Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SV_Pa_uwU7D0_Aq5iwZiBAYHtN4.roa
File:                     SV_Pa_uwU7D0_Aq5iwZiBAYHtN4.roa (raw, json)
Hash identifier:          Cq9zd5/XiA4oX3gvmdFfv8JT2r/9Gl/rr/g/z6xZpz0=
Subject key identifier:   49:5F:CF:6B:FB:B0:53:B0:F4:FC:0A:B9:8B:06:62:04:06:07:B4:DE
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       02C63564
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SV_Pa_uwU7D0_Aq5iwZiBAYHtN4.roa
Signing time:             Wed 18 May 2022 17:22:17 +0000
ROA not before:           Wed 18 May 2022 17:22:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34872
IP address blocks:        45.154.97.0/24 maxlen: 24
                          194.28.98.0/23 maxlen: 24
                          2a0c:b641:540::/44 maxlen: 48
                          2a0f:8400::/32 maxlen: 48
                          2a0c:b641:870::/44 maxlen: 48
                          2a0c:b641::/44 maxlen: 48
                          2a0c:b641:30::/44 maxlen: 48
                          2a0c:b640::/32 maxlen: 48
                          2a0c:b641:70f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46544228 (0x2c63564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: May 18 17:22:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=495fcf6bfbb053b0f4fc0ab98b0662040607b4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:ab:42:e8:52:5f:fb:53:a0:2d:16:f3:46:
                    93:1b:b2:3c:84:f4:ec:40:e4:b9:f1:2e:56:bc:4b:
                    41:11:e2:71:ff:84:a9:a3:97:e1:a0:a7:c6:af:c5:
                    87:cb:72:85:21:b6:63:4f:4d:23:05:65:a9:df:18:
                    8c:6d:31:e3:a2:e6:98:3d:73:63:c0:c2:ed:cc:2d:
                    e6:5b:b6:75:d1:54:6c:a7:d3:0a:dd:0b:a3:b0:63:
                    b9:1f:b1:80:19:88:57:55:7b:d2:3f:ac:9f:2d:af:
                    64:0b:ee:9a:11:42:8d:a9:f7:bb:85:0c:42:b2:7a:
                    c4:02:ed:e6:aa:4d:bd:db:3a:e4:31:04:77:c9:b0:
                    82:a8:a3:1c:fd:cf:86:f5:2b:59:a1:17:cd:c1:44:
                    be:73:70:55:46:cf:9d:48:da:b1:61:c2:8c:41:61:
                    57:3e:63:d3:27:93:87:02:d9:9c:5e:d0:98:5b:f4:
                    e4:26:b7:03:cc:2e:00:0f:a3:49:3b:bb:2d:e6:24:
                    02:c0:2c:3f:75:4e:ad:cc:10:8d:4f:ed:94:cf:bd:
                    81:58:5d:18:d3:71:2e:d0:d7:98:74:62:21:a0:28:
                    03:cb:5a:1c:b1:5c:9a:6b:56:dd:4a:9a:7e:0b:f3:
                    e9:eb:98:cb:61:66:ac:7c:d4:91:3e:0f:d8:f8:7d:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:CF:6B:FB:B0:53:B0:F4:FC:0A:B9:8B:06:62:04:06:07:B4:DE
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/SV_Pa_uwU7D0_Aq5iwZiBAYHtN4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.97.0/24
                  194.28.98.0/23
                IPv6:
                  2a0c:b640::-2a0c:b641:f:ffff:ffff:ffff:ffff:ffff
                  2a0c:b641:30::/44
                  2a0c:b641:540::/44
                  2a0c:b641:70f::/48
                  2a0c:b641:870::/44
                  2a0f:8400::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:69:44:3f:4f:9d:a9:de:f6:bb:5c:8b:0d:be:e3:3a:74:
         96:d0:60:ce:e5:f4:97:4d:04:cb:11:1f:a4:c2:85:5d:5a:87:
         a2:e8:58:70:f0:46:f1:81:29:5f:94:5e:98:16:6c:76:3c:91:
         d1:6b:e1:99:90:fd:b6:3d:3d:06:6c:48:fd:7e:1d:67:69:fa:
         bd:41:db:24:25:a5:86:a9:a5:c9:1f:ab:c6:f8:8b:6e:41:f5:
         ab:26:e9:ac:60:24:d3:fb:54:f4:d2:fc:2b:22:c0:3c:63:cd:
         37:ae:2b:a7:f3:d2:cb:30:d4:e7:eb:25:ff:f0:ed:08:94:45:
         42:f4:d9:aa:fd:0a:9e:f4:89:c1:5e:24:f4:6d:4c:7d:1d:62:
         44:93:96:43:be:12:9c:7e:42:ed:dc:6c:1f:1e:56:7b:0f:10:
         be:ff:00:89:2a:58:b7:73:40:33:6c:cd:a8:f3:a4:b1:80:20:
         8c:77:10:7e:2b:55:8e:d7:00:b6:de:0c:cd:8e:c0:d5:36:a0:
         d6:dd:ca:f8:bd:b2:87:dd:f7:b7:46:1e:1c:06:a3:3d:33:3f:
         9c:79:04:45:f0:7d:8c:e8:42:5d:2c:71:76:02:fc:e4:18:57:
         93:cb:82:a9:34:e5:3d:05:40:26:48:cc:95:23:15:5d:93:fb:
         c8:cc:ed:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:38:49 2025 by rpki-client