Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/79wn4Fvz5ULhS_tv2DtnlwTvSxc.roa
File:                     79wn4Fvz5ULhS_tv2DtnlwTvSxc.roa (raw, json)
Hash identifier:          vSdR9QazplkKwjn6SkWFxErQ3u9rdlrmihyEm9nP38s=
Subject key identifier:   EF:DC:27:E0:5B:F3:E5:42:E1:4B:FB:6F:D8:3B:67:97:04:EF:4B:17
Certificate issuer:       /CN=c79078eb7e94e74c7a621c88593d6b7208106f2e
Certificate serial:       07B2EB38
Authority key identifier: C7:90:78:EB:7E:94:E7:4C:7A:62:1C:88:59:3D:6B:72:08:10:6F:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5B4636U50x6YhyIWT1rcggQby4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/79wn4Fvz5ULhS_tv2DtnlwTvSxc.roa
Signing time:             Thu 31 Mar 2022 15:11:50 +0000
ROA not before:           Thu 31 Mar 2022 15:11:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57335
IP address blocks:        45.154.218.0/24 maxlen: 24
                          45.154.216.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129166136 (0x7b2eb38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79078eb7e94e74c7a621c88593d6b7208106f2e
        Validity
            Not Before: Mar 31 15:11:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efdc27e05bf3e542e14bfb6fd83b679704ef4b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:54:80:f1:91:44:18:d3:98:fa:53:bf:24:
                    a2:1a:53:b1:28:aa:7f:0e:4d:53:36:91:d1:67:f8:
                    a8:58:25:17:4e:d3:50:fc:d5:0a:fa:07:0a:7a:03:
                    af:7e:90:7b:f6:44:38:a6:fd:48:aa:42:2a:09:a3:
                    32:c6:cb:79:81:1f:b0:4d:4e:ae:8d:83:64:4b:1e:
                    32:dd:eb:be:3d:e0:8a:c8:7b:ab:d3:48:27:3c:87:
                    4f:e2:6a:6d:c0:6f:86:c4:4c:71:07:f2:38:90:51:
                    1a:20:78:90:b6:2e:18:46:47:da:54:95:9b:ee:fd:
                    e4:bc:cd:9e:51:8f:99:14:91:53:3c:07:3d:4c:47:
                    c2:57:1c:ff:1d:d1:88:25:d3:d7:8c:1e:f7:61:cc:
                    ba:df:18:dc:c8:ba:9a:4d:ee:0f:37:10:2c:18:dc:
                    93:7d:6f:c4:56:b8:49:be:8e:81:d0:ee:3a:97:f8:
                    4c:78:cf:c8:ed:ff:18:49:d8:9c:d9:b6:9b:e1:39:
                    87:4f:9d:0e:a3:ca:75:cf:6d:96:4e:a0:f0:d8:72:
                    3e:0a:41:54:77:d6:e7:5d:80:05:8e:30:e9:57:50:
                    2b:f8:8f:b2:8e:36:3c:82:d6:8b:1a:f0:25:f9:ec:
                    04:b4:4d:6c:5e:0e:c2:ee:ac:29:1f:b7:c4:87:0d:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:27:E0:5B:F3:E5:42:E1:4B:FB:6F:D8:3B:67:97:04:EF:4B:17
            X509v3 Authority Key Identifier:
                keyid:C7:90:78:EB:7E:94:E7:4C:7A:62:1C:88:59:3D:6B:72:08:10:6F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5B4636U50x6YhyIWT1rcggQby4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/79wn4Fvz5ULhS_tv2DtnlwTvSxc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f1fd1c-b91e-43d3-9dfb-46a5d61b2a0e/1/x5B4636U50x6YhyIWT1rcggQby4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.216.0-45.154.218.255

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:b5:44:f7:7d:88:2b:57:60:c3:fb:84:9f:1f:7e:f4:6d:
         2a:cc:7c:d0:98:6a:af:15:98:0b:b3:d4:4a:2e:60:06:ca:ee:
         3c:56:25:b6:10:d1:a1:2e:68:2f:f8:d7:36:34:00:2a:e6:50:
         d1:6d:47:5e:56:9e:57:d2:8e:d6:ac:d8:70:2c:58:e7:d1:12:
         23:cf:28:38:54:ef:21:c9:e8:2e:70:6c:eb:4e:95:c3:4e:9b:
         f8:71:53:d8:20:65:76:04:87:c5:aa:05:e0:ee:0d:d8:a7:0d:
         b6:16:71:a6:5a:74:c2:ce:12:91:4d:76:02:eb:51:2d:03:38:
         e9:15:a2:5b:88:26:60:4c:0f:9b:e9:ed:c6:03:19:49:ec:99:
         bf:bd:af:fd:0c:dc:05:e9:d9:ae:b1:19:23:13:91:6c:2c:6c:
         a8:01:82:50:26:a3:d6:cf:cf:32:a9:4c:ee:8b:b3:ea:75:6e:
         4e:0e:f3:79:7c:0e:7b:fc:5f:ea:88:22:22:16:15:80:3a:2d:
         67:cc:99:ff:9c:1c:a1:28:5e:11:d6:a2:a4:ac:0f:be:40:b1:
         d5:16:c5:aa:91:2a:62:ff:bd:2f:55:ec:89:f0:1a:73:1c:f9:
         48:32:45:28:a3:27:86:7e:38:22:9a:19:7b:fc:14:8b:7e:83:
         93:f1:23:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:28 2025 by rpki-client