before:           Thu 02 Jan 2025 15:50:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43696
IP address blocks:        31.184.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:a1:14:c0:2d:38:99:8f:fa:0e:d3:8a:79:96:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jan  2 15:50:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=26168ca7c6b054b4f0ca3d545be15e77bc0c0d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:19:7c:f7:be:96:3f:9a:53:fb:5b:2c:57:
                    9b:97:33:e8:bf:01:97:eb:42:b5:57:e4:a7:df:b9:
                    d7:ca:48:69:e5:b3:5a:dc:d2:fe:d4:69:0c:fe:e9:
                    44:d3:9b:b3:05:39:df:3f:b8:89:77:e6:e4:34:56:
                    43:42:9c:bf:67:27:41:38:b1:6b:78:66:06:3c:06:
                    83:64:84:ac:6a:51:32:1f:b9:23:37:d8:a6:be:20:
                    fb:d4:ec:44:98:6e:39:fb:e0:27:be:9b:0d:1b:a3:
                    55:47:0d:7a:e0:9c:e8:32:d0:e9:0c:d9:9f:e1:cc:
                    cf:7a:ea:36:6e:4f:7f:65:bf:f1:f7:74:a0:d6:22:
                    3d:4b:49:84:a8:22:14:3b:ba:e6:dc:89:ae:73:fe:
                    f5:5a:fe:0c:12:1a:ad:35:3b:57:8f:0c:e2:07:71:
                    d4:1d:77:de:35:3b:47:38:35:f8:27:61:7d:91:84:
                    99:f0:d5:10:41:8f:3d:43:e6:01:69:50:e8:76:d6:
                    16:ae:dc:20:e8:07:09:0e:9d:9b:25:11:66:61:5d:
                    77:9d:76:f1:19:36:33:75:5a:85:eb:71:1b:65:db:
                    09:fc:b3:c5:ff:57:76:ab:74:82:00:54:db:09:c9:
                    31:6c:39:2c:c9:07:d7:f0:62:0e:45:7d:1a:d9:4e:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:16:8C:A7:C6:B0:54:B4:F0:CA:3D:54:5B:E1:5E:77:BC:0C:0D:30
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/JhaMp8awVLTwyj1UW-Fed7wMDTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.184.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:46:50:8e:fb:e0:3c:c1:a4:c2:38:1d:55:2f:7d:cc:b3:62:
         bf:db:b2:71:b6:23:62:14:6f:fa:83:9e:cb:f3:65:7e:c1:42:
         9d:2d:d3:ee:cb:ec:f2:e3:ad:3a:53:74:b8:dc:23:d8:e2:30:
         6b:00:de:30:42:32:b1:9e:a6:de:67:76:12:b9:cf:02:04:da:
         4b:8a:61:c1:8e:58:ce:e0:ae:56:bc:5a:12:a0:dd:a4:46:72:
         b5:88:d7:18:62:5d:aa:d7:72:f8:8f:d4:01:4f:47:9d:7b:60:
         07:60:cf:71:99:8d:e9:d1:05:4c:21:f3:f8:a4:2e:8f:9f:4d:
         fc:c9:fe:dd:b1:26:3c:f0:9d:fb:d4:39:bf:23:92:46:ca:2d:
         72:2c:c3:0c:cd:ac:ae:92:7c:e3:6a:ee:28:3b:58:14:93:43:
         56:40:f4:f8:19:52:b7:50:25:63:de:f9:b5:22:11:e0:a7:77:
         4b:77:e5:28:ec:33:9d:68:65:59:cf:a4:f3:36:1b:4e:3f:e9:
         c2:f6:b9:e2:62:ef:77:e1:86:74:6e:80:1e:21:84:41:01:39:
         ad:2a:35:06:be:01:a6:3b:2a:be:f2:88:e2:be:c3:93:41:7f:
         59:6d:82:5f:d9:df:7b:54:c4:71:6c:1d:d4:36:bf:d7:c9:37:
         21:ae:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:18 2025 by rpki-client