Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/6v6Dp2vA-7cQ3x8yjxjNwv4dmDc.roa
File:                     6v6Dp2vA-7cQ3x8yjxjNwv4dmDc.roa (raw, json)
Hash identifier:          ylb5LqynwN3csXWxOxk1It92Mjp21E0d8Z3Scv+Zwao=
Subject key identifier:   EA:FE:83:A7:6B:C0:FB:B7:10:DF:1F:32:8F:18:CD:C2:FE:1D:98:37
Certificate issuer:       /CN=cdd15c493f875da1969927c1b91c96e2ff95352c
Certificate serial:       0183324CAFE627F54A02BE96BFD8E3B57E53
Authority key identifier: CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/6v6Dp2vA-7cQ3x8yjxjNwv4dmDc.roa
Signing time:             Mon 12 Sep 2022 15:23:50 +0000
ROA not before:           Mon 12 Sep 2022 15:23:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59488
IP address blocks:        95.215.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:32:4c:af:e6:27:f5:4a:02:be:96:bf:d8:e3:b5:7e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd15c493f875da1969927c1b91c96e2ff95352c
        Validity
            Not Before: Sep 12 15:23:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eafe83a76bc0fbb710df1f328f18cdc2fe1d9837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:a8:d2:c2:1f:7e:88:88:3d:8d:72:07:d4:
                    a6:62:78:9e:b3:41:6b:aa:75:b5:12:bf:a1:b7:86:
                    d9:1c:56:70:ef:17:02:d1:6e:ed:eb:be:35:21:ca:
                    7b:a3:ce:be:49:05:b0:3c:cc:5c:ac:27:48:28:35:
                    ea:31:66:8a:3c:e8:d2:90:aa:00:29:12:bc:87:d7:
                    93:cd:e3:3f:bf:96:d2:cb:d3:3a:04:52:4a:db:c2:
                    2e:39:24:82:f6:c3:04:37:71:dd:c7:fa:5e:a8:10:
                    40:b0:e9:70:a3:ca:cd:12:26:53:fa:a7:99:df:44:
                    95:75:cd:fa:f2:31:4f:53:f7:38:c0:ff:8b:53:f4:
                    2f:83:02:2a:dd:dc:05:cb:ec:c7:26:69:90:4b:27:
                    c4:62:66:8e:41:d0:fa:82:2c:df:d6:06:06:c4:a8:
                    5b:fb:51:3a:5d:aa:fa:34:eb:0d:5d:9a:ed:dd:88:
                    e8:58:49:29:35:99:79:a0:27:9d:9c:17:f9:d7:28:
                    58:af:7d:6a:9c:cb:7e:39:56:c1:14:89:52:34:ee:
                    63:99:3b:81:73:e8:04:32:0d:e6:0d:79:e9:d0:08:
                    43:8f:38:0e:a1:76:9d:e5:05:ad:4b:63:5d:a9:f8:
                    d5:b5:26:da:b3:be:9c:8e:d0:ba:59:a8:07:72:a2:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FE:83:A7:6B:C0:FB:B7:10:DF:1F:32:8F:18:CD:C2:FE:1D:98:37
            X509v3 Authority Key Identifier:
                keyid:CD:D1:5C:49:3F:87:5D:A1:96:99:27:C1:B9:1C:96:E2:FF:95:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdFcST-HXaGWmSfBuRyW4v-VNSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/6v6Dp2vA-7cQ3x8yjxjNwv4dmDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eee0a3-02d8-4171-a47b-40944b6ac31b/1/zdFcST-HXaGWmSfBuRyW4v-VNSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.215.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3c:5f:2a:9f:42:3a:cf:e8:61:e9:63:3e:64:08:64:23:e3:
         58:d5:08:7f:0a:3e:1b:2d:81:eb:45:1c:85:ad:e4:89:b2:6d:
         a1:c3:14:91:e8:6c:75:02:ed:dc:f8:d7:cd:1f:fd:80:9e:7b:
         01:ba:ee:bd:49:2f:fa:d1:52:b1:30:04:9c:37:36:9c:f3:3b:
         11:14:f6:4d:60:4f:9d:ea:f0:5e:bc:dd:59:d9:27:cd:c7:f3:
         0a:48:bc:9e:cd:34:36:20:d8:ad:4b:80:85:33:18:87:6e:48:
         f7:56:b9:10:05:85:95:16:e4:a3:af:95:e4:f5:56:7a:d3:88:
         d2:80:55:6b:25:51:80:7f:43:05:4b:70:31:d6:fb:6c:7e:ac:
         6a:07:9e:4e:5e:ad:3e:97:fb:32:ab:41:6b:e0:53:b3:7b:0f:
         44:ec:7c:95:80:4b:a8:b3:57:b2:91:a7:b5:3d:fb:5b:61:9d:
         84:84:1d:e0:5c:8e:4a:7c:f1:48:4c:d0:ab:8a:15:1c:79:11:
         79:69:46:a6:22:55:01:fc:3b:67:fa:f0:73:9c:ae:ae:fd:24:
         97:ef:b0:ee:e7:8c:86:9c:b2:99:cd:3a:91:e5:0d:c9:8a:69:
         93:28:c9:3f:e8:2c:84:5b:f1:dc:ac:dd:d6:ff:2c:b2:ab:a3:
         4a:1b:cb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:45:13 2025 by rpki-client