Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/92158a-d13c-4418-8663-9318d216bc37/1/mwx8xu_TKcG-fK7P04jW-4gVuJA.roa
File:                     mwx8xu_TKcG-fK7P04jW-4gVuJA.roa (raw, json)
Hash identifier:          LShTlXyVXYKX6WIiAmKBXJsSdM6UhULXqQKHlfaj9mM=
Subject key identifier:   9B:0C:7C:C6:EF:D3:29:C1:BE:7C:AE:CF:D3:88:D6:FB:88:15:B8:90
Certificate issuer:       /CN=9c02de7d4d8aff150104f90aacee958fd07207f8
Certificate serial:       010C5E16
Authority key identifier: 9C:02:DE:7D:4D:8A:FF:15:01:04:F9:0A:AC:EE:95:8F:D0:72:07:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nALefU2K_xUBBPkKrO6Vj9ByB_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/92158a-d13c-4418-8663-9318d216bc37/1/mwx8xu_TKcG-fK7P04jW-4gVuJA.roa
Signing time:             Sat 01 Jan 2022 12:06:12 +0000
ROA not before:           Sat 01 Jan 2022 12:06:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212728
IP address blocks:        194.156.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17587734 (0x10c5e16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c02de7d4d8aff150104f90aacee958fd07207f8
        Validity
            Not Before: Jan  1 12:06:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b0c7cc6efd329c1be7caecfd388d6fb8815b890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:70:0e:a5:4b:fc:39:1a:c8:9b:ca:b5:f6:
                    6c:75:6c:cf:79:e2:83:73:4d:54:18:31:2b:e6:b9:
                    63:7b:06:ba:fd:36:fc:d9:e9:fd:00:29:85:a4:94:
                    8b:2c:d4:9f:0a:84:ae:f6:d2:59:27:07:1a:83:d7:
                    e1:da:72:3e:37:f6:4a:ce:2a:aa:90:49:ac:60:bf:
                    84:3c:24:40:88:3c:f2:6b:ae:bc:26:b6:58:aa:ff:
                    e8:14:c5:c0:8b:25:14:1f:c6:66:d4:25:31:e8:62:
                    d9:3d:91:45:de:f3:89:22:34:9b:88:cd:32:22:e7:
                    07:1c:54:09:e1:2b:33:6f:63:7f:bc:0b:22:18:69:
                    2e:35:ca:4c:da:bf:2c:2f:69:c3:09:1b:71:78:1c:
                    82:e4:ae:e5:2d:ea:21:20:60:54:59:6b:f6:cf:09:
                    6e:32:17:42:f2:d8:f9:2c:3d:d5:0e:7c:9a:61:f3:
                    b5:0d:c5:5c:7e:58:42:dc:1e:3d:4c:6a:09:54:14:
                    71:d8:fe:58:f7:22:4b:f4:bb:4d:f2:e4:e6:90:70:
                    f7:29:49:33:70:aa:38:2a:f0:57:16:38:55:ab:86:
                    1c:f7:cd:c0:1a:39:e2:65:1c:59:24:a5:11:dc:f9:
                    27:43:15:31:c9:dc:d1:db:8a:c5:c5:09:24:c7:c7:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:7C:C6:EF:D3:29:C1:BE:7C:AE:CF:D3:88:D6:FB:88:15:B8:90
            X509v3 Authority Key Identifier:
                keyid:9C:02:DE:7D:4D:8A:FF:15:01:04:F9:0A:AC:EE:95:8F:D0:72:07:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nALefU2K_xUBBPkKrO6Vj9ByB_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/92158a-d13c-4418-8663-9318d216bc37/1/mwx8xu_TKcG-fK7P04jW-4gVuJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/92158a-d13c-4418-8663-9318d216bc37/1/nALefU2K_xUBBPkKrO6Vj9ByB_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:1f:61:94:5f:65:b8:b9:23:35:d0:20:99:f1:09:10:13:46:
         fa:39:78:63:82:74:00:9b:16:54:7c:ba:31:b7:ba:fe:cb:89:
         8c:01:77:05:cf:7b:4b:50:9c:99:91:30:53:ae:c7:be:12:24:
         f9:38:4d:3e:92:b6:70:8f:a8:91:23:5e:81:f2:5b:1f:7f:fe:
         61:6a:5d:0d:d5:c4:08:06:a1:52:f3:40:54:0a:40:1b:b6:35:
         2b:ab:d9:d3:ca:ca:e2:41:9c:ca:04:9b:1a:90:5a:b4:8f:77:
         32:27:c4:4b:8a:a6:8d:8d:80:d5:a4:0c:c2:a9:57:fd:2e:36:
         44:ed:8b:2a:ff:ed:96:d4:9b:d4:f1:af:55:6d:66:ac:ad:cb:
         f1:28:67:b2:23:b2:bf:4b:e0:d4:9d:fd:6d:2d:97:a7:98:5b:
         3f:0e:a8:d7:b2:20:6d:a7:b4:0e:8e:65:7e:52:0c:a5:70:61:
         16:6b:a2:d9:d5:d3:0e:92:5e:5b:61:92:c4:cd:f4:10:c2:6d:
         12:13:be:55:a4:f7:a6:5f:7d:e4:98:99:79:10:eb:6e:aa:2c:
         51:e3:e6:8e:ee:fc:b6:30:1a:43:7f:63:33:7c:d1:69:a7:77:
         c1:d2:74:db:39:92:b5:30:1c:04:ae:a5:16:21:1d:5c:a5:27:
         f5:c8:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:28:01 2025 by rpki-client