Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b66a33-92ff-4bc5-849e-8ba6f92434de/1/v-RXOEacJgMyZqnjyIOSvNiltAg.roa
File:                     v-RXOEacJgMyZqnjyIOSvNiltAg.roa (raw, json)
Hash identifier:          Af5dg26pznpOEv5WniCwgj7enzmIai+ukB3K1okfwbo=
Subject key identifier:   BF:E4:57:38:46:9C:26:03:32:66:A9:E3:C8:83:92:BC:D8:A5:B4:08
Certificate issuer:       /CN=84393e987d67c3dba9094837ec8829ff176c1090
Certificate serial:       01856D662D4958C04E7739DA5D219E138748
Authority key identifier: 84:39:3E:98:7D:67:C3:DB:A9:09:48:37:EC:88:29:FF:17:6C:10:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hDk-mH1nw9upCUg37Igp_xdsEJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b66a33-92ff-4bc5-849e-8ba6f92434de/1/v-RXOEacJgMyZqnjyIOSvNiltAg.roa
Signing time:             Sun 01 Jan 2023 12:54:50 +0000
ROA not before:           Sun 01 Jan 2023 12:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197883
IP address blocks:        80.73.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:66:2d:49:58:c0:4e:77:39:da:5d:21:9e:13:87:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84393e987d67c3dba9094837ec8829ff176c1090
        Validity
            Not Before: Jan  1 12:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bfe45738469c26033266a9e3c88392bcd8a5b408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:87:3a:f5:cf:62:6c:e0:4a:d7:49:93:9a:
                    0b:e0:30:7a:72:14:f8:29:45:a6:bf:5b:54:37:88:
                    3b:b1:70:25:e3:37:90:e1:8a:cb:42:37:81:e8:f2:
                    49:07:1d:62:62:50:f2:41:db:a5:ad:e5:97:79:5e:
                    54:15:61:2f:65:14:f2:f3:8f:c0:73:7a:bc:8a:09:
                    94:ea:3e:dd:a9:e2:cf:04:9e:c6:98:f9:a8:93:fc:
                    2b:c3:9e:29:5b:dd:8f:8c:2f:2f:3d:03:7d:3b:55:
                    fb:37:58:b4:43:e7:80:a0:37:9c:b3:7f:13:44:f7:
                    71:07:94:0f:f9:87:7f:1e:a0:99:b9:e7:83:ba:5e:
                    a8:ed:3a:a8:a2:ae:c3:60:8d:61:d9:58:4e:03:ed:
                    d0:78:26:84:d6:22:47:d9:50:14:2e:88:e5:0c:0a:
                    6c:a8:1d:a9:3f:37:b4:b1:4a:e8:10:2f:81:a4:a9:
                    94:60:73:f2:aa:da:d5:df:f0:42:61:54:ce:92:76:
                    be:29:d8:1a:51:b3:63:a6:a5:32:c6:b4:49:ca:5d:
                    28:1b:6a:bb:43:27:28:e7:09:89:96:ae:22:00:ed:
                    2d:ac:62:4e:44:fe:64:82:e1:99:d4:0a:56:29:2d:
                    16:e8:14:9f:35:3a:ea:6c:6e:bd:90:1b:ef:0f:83:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E4:57:38:46:9C:26:03:32:66:A9:E3:C8:83:92:BC:D8:A5:B4:08
            X509v3 Authority Key Identifier:
                keyid:84:39:3E:98:7D:67:C3:DB:A9:09:48:37:EC:88:29:FF:17:6C:10:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDk-mH1nw9upCUg37Igp_xdsEJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b66a33-92ff-4bc5-849e-8ba6f92434de/1/v-RXOEacJgMyZqnjyIOSvNiltAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b66a33-92ff-4bc5-849e-8ba6f92434de/1/hDk-mH1nw9upCUg37Igp_xdsEJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:5b:2c:48:f6:a1:07:ce:a1:a7:12:d7:9a:54:ae:6f:20:
         5d:72:d2:b6:36:29:34:fa:df:2c:35:83:07:60:da:cc:46:cf:
         48:58:ae:c0:1a:92:db:4d:58:1c:97:3a:6d:e3:fd:f2:3a:1b:
         49:30:63:b3:c9:bc:54:1b:3a:ab:d8:9e:4f:e3:39:82:53:09:
         9f:54:cc:9a:7e:ee:de:4a:b9:ab:eb:27:e9:96:56:c4:e0:24:
         8c:21:d9:16:8f:b9:93:0c:e4:1a:70:5e:05:d4:53:70:45:5a:
         f6:44:1f:38:18:d9:e6:4f:61:7c:ec:83:02:12:99:82:7d:18:
         23:07:11:11:a8:d7:28:ea:40:52:3d:10:a0:09:f3:68:f7:88:
         a1:4f:96:f6:a6:16:73:7c:d6:f1:37:35:e9:91:00:49:2a:16:
         78:ca:28:f4:87:95:21:92:67:22:40:d9:f8:23:1e:11:6a:3f:
         55:40:0a:e1:e6:d7:68:22:40:dd:4e:27:aa:1b:42:14:d0:9f:
         a4:49:af:90:78:8c:6b:e3:10:98:cf:f1:ea:89:ad:6a:f4:16:
         6e:75:d9:2b:d8:e6:67:2e:b9:59:8f:ad:2f:97:35:6c:ac:8a:
         07:19:e4:80:12:d7:5d:49:d3:f0:9a:e8:6a:9f:ba:56:c2:99:
         dc:67:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:57 2025 by rpki-client