Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/gGaQy_OxJQWGiDVcHE4Uer3Mf_w.roa
File:                     gGaQy_OxJQWGiDVcHE4Uer3Mf_w.roa (raw, json)
Hash identifier:          bmWQGrpFcnktOgqB+ZKF37mkgMCiqMWqlxHS2Daw4bQ=
Subject key identifier:   80:66:90:CB:F3:B1:25:05:86:88:35:5C:1C:4E:14:7A:BD:CC:7F:FC
Certificate issuer:       /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial:       01856D8B07520EB2D6147282E7B802C2FDF4
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/gGaQy_OxJQWGiDVcHE4Uer3Mf_w.roa
Signing time:             Sun 01 Jan 2023 13:35:06 +0000
ROA not before:           Sun 01 Jan 2023 13:35:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48318
IP address blocks:        194.209.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8b:07:52:0e:b2:d6:14:72:82:e7:b8:02:c2:fd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
        Validity
            Not Before: Jan  1 13:35:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=806690cbf3b125058688355c1c4e147abdcc7ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:3e:a0:c1:59:e2:b3:13:df:0f:2d:21:17:
                    1d:92:fe:9e:1f:51:94:6c:a9:12:4d:4b:68:7e:c5:
                    3f:c7:a7:82:fc:a6:f8:13:42:8c:e7:e6:38:b5:02:
                    2e:52:a1:48:87:ed:a4:57:33:cd:dd:73:32:c6:b3:
                    7f:18:43:e5:3c:63:ae:67:93:70:54:df:d6:ac:91:
                    9e:5d:6b:1e:ab:df:d4:59:c1:7c:0c:29:7b:18:2d:
                    24:e4:d6:36:87:5e:46:ee:9a:7c:90:1a:6f:8c:37:
                    3b:1e:f0:5e:23:b3:e4:b7:00:83:b4:8f:24:99:0d:
                    8d:a6:ba:d1:cb:e1:ee:0b:22:50:2b:93:25:97:63:
                    0e:dd:cd:86:38:af:a4:e9:2e:81:c2:da:09:d4:a0:
                    8f:d9:b9:41:35:84:f3:a3:0b:46:f2:c4:24:f2:68:
                    9e:d0:17:2c:24:5a:da:3b:65:56:cd:c2:7f:c6:6e:
                    e4:f5:78:20:26:0e:e1:a8:05:ef:60:7d:d0:6a:02:
                    8c:de:6c:35:68:02:8c:7c:1b:9f:52:28:ab:95:4b:
                    af:d8:44:cb:8a:02:35:d9:ea:10:3e:6e:d7:bf:d3:
                    bb:66:4b:64:bb:cd:dc:09:7a:e2:f8:54:32:05:e0:
                    9d:41:54:5b:e5:3d:16:d8:02:4e:99:04:b4:86:ba:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:66:90:CB:F3:B1:25:05:86:88:35:5C:1C:4E:14:7A:BD:CC:7F:FC
            X509v3 Authority Key Identifier:
                keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/gGaQy_OxJQWGiDVcHE4Uer3Mf_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.209.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:cd:52:e4:a7:87:4c:fc:75:00:11:07:73:f5:ae:62:e9:02:
         3b:b7:62:fb:04:4e:7c:9d:60:50:89:21:24:69:b5:bc:af:9f:
         06:7f:61:6e:e3:9a:18:4c:e5:c1:4c:59:53:31:13:be:09:47:
         de:51:5f:ed:6a:1c:89:ab:2f:83:4d:ef:ab:e5:48:14:c3:d8:
         33:2e:88:ed:31:82:80:c9:db:27:4c:0f:b0:2f:4a:75:ca:72:
         42:ea:04:79:15:60:0c:1b:1c:d2:98:87:13:b2:bb:ad:99:16:
         a0:70:6f:1f:f2:11:98:17:cf:61:7d:23:43:2a:c9:80:c4:bc:
         40:7d:05:46:cb:16:93:7a:6e:0f:87:30:9f:7f:04:c5:d1:da:
         25:0a:00:35:46:e6:73:c9:18:e1:8c:2a:1f:f2:c1:7e:09:b0:
         6c:99:eb:ad:a7:c6:86:59:6d:0b:2b:99:f7:b2:f8:bf:c9:a6:
         28:c9:54:5f:2a:ea:4e:54:00:e9:8e:1b:58:d5:43:ec:f2:e0:
         7d:35:e9:42:76:b5:77:58:b8:6e:83:58:f0:9e:26:30:c5:f1:
         1e:96:1e:d6:33:a7:56:89:3b:35:c1:0c:29:79:29:27:ea:cb:
         62:46:0d:5b:9d:19:d6:cc:01:dd:32:7d:02:11:d6:c5:ab:59:
         76:e0:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:54:20 2025 by rpki-client