Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/eEVnADU1Ejo5g6qIMbT3yMbeqEc.roa
File:                     eEVnADU1Ejo5g6qIMbT3yMbeqEc.roa (raw, json)
Hash identifier:          eStSjIrvSv1/jDFWaWFpHmyx0Eb1orX/jV9sUP9LAb0=
Subject key identifier:   78:45:67:00:35:35:12:3A:39:83:AA:88:31:B4:F7:C8:C6:DE:A8:47
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       01094C26
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/eEVnADU1Ejo5g6qIMbT3yMbeqEc.roa
Signing time:             Thu 09 Jun 2022 16:50:02 +0000
ROA not before:           Thu 09 Jun 2022 16:50:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29538
IP address blocks:        185.244.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17386534 (0x1094c26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Jun  9 16:50:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=784567003535123a3983aa8831b4f7c8c6dea847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:58:82:11:98:04:0c:1e:82:cb:5a:fb:98:
                    f3:9d:c1:61:9e:0f:dc:f9:27:6e:29:15:f5:f0:37:
                    01:fb:0f:ea:5d:d3:46:ac:d7:74:91:e3:a7:bf:7a:
                    b4:84:35:be:78:df:a6:10:43:23:7b:0d:77:15:f0:
                    67:51:92:a6:9b:e5:fd:c3:83:3d:a7:44:fc:77:b0:
                    fc:68:b5:c3:35:d5:60:52:b9:37:aa:b6:6c:12:7c:
                    a9:b0:cd:b6:29:96:ae:76:f7:0e:5a:0e:6e:be:3a:
                    21:de:8b:d8:44:a8:38:98:18:88:00:cf:1b:df:02:
                    0f:d2:4c:ce:30:85:7e:c4:96:f0:21:04:d9:c2:43:
                    fc:1e:5f:a6:96:f6:37:80:0d:a1:53:95:e1:56:f1:
                    2f:44:1d:ad:a3:b5:08:31:9e:eb:54:93:c7:ad:64:
                    2f:53:fe:ec:6d:77:be:ee:e7:0a:e7:3a:45:cc:81:
                    e2:29:52:0d:c2:8b:78:bf:31:7d:fa:5d:9d:0c:24:
                    01:5b:82:50:31:c4:f2:1e:64:fd:3e:61:f9:51:38:
                    92:09:12:26:62:ba:6e:2d:ed:c3:98:53:eb:57:dc:
                    de:26:78:43:b0:b2:24:47:ed:83:3b:ed:3c:e5:c9:
                    e5:64:de:d6:86:3e:eb:09:27:3f:fb:08:02:36:05:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:45:67:00:35:35:12:3A:39:83:AA:88:31:B4:F7:C8:C6:DE:A8:47
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/eEVnADU1Ejo5g6qIMbT3yMbeqEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:b3:ba:72:85:cd:e7:0d:54:8a:5d:95:c9:a2:b0:ac:26:
         36:e8:e1:20:a2:1d:15:37:fc:be:22:9c:d5:98:bd:2e:28:ef:
         e3:df:da:89:78:10:9a:5d:9d:11:5d:5a:87:a8:48:63:f0:7c:
         d1:e0:3a:a3:43:70:54:b7:66:e8:55:e4:78:c9:51:39:49:33:
         46:b5:b7:71:3a:ee:37:fd:7f:c7:18:44:6d:b9:d2:51:01:9a:
         a3:5a:1f:32:bc:5b:d6:df:37:eb:b8:9d:66:ed:65:52:45:a0:
         e6:76:d0:bb:aa:ae:38:d8:d2:ca:99:d4:3d:df:e7:4c:19:90:
         bb:4c:72:03:ad:eb:46:64:37:71:01:66:4d:46:2e:da:4c:ff:
         d6:6c:e2:71:fd:48:5a:93:fc:b3:fe:08:ed:83:61:cd:5a:ae:
         f5:af:ae:8c:5e:5f:c8:10:cd:46:98:9b:e5:12:9c:ae:1b:bd:
         dc:6d:35:c5:25:09:3d:d3:8a:ae:77:b0:a9:46:6d:8d:11:ac:
         e5:0c:86:91:61:d6:2e:55:11:b6:fa:68:94:63:31:2c:cb:cf:
         9a:3b:d3:31:89:a0:3a:04:9d:2d:55:e3:c6:09:26:64:85:fa:
         c2:3f:27:6e:0b:ba:d8:d1:aa:28:0c:d5:63:b8:a2:2f:e8:41:
         72:ec:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:29:36 2025 by rpki-client