Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/wceKI_eZH5jhVCu0rbdc2se-08Q.roa
File:                     wceKI_eZH5jhVCu0rbdc2se-08Q.roa (raw, json)
Hash identifier:          RwgHjzIP0AdJ3RbU68CUSIM2Obca8zDMRzqFAvZwPuM=
Subject key identifier:   C1:C7:8A:23:F7:99:1F:98:E1:54:2B:B4:AD:B7:5C:DA:C7:BE:D3:C4
Certificate issuer:       /CN=c5483453041593075038881b8d5df31495d942b4
Certificate serial:       018658DF93DBA62B1717F0163529CF96C7C8
Authority key identifier: C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/wceKI_eZH5jhVCu0rbdc2se-08Q.roa
Signing time:             Thu 16 Feb 2023 06:18:12 +0000
ROA not before:           Thu 16 Feb 2023 06:18:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142430
IP address blocks:        178.22.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:58:df:93:db:a6:2b:17:17:f0:16:35:29:cf:96:c7:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5483453041593075038881b8d5df31495d942b4
        Validity
            Not Before: Feb 16 06:18:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1c78a23f7991f98e1542bb4adb75cdac7bed3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:18:d2:85:e4:e2:d0:df:ca:d2:78:5b:08:
                    ec:51:44:13:be:79:68:c8:64:6e:5c:98:41:a3:1b:
                    b9:cf:33:05:6d:56:99:52:3d:f2:8f:a3:9c:39:6f:
                    96:07:a6:8e:ff:40:e4:df:f5:02:8d:ad:ef:74:33:
                    d4:43:19:fa:64:6b:58:e9:44:45:5f:e1:3e:19:37:
                    bb:bb:df:b0:2d:19:4c:6a:57:54:c4:54:28:d8:1b:
                    e8:4b:96:bb:4d:dd:0a:39:a5:bb:7a:5a:c1:c8:5f:
                    d9:ea:59:94:e6:2b:fd:c4:a8:d7:89:a5:17:f1:8d:
                    12:38:b1:a2:a9:96:b8:a4:ab:9d:51:40:0c:a9:36:
                    a8:4d:96:6a:f1:10:66:15:a2:87:d7:eb:b3:6a:98:
                    fd:19:9f:8d:95:e3:84:ae:89:24:81:d3:66:57:0f:
                    af:82:f7:41:e7:f1:11:aa:1a:39:8d:cf:78:fd:d7:
                    1a:fd:17:ed:72:2e:03:2f:30:3b:35:8e:28:09:d7:
                    33:41:e1:a8:ad:36:8c:69:e3:b3:96:88:a4:3c:63:
                    90:a0:fe:62:5c:fa:db:bb:7c:e8:09:94:c5:6d:0f:
                    c4:2c:68:47:56:0b:06:ec:72:22:10:f9:74:ab:41:
                    90:3a:3b:c7:bc:58:ed:6b:1a:8c:d6:14:cf:ae:90:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C7:8A:23:F7:99:1F:98:E1:54:2B:B4:AD:B7:5C:DA:C7:BE:D3:C4
            X509v3 Authority Key Identifier:
                keyid:C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/wceKI_eZH5jhVCu0rbdc2se-08Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:75:49:4f:42:59:d2:40:d1:e9:05:6d:11:d5:98:b5:2c:
         80:65:71:4e:e3:db:ce:d6:78:c7:0f:77:80:17:75:66:49:9c:
         e7:0d:c6:1e:1a:aa:74:85:99:49:66:68:60:af:fd:c0:31:26:
         8b:2e:45:58:90:7c:5b:68:16:59:56:16:9d:e0:32:c9:03:45:
         e0:3c:59:d0:32:e4:34:d3:dd:93:f0:e5:ff:db:b0:11:b3:a2:
         bd:60:ad:7b:50:3f:cc:42:ea:79:ba:33:cf:5b:31:a7:5e:bb:
         cf:34:81:ce:05:16:42:da:aa:64:ce:25:eb:c6:27:1b:b0:b9:
         32:aa:22:d0:39:c6:96:50:58:fd:d5:21:c7:80:13:c3:3f:38:
         99:8f:89:c2:4e:e1:ed:ac:76:a7:6f:19:fc:a2:a5:25:7a:83:
         af:7e:93:0f:07:e0:3b:7e:02:f5:8e:71:ba:00:4e:73:7a:78:
         8a:87:ee:94:de:f1:d7:ce:29:87:d8:bb:92:37:f8:2f:ce:bd:
         8b:02:4a:af:3a:7e:56:4f:ba:d2:7d:5e:ed:96:02:cb:ba:5d:
         72:df:d6:5d:d6:4a:94:9c:8c:2f:50:07:35:ee:1f:21:87:8c:
         8b:80:d8:73:f2:22:a6:4f:f4:8f:89:47:5e:02:23:11:fd:3a:
         a3:34:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:54 2025 by rpki-client