Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/FEBV5ccVinwv8gwE95jss-pPrCM.roa
File:                     FEBV5ccVinwv8gwE95jss-pPrCM.roa (raw, json)
Hash identifier:          AIYp0ZhhhFdlTBMEaCKUWFMVjFifwvKvpQa4wAoGQ5o=
Subject key identifier:   14:40:55:E5:C7:15:8A:7C:2F:F2:0C:04:F7:98:EC:B3:EA:4F:AC:23
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       0194266BF3EAC6AAE1AEEA0FCF8A98335984
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/FEBV5ccVinwv8gwE95jss-pPrCM.roa
Signing time:             Thu 02 Jan 2025 09:49:56 +0000
ROA not before:           Thu 02 Jan 2025 09:49:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205748
IP address blocks:        178.16.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:f3:ea:c6:aa:e1:ae:ea:0f:cf:8a:98:33:59:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  2 09:49:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=144055e5c7158a7c2ff20c04f798ecb3ea4fac23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:30:29:31:f9:82:e9:bf:9a:e0:46:0b:a8:37:
                    cb:29:8b:06:f6:73:69:c6:e1:4d:7c:72:cc:0a:4a:
                    81:b7:ec:cd:2d:e9:40:96:57:be:69:b6:e3:d1:9d:
                    09:7f:2d:cc:27:36:d1:39:cd:f8:9e:19:d4:26:c7:
                    3e:ea:92:16:3d:5c:90:61:18:99:de:5c:5a:5c:85:
                    c4:01:cc:7f:07:5c:c7:4e:0f:f5:29:ec:e6:11:b2:
                    60:c4:db:3b:7e:f7:9c:b5:26:9f:11:17:2b:bb:57:
                    d1:03:9d:33:53:0d:8e:99:55:a9:27:2e:f9:82:0a:
                    69:8d:5b:b6:7f:5c:ef:a8:08:36:0b:04:58:d8:9e:
                    2f:15:f4:b0:3d:22:99:25:e2:fd:71:19:a3:55:c3:
                    57:f3:4d:9c:a5:b8:fa:01:be:a6:67:c2:45:af:b6:
                    03:3a:79:cb:cf:71:5f:05:9f:82:43:36:0c:3b:2d:
                    0b:66:67:f3:93:5d:82:96:95:bf:7f:52:48:eb:c6:
                    54:38:6a:0c:9f:d3:ac:cb:1f:07:34:f7:f9:ad:eb:
                    2c:4e:79:0c:68:8c:5b:00:eb:c3:8b:4e:62:d7:ba:
                    8d:49:fe:a6:0b:41:a7:f6:a3:f9:bc:52:27:bf:ac:
                    57:a8:83:c6:41:fa:f8:12:30:50:6e:fc:97:2c:02:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:55:E5:C7:15:8A:7C:2F:F2:0C:04:F7:98:EC:B3:EA:4F:AC:23
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/FEBV5ccVinwv8gwE95jss-pPrCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.16.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:95:80:9f:e6:d5:64:d8:43:5d:52:c7:84:0e:cc:ec:f7:
         23:e7:c3:61:7b:da:cc:c7:68:aa:f4:4a:93:6f:d5:72:5c:36:
         3a:4e:ac:c4:0a:cc:cf:03:8f:cb:a5:ad:e1:bc:aa:b2:5a:dd:
         a9:f5:f8:c2:a9:58:d1:64:8f:21:39:f2:4e:34:4d:63:36:94:
         18:8f:b8:69:3c:fa:2b:38:41:2e:62:f0:be:60:03:91:e7:70:
         b1:a0:7f:a5:2a:f8:de:c3:89:a3:af:2f:74:b3:98:47:92:a5:
         03:6c:13:52:ed:80:2d:f2:e7:f5:8f:47:e5:49:32:cc:1a:fc:
         28:53:3b:cc:62:1c:00:45:30:07:22:6b:03:81:c4:4e:47:12:
         1e:56:6f:76:50:d2:05:79:d0:a3:bc:2f:e6:ee:ad:9e:1e:2a:
         9d:e7:80:2a:88:03:6b:4f:55:5e:66:53:dc:64:68:df:5f:a1:
         e6:90:ba:14:da:88:6c:fd:98:5b:a7:3e:3d:4f:9d:46:c0:40:
         e1:b0:1f:57:7d:9c:77:3f:4c:91:62:81:f2:fa:2a:2a:d9:73:
         34:cb:34:a7:bc:87:bd:d9:83:c4:ec:a0:40:04:07:e9:c8:85:
         b9:fc:79:0f:90:8e:65:79:5a:5f:44:99:a3:fe:c1:d3:b9:d4:
         20:c2:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:08 2025 by rpki-client