Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/v12cHvCe_eKdjDuT72heeAwMpzw.roa
File:                     v12cHvCe_eKdjDuT72heeAwMpzw.roa (raw, json)
Hash identifier:          BZqzHOhTiHg+kw/vrtfoD/8lYknZywdgyXeTqJjfbZg=
Subject key identifier:   BF:5D:9C:1E:F0:9E:FD:E2:9D:8C:3B:93:EF:68:5E:78:0C:0C:A7:3C
Certificate issuer:       /CN=c84500bf9d054d2f369950e2e71ebf20fa215a09
Certificate serial:       0182119BF800763CCCD19F0815DA186EA363
Authority key identifier: C8:45:00:BF:9D:05:4D:2F:36:99:50:E2:E7:1E:BF:20:FA:21:5A:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEUAv50FTS82mVDi5x6_IPohWgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/v12cHvCe_eKdjDuT72heeAwMpzw.roa
Signing time:             Mon 18 Jul 2022 14:00:10 +0000
ROA not before:           Mon 18 Jul 2022 14:00:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41811
IP address blocks:        195.8.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:11:9b:f8:00:76:3c:cc:d1:9f:08:15:da:18:6e:a3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84500bf9d054d2f369950e2e71ebf20fa215a09
        Validity
            Not Before: Jul 18 14:00:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf5d9c1ef09efde29d8c3b93ef685e780c0ca73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:a1:f2:a2:61:ab:f5:31:b4:f3:46:30:57:
                    52:34:ad:8d:23:17:d8:4c:25:df:0c:50:ec:a4:73:
                    5c:b5:c1:7f:15:c5:62:1f:69:4e:94:66:a2:3d:22:
                    8e:58:38:a5:92:ca:89:4e:38:bf:65:38:90:d1:6a:
                    8c:af:cc:ce:c8:20:55:d3:ea:40:db:3b:e0:02:64:
                    11:cf:c1:73:aa:27:74:b6:f3:dd:1a:af:5e:19:6d:
                    84:00:dd:5e:fe:54:aa:d6:95:16:0c:1f:55:2d:b0:
                    43:7d:fa:ee:e2:dd:fd:2c:80:14:90:55:b7:41:ed:
                    ae:a8:3b:52:06:c1:6f:02:61:bc:6a:ab:93:a4:1a:
                    ba:8e:b2:d7:c9:c2:bb:9d:27:a9:96:b1:cd:48:01:
                    7b:21:c4:5d:2e:87:c0:94:88:d4:c2:4d:81:25:32:
                    d6:ad:60:a6:f7:25:af:4d:98:5d:75:c3:f3:9c:96:
                    67:3b:fc:0e:b9:11:bf:1f:dd:64:ec:ff:4e:2d:0b:
                    a3:e7:e0:ff:40:0d:69:ce:68:37:b5:b9:42:a0:f7:
                    59:63:cb:1b:47:91:2c:52:3a:5d:1a:9c:ac:b7:23:
                    c4:c4:c5:fd:51:a7:c7:a3:c5:9a:97:84:da:a4:ca:
                    ca:df:bb:51:59:3f:a2:a0:d1:29:54:6a:94:66:54:
                    49:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5D:9C:1E:F0:9E:FD:E2:9D:8C:3B:93:EF:68:5E:78:0C:0C:A7:3C
            X509v3 Authority Key Identifier:
                keyid:C8:45:00:BF:9D:05:4D:2F:36:99:50:E2:E7:1E:BF:20:FA:21:5A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEUAv50FTS82mVDi5x6_IPohWgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/v12cHvCe_eKdjDuT72heeAwMpzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0bcc46-fa82-48ab-910e-f2dbf3bc8b8b/1/yEUAv50FTS82mVDi5x6_IPohWgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.8.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:fd:d4:04:40:30:ef:57:b4:97:db:de:6e:79:bc:46:ab:2f:
         48:86:e4:10:95:f0:97:54:c9:17:ca:cc:91:6e:54:55:56:14:
         8f:ff:4a:e1:b6:70:97:ff:60:cb:e1:7f:28:dd:2f:af:e3:6c:
         ca:25:68:97:64:3f:86:46:1d:80:56:9b:8a:6e:a2:59:28:c4:
         62:64:6e:10:ed:8d:3b:28:b0:2a:53:2f:e8:2c:47:cb:d7:f1:
         12:7a:4b:d8:6b:ab:f3:06:9a:ec:13:21:a5:64:c3:44:f6:2f:
         35:8b:7f:6f:86:73:00:ae:af:2b:9b:bc:89:33:8b:c1:e5:85:
         b0:36:59:9f:00:36:e2:06:44:ce:63:7e:dc:20:9e:db:87:d8:
         9e:93:8e:2b:be:45:b4:90:1f:7a:5d:d6:eb:43:68:15:d5:9e:
         ac:17:3b:35:dc:65:27:c1:09:2b:2a:61:4c:b8:c6:bf:09:b4:
         c1:18:74:7b:6c:83:4a:91:64:39:c6:64:ce:67:e8:76:c4:29:
         f0:dd:d4:2c:98:eb:57:81:cd:9d:70:6f:f8:c4:dd:38:55:9d:
         c3:d5:09:6f:a5:ec:a6:06:27:ea:de:92:d4:d4:3c:d0:bd:2b:
         d5:1c:32:23:05:aa:0e:b4:fc:5f:85:50:4e:5a:37:13:73:15:
         a7:72:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:31 2025 by rpki-client