Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/ph6R7xRmUzpnSUy0mNPPZUDwtUo.roa
File:                     ph6R7xRmUzpnSUy0mNPPZUDwtUo.roa (raw, json)
Hash identifier:          vkiqZpbyMwZ579aH+VWFPyd/2UlkHrQx5Abdp/OWMTM=
Subject key identifier:   A6:1E:91:EF:14:66:53:3A:67:49:4C:B4:98:D3:CF:65:40:F0:B5:4A
Certificate issuer:       /CN=7f052b8d34abd1a6ac7d6b838b5ff041ebc3d4a9
Certificate serial:       1DC137
Authority key identifier: 7F:05:2B:8D:34:AB:D1:A6:AC:7D:6B:83:8B:5F:F0:41:EB:C3:D4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwUrjTSr0aasfWuDi1_wQevD1Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/ph6R7xRmUzpnSUy0mNPPZUDwtUo.roa
Signing time:             Sat 01 Jan 2022 01:52:01 +0000
ROA not before:           Sat 01 Jan 2022 01:52:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200973
IP address blocks:        185.90.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950007 (0x1dc137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f052b8d34abd1a6ac7d6b838b5ff041ebc3d4a9
        Validity
            Not Before: Jan  1 01:52:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a61e91ef1466533a67494cb498d3cf6540f0b54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:a6:d7:34:3b:7b:f7:af:99:c2:40:66:1c:
                    cf:9f:63:ed:03:4c:c5:60:be:17:ff:19:94:57:ba:
                    74:75:a2:27:72:06:b9:86:e1:7f:c0:21:cf:93:c2:
                    85:01:c6:8d:bd:05:9f:5e:6f:f4:db:79:1c:eb:84:
                    32:74:94:ef:81:70:ac:29:ef:d0:36:46:23:4e:15:
                    b8:10:61:7c:5a:7a:df:1c:b9:a6:d2:26:aa:3c:3a:
                    40:00:df:9d:45:de:f4:c1:62:54:46:b6:73:2b:d2:
                    2f:4d:0f:0a:6a:24:51:58:4a:72:c6:a0:61:a8:a0:
                    7c:99:36:30:ed:d3:48:90:bf:cc:fe:e6:ea:8b:18:
                    1d:06:96:dd:7d:c4:6c:59:59:a0:07:ed:89:bb:1c:
                    28:64:1f:7b:66:b6:a4:e0:53:b1:40:58:03:e0:25:
                    22:d2:1d:65:53:bb:ca:8c:c5:7a:87:51:a4:07:c3:
                    c0:49:69:88:93:8a:4c:ee:bc:4f:fd:1c:4f:2a:e5:
                    48:de:1f:31:91:5e:47:8e:63:f1:f8:7c:f5:dc:10:
                    5f:4d:94:ef:2a:30:4f:8d:18:e2:ad:0b:d9:2a:a2:
                    ef:83:e5:94:0b:99:49:34:15:de:02:c2:ac:5a:ce:
                    a4:16:85:17:84:1e:0c:69:24:23:31:b7:ef:18:c4:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1E:91:EF:14:66:53:3A:67:49:4C:B4:98:D3:CF:65:40:F0:B5:4A
            X509v3 Authority Key Identifier:
                keyid:7F:05:2B:8D:34:AB:D1:A6:AC:7D:6B:83:8B:5F:F0:41:EB:C3:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwUrjTSr0aasfWuDi1_wQevD1Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/ph6R7xRmUzpnSUy0mNPPZUDwtUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/127292-2be7-4e24-b26b-fa30dd19d02a/1/fwUrjTSr0aasfWuDi1_wQevD1Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a2:16:bc:96:5a:86:a2:c4:d9:41:0d:e5:29:bf:f6:28:2c:
         fb:b7:41:d2:ca:8b:46:f1:0a:ef:1e:4c:15:6f:42:b8:b0:e5:
         30:ea:9e:85:64:70:02:43:39:08:4c:7d:68:ea:05:9f:45:39:
         a9:81:a7:b5:60:98:90:6c:77:dd:b2:e6:68:13:7d:84:9c:54:
         68:16:a4:0d:4b:14:0f:81:1e:7f:37:f5:56:8d:43:67:06:d3:
         20:79:4d:30:68:dd:37:fe:09:72:46:0e:ce:ea:d5:58:85:1f:
         af:e7:33:cf:51:08:81:cc:b3:64:66:a9:5a:37:95:5b:25:b4:
         b3:f9:be:eb:8a:32:eb:b8:2a:e3:21:c9:a2:e4:c4:44:c8:e2:
         43:b4:78:08:7b:89:2f:62:15:4c:f6:2d:20:47:17:3c:61:d7:
         b9:48:d7:f1:54:67:97:16:58:c8:d1:33:b0:f0:86:43:bc:5e:
         53:a6:7e:d7:14:2d:c2:d9:98:f5:cb:49:4a:ad:bf:57:5e:df:
         05:fe:e9:c7:2f:b6:d4:f2:bc:16:db:5b:94:77:12:49:b6:db:
         fe:5f:7b:9f:cf:b5:1c:e0:2d:d3:b3:25:8b:3b:9a:c9:41:31:
         ef:ba:42:cb:e7:c4:80:a7:b4:a5:70:d7:8c:8f:e7:4a:94:c6:
         b9:96:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:18 2025 by rpki-client