Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/qpN_j5bU6LlHPeOwZLZWV9R46Ek.roa
File:                     qpN_j5bU6LlHPeOwZLZWV9R46Ek.roa (raw, json)
Hash identifier:          DUQsb/fYm1Y/IBqaN01fXm0qAHtAS8yUTdOmA5rVF8s=
Subject key identifier:   AA:93:7F:8F:96:D4:E8:B9:47:3D:E3:B0:64:B6:56:57:D4:78:E8:49
Certificate issuer:       /CN=8cac877ce4df6bd822e4a03e791bbd331e5a5136
Certificate serial:       E59BE7
Authority key identifier: 8C:AC:87:7C:E4:DF:6B:D8:22:E4:A0:3E:79:1B:BD:33:1E:5A:51:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/qpN_j5bU6LlHPeOwZLZWV9R46Ek.roa
Signing time:             Sat 01 Jan 2022 03:53:20 +0000
ROA not before:           Sat 01 Jan 2022 03:53:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        94.154.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15047655 (0xe59be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cac877ce4df6bd822e4a03e791bbd331e5a5136
        Validity
            Not Before: Jan  1 03:53:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa937f8f96d4e8b9473de3b064b65657d478e849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:14:b2:79:8c:56:73:41:bc:a2:ff:c7:c4:
                    b1:45:50:89:cf:e7:2c:f6:74:a5:86:ea:5e:1c:27:
                    fd:06:65:e2:6e:48:98:63:dc:8d:a3:33:17:2b:fd:
                    bd:dd:94:33:be:8d:1d:dd:4d:ea:a6:b0:a1:68:b1:
                    37:55:21:f7:01:e5:35:e6:11:1d:55:e8:b6:14:ab:
                    5a:c9:ff:fc:bb:f1:3b:12:ae:1a:7a:36:ca:38:08:
                    b9:4f:c5:ae:73:05:4e:c3:c7:7a:32:f3:ee:34:2d:
                    f5:b3:82:59:ea:54:c9:9b:77:d8:31:01:47:53:d6:
                    cb:7c:85:ab:a4:3b:fb:c4:fb:5c:d7:74:36:61:8c:
                    47:67:c5:1d:f0:a5:6f:17:b5:12:fd:29:89:8b:4c:
                    ae:1f:e7:77:06:e0:c3:ae:6c:9f:32:83:02:19:f2:
                    04:bf:ac:a7:da:81:ed:7d:39:22:4d:f5:6b:80:41:
                    c4:43:e9:bc:52:e7:a5:85:69:e4:35:6a:1d:94:4a:
                    e7:0e:c8:41:84:02:e5:88:86:10:fa:aa:b7:55:76:
                    9a:e1:2b:02:a5:f6:a5:c0:f4:bc:15:11:00:94:ab:
                    96:56:19:e4:cb:d8:f8:c6:f2:c8:d9:43:eb:b0:e3:
                    03:f1:28:1b:04:8c:11:12:9e:ff:45:20:bc:b3:0f:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:93:7F:8F:96:D4:E8:B9:47:3D:E3:B0:64:B6:56:57:D4:78:E8:49
            X509v3 Authority Key Identifier:
                keyid:8C:AC:87:7C:E4:DF:6B:D8:22:E4:A0:3E:79:1B:BD:33:1E:5A:51:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/qpN_j5bU6LlHPeOwZLZWV9R46Ek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:94:20:8b:43:47:b5:eb:2b:15:cc:03:79:05:fe:c1:b8:3a:
         23:90:21:3d:dc:33:93:4a:00:4c:e8:c5:f3:0b:db:4c:11:4a:
         90:3a:0d:3c:e0:42:f7:92:bf:a4:0e:2b:11:34:b7:be:9d:44:
         de:4e:2e:95:34:61:ea:58:f6:14:d6:11:35:d2:c4:2e:34:7f:
         c8:12:de:90:24:2d:f4:f7:0f:f3:22:45:c6:df:43:ca:8f:63:
         3c:d9:e0:99:78:56:c8:a3:0e:55:15:29:8d:1f:47:c9:41:1b:
         45:2d:2d:12:cd:bd:ea:15:83:16:4f:fd:78:5c:e0:48:51:e0:
         b9:ca:74:c2:0c:23:92:56:11:21:6a:e3:8e:93:ce:09:63:4f:
         c6:ba:9e:91:36:a6:f8:0d:23:96:33:3a:b9:49:70:ee:3e:09:
         ef:e6:d0:e9:35:29:e9:66:3f:75:81:69:93:a7:e9:64:5d:99:
         f4:20:13:c7:d7:e0:71:8a:b7:d0:28:da:7d:0d:67:90:fb:32:
         b4:ef:f0:5d:15:fa:3e:e8:d3:5e:de:d4:d3:1b:1d:34:f8:fd:
         9d:e8:77:4d:c1:5f:8b:97:76:61:7a:c3:6b:0a:3c:24:49:8e:
         75:90:0a:00:02:f5:50:b1:4b:b5:75:84:f4:e9:e8:63:cf:11:
         34:06:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:02 2025 by rpki-client