Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/eTC4v8rE72wJHLxYFaRFcFzxc_Y.roa
File:                     eTC4v8rE72wJHLxYFaRFcFzxc_Y.roa (raw, json)
Hash identifier:          3Q88mjbhOh0XhQMj5QZEbhrtEwP4+hLYZow4g7yuG7I=
Subject key identifier:   79:30:B8:BF:CA:C4:EF:6C:09:1C:BC:58:15:A4:45:70:5C:F1:73:F6
Certificate issuer:       /CN=e06025f61f0282732a15b4b92850ebcda4749585
Certificate serial:       A16670
Authority key identifier: E0:60:25:F6:1F:02:82:73:2A:15:B4:B9:28:50:EB:CD:A4:74:95:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GAl9h8CgnMqFbS5KFDrzaR0lYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/eTC4v8rE72wJHLxYFaRFcFzxc_Y.roa
Signing time:             Sat 01 Jan 2022 03:52:18 +0000
ROA not before:           Sat 01 Jan 2022 03:52:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        91.247.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10577520 (0xa16670)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06025f61f0282732a15b4b92850ebcda4749585
        Validity
            Not Before: Jan  1 03:52:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7930b8bfcac4ef6c091cbc5815a445705cf173f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:b6:13:f5:db:f6:b0:ed:83:66:09:03:8b:
                    c8:42:9d:ca:3d:d6:c1:c6:34:f4:ae:5b:33:b4:a0:
                    f2:51:10:c5:87:39:d6:71:20:99:96:63:2f:39:65:
                    e6:de:10:a0:c6:41:ee:4b:37:7c:bf:e2:12:01:d3:
                    57:d4:21:f2:dd:82:0f:31:d4:d0:b1:e6:24:ac:2e:
                    3d:0b:8f:2d:f6:14:50:a2:2d:1d:3f:2b:89:ff:7f:
                    1c:8f:bf:c0:c9:95:4b:c3:d3:74:7b:02:3b:93:37:
                    e2:75:91:a2:ee:79:f5:32:17:74:28:e0:85:cf:f0:
                    90:4a:71:04:0a:8b:98:04:61:49:ea:4d:72:71:da:
                    70:ea:ff:3c:94:28:a5:af:7d:41:e1:15:1f:fb:35:
                    d2:7b:6a:0f:97:c6:7f:43:14:db:f3:03:f2:6d:9f:
                    15:55:b5:79:ae:f7:46:4b:5a:b4:9c:3b:8c:bc:b8:
                    bd:6a:d8:ee:88:13:e4:a2:15:67:9d:79:30:7b:b5:
                    1f:06:73:3c:6f:9c:59:e9:50:0f:9c:ed:1e:84:23:
                    98:ea:9b:c7:a1:08:a2:88:d7:c3:c7:c8:01:ae:e8:
                    f5:c8:f2:2e:d8:1d:db:41:51:2b:23:77:9f:64:8b:
                    b2:8f:62:d4:a9:5f:2f:20:10:24:c0:5a:48:53:c5:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:B8:BF:CA:C4:EF:6C:09:1C:BC:58:15:A4:45:70:5C:F1:73:F6
            X509v3 Authority Key Identifier:
                keyid:E0:60:25:F6:1F:02:82:73:2A:15:B4:B9:28:50:EB:CD:A4:74:95:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GAl9h8CgnMqFbS5KFDrzaR0lYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/eTC4v8rE72wJHLxYFaRFcFzxc_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed8efc-d871-4093-b078-ce8c7761c0a7/1/4GAl9h8CgnMqFbS5KFDrzaR0lYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:11:de:1a:2f:17:ff:40:62:30:8c:13:57:64:4f:d7:fb:
         e5:82:0b:5b:68:20:8a:c6:94:c3:0c:08:33:de:b0:1e:6b:9d:
         21:cf:e6:78:2c:9d:72:fe:b1:5c:1f:80:f9:8d:a4:32:4f:8f:
         b1:bc:9d:3b:ac:2d:77:41:39:22:fc:ec:00:e7:ac:09:a1:24:
         06:58:a2:1c:a2:a8:94:be:b4:7c:c1:c8:e1:e8:77:e0:4d:59:
         de:57:bc:9e:bb:f3:a4:ff:85:52:6b:bf:98:01:40:dd:3b:24:
         56:d5:85:71:5d:82:55:c1:0a:d7:fa:97:a8:60:99:d8:69:f5:
         53:3b:b4:2e:53:9d:1b:ed:8a:2b:fa:b0:2d:40:62:6d:4a:4c:
         b3:d0:95:17:6e:1d:f5:58:23:04:c8:bc:13:b0:75:2d:74:00:
         74:35:d6:da:aa:58:0c:b0:ce:91:f2:2b:5b:da:cd:55:8c:7f:
         de:ac:62:cb:1e:c9:df:ea:20:a4:af:7e:97:13:cc:dc:55:70:
         a4:2e:3b:35:c2:f1:84:3b:32:4c:df:d4:f0:4f:8d:ed:2a:4d:
         08:89:90:70:40:a1:d6:53:d0:fd:ca:74:38:e0:cc:56:d0:21:
         c3:e2:52:10:69:02:44:18:c5:7c:37:1f:1c:96:d0:4f:d5:f4:
         44:d7:cb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:07 2025 by rpki-client