Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ETt_I8zUT7PgQC0C2vGb1iKtGjQ.roa
File:                     ETt_I8zUT7PgQC0C2vGb1iKtGjQ.roa (raw, json)
Hash identifier:          mYnIy7jJL1O6D6Di/zc3WByBymjY9FYtmG6oIBMoW/U=
Subject key identifier:   11:3B:7F:23:CC:D4:4F:B3:E0:40:2D:02:DA:F1:9B:D6:22:AD:1A:34
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       0185C486B1B9735508EC9C981B25C31D11B0
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ETt_I8zUT7PgQC0C2vGb1iKtGjQ.roa
Signing time:             Wed 18 Jan 2023 10:57:19 +0000
ROA not before:           Wed 18 Jan 2023 10:57:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44208
IP address blocks:        176.46.138.0/23 maxlen: 24
                          94.74.190.0/24 maxlen: 24
                          176.46.144.0/20 maxlen: 24
                          176.46.140.0/22 maxlen: 24
                          109.203.160.0/19 maxlen: 24
                          94.74.128.0/18 maxlen: 24
                          94.74.136.0/24 maxlen: 24
                          31.170.48.0/20 maxlen: 24
                          94.74.165.0/24 maxlen: 24
                          185.34.160.0/22 maxlen: 24
                          94.74.166.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c4:86:b1:b9:73:55:08:ec:9c:98:1b:25:c3:1d:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Jan 18 10:57:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=113b7f23ccd44fb3e0402d02daf19bd622ad1a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:9b:95:ae:02:9b:c8:78:04:29:87:be:54:
                    95:0d:a2:9a:d4:f7:25:b3:97:04:5c:4b:26:40:ca:
                    98:51:e5:0b:fe:c9:5e:11:8f:4b:52:13:0e:aa:9f:
                    0c:f9:c6:3e:03:16:89:b6:1e:ff:f8:8e:46:f6:44:
                    e6:bf:10:58:a1:52:45:30:4d:9e:4d:7c:08:8e:42:
                    69:ad:fa:7f:0a:6b:a3:50:55:d7:87:8f:2b:1d:f8:
                    d9:9c:b1:3d:eb:13:10:d8:4c:a4:50:f5:59:03:82:
                    d0:14:d0:d5:6b:26:d4:5b:e3:26:1b:41:c2:7c:41:
                    85:64:96:3d:12:0c:20:9b:41:c4:94:fe:ef:39:e7:
                    03:51:3e:56:ed:41:c5:f6:0c:ef:c3:60:08:bb:17:
                    98:79:7e:27:fc:bd:41:c6:a6:c9:4b:29:05:fa:dc:
                    b8:13:62:a8:98:6e:a4:56:0b:25:f5:db:3d:28:49:
                    b5:20:ce:88:19:70:23:c4:e1:64:cf:c9:c2:13:a3:
                    22:9b:26:d2:82:5f:83:e2:ed:55:8f:cf:f3:50:bf:
                    6f:9c:eb:66:75:54:1a:ec:5b:ce:13:ce:10:cd:56:
                    0c:4d:82:5c:bd:6d:70:46:52:7a:0e:17:d8:38:9b:
                    94:e0:7f:0c:f4:36:c4:19:ee:59:be:df:b0:b0:54:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3B:7F:23:CC:D4:4F:B3:E0:40:2D:02:DA:F1:9B:D6:22:AD:1A:34
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ETt_I8zUT7PgQC0C2vGb1iKtGjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.170.48.0/20
                  94.74.128.0/18
                  109.203.160.0/19
                  176.46.138.0-176.46.159.255
                  185.34.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:16:b3:bc:d2:0e:b2:c6:23:d4:93:21:32:66:d3:3d:99:89:
         e8:85:09:52:94:58:6c:fb:f4:2b:af:be:96:fa:aa:88:95:ba:
         93:58:f0:01:b9:27:7c:dd:65:d4:a3:fe:da:38:37:d9:8e:44:
         9d:89:30:a4:cb:b3:34:85:37:dc:8f:7d:71:52:f0:6b:90:5a:
         bc:89:13:7a:0c:5c:3f:b6:a6:9e:21:ca:46:01:a4:29:3a:6d:
         e5:fc:90:7e:3c:fe:1f:0c:79:80:2e:ff:e4:d8:b7:cf:70:ae:
         1f:6d:1f:9a:7b:fd:04:c6:74:53:ad:4d:b5:dd:f8:e5:5e:ac:
         fa:a2:00:fc:0f:03:3e:c5:4d:15:dd:db:28:58:8d:7a:23:09:
         50:fa:a0:86:36:49:45:e8:6a:76:f4:23:ee:17:b1:69:88:26:
         42:7c:c1:da:05:bc:f0:36:b3:6b:ed:8e:31:a1:49:8b:a8:a4:
         9e:7a:e6:c5:64:02:94:4e:29:2b:eb:d4:b0:79:be:ee:8a:4e:
         c4:51:6d:94:a8:2c:e0:62:4e:fe:da:da:18:ce:76:5b:a9:ed:
         70:0a:cb:23:e0:b6:14:28:09:bb:f5:c3:fd:d8:d5:13:1a:c8:
         ed:c2:a0:d2:c5:59:33:20:93:de:f3:f6:21:37:b1:34:ea:fd:
         1f:f4:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:04 2025 by rpki-client