Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/c63R0I38SOGg09eyOmQ6t6zQ2sA.roa
File:                     c63R0I38SOGg09eyOmQ6t6zQ2sA.roa (raw, json)
Hash identifier:          KdUHiRE2vJki99kpveZjyxuueXOg1fPLNnuUQpUMszA=
Subject key identifier:   73:AD:D1:D0:8D:FC:48:E1:A0:D3:D7:B2:3A:64:3A:B7:AC:D0:DA:C0
Certificate issuer:       /CN=782668f3ba477de2052acc110b19ed4b611309db
Certificate serial:       8762
Authority key identifier: 78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/c63R0I38SOGg09eyOmQ6t6zQ2sA.roa
Signing time:             Mon 07 Feb 2022 07:54:47 +0000
ROA not before:           Mon 07 Feb 2022 07:54:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29684
IP address blocks:        193.105.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34658 (0x8762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782668f3ba477de2052acc110b19ed4b611309db
        Validity
            Not Before: Feb  7 07:54:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=73add1d08dfc48e1a0d3d7b23a643ab7acd0dac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:18:e6:94:4e:0b:3e:e3:95:f4:a2:e9:85:
                    f8:fe:4e:73:c9:e9:64:59:46:0a:da:77:e3:23:a6:
                    30:4e:ae:a2:bc:55:7c:ac:4a:02:4f:8f:59:07:a0:
                    52:1e:72:df:1e:93:53:67:22:74:54:3d:61:de:17:
                    16:d5:ee:16:29:d4:07:2c:8d:ce:a6:f6:d7:9d:e5:
                    38:46:15:e1:59:3c:c7:4e:3a:92:66:eb:0b:40:30:
                    99:1a:0f:b0:7c:9f:02:7d:79:ed:9a:6f:4f:a9:b5:
                    3a:21:80:df:66:69:7e:28:f9:c3:f3:9b:f3:a0:f5:
                    dc:12:a3:ed:3c:e8:2e:98:54:9e:59:6f:93:ac:c5:
                    a9:e1:1f:98:32:2a:97:d2:3a:d3:f7:a9:a6:b6:0f:
                    45:0c:98:a6:4c:25:fc:b5:d5:bb:d7:fc:b6:8c:50:
                    5d:94:36:d3:55:fd:3f:55:b9:65:8a:92:12:cb:64:
                    ff:9e:a4:f2:92:b0:f9:82:2a:7d:c2:06:f9:00:02:
                    de:a5:22:22:66:88:16:63:02:e3:df:c1:6f:56:41:
                    02:31:b0:60:79:3a:fe:b6:ff:bc:55:16:b9:86:79:
                    ee:a4:36:fd:cb:f4:df:26:e1:fe:2e:46:cd:be:c4:
                    ae:ee:97:a0:3f:df:df:1f:60:8c:23:22:1d:0c:ca:
                    ae:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AD:D1:D0:8D:FC:48:E1:A0:D3:D7:B2:3A:64:3A:B7:AC:D0:DA:C0
            X509v3 Authority Key Identifier:
                keyid:78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/c63R0I38SOGg09eyOmQ6t6zQ2sA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:7b:2d:15:00:1a:8e:22:65:03:32:e2:60:d5:36:e6:06:
         3d:96:3d:09:a7:8d:41:2f:f5:d5:9e:62:d2:1c:a8:78:d0:2d:
         d2:79:a1:49:69:fb:11:6e:bc:5c:67:07:61:e6:b2:47:a2:5c:
         79:c9:ec:36:0a:e9:54:0c:12:d8:0c:8f:20:ec:aa:8c:4b:4b:
         f8:83:3c:01:3c:53:0e:9a:58:9f:a2:80:a2:86:d9:a4:11:9e:
         96:38:a2:56:a8:38:86:53:00:1e:b6:4b:b5:7e:50:5a:a9:11:
         5f:ca:93:f8:b7:f4:9a:6a:96:7f:17:9d:86:fc:70:3e:da:b3:
         bc:a1:d9:6b:1f:7a:a9:a7:9e:d3:d5:5e:03:08:e0:bf:4c:e4:
         44:15:de:58:0d:0a:37:36:2f:5e:5b:dc:7e:46:b3:3d:5d:c0:
         f1:aa:71:5e:ba:17:73:e5:fe:fc:7f:f6:08:4e:21:46:7d:0f:
         2b:9a:62:1c:07:54:ca:2d:31:80:8f:22:a8:63:2f:a0:dc:d3:
         23:73:0d:63:8f:b4:47:79:04:a7:91:a4:77:9f:ad:85:8f:2a:
         76:66:9b:76:d6:ac:5c:52:cb:b6:61:23:9d:6d:db:5e:6f:b0:
         bd:44:2f:ad:24:2a:32:2e:62:e7:7d:82:95:47:bb:0f:56:53:
         32:ab:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:32 2025 by rpki-client