Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/CoCdSP6A3DOgFrWGElZwDGT9nt0.roa
File:                     CoCdSP6A3DOgFrWGElZwDGT9nt0.roa (raw, json)
Hash identifier:          XaSs/nwJw9nL54+dNHtfCY1gS/sTnOtkwaSjVFXXOK0=
Subject key identifier:   0A:80:9D:48:FE:80:DC:33:A0:16:B5:86:12:56:70:0C:64:FD:9E:DD
Certificate issuer:       /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial:       0322F4B0
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/CoCdSP6A3DOgFrWGElZwDGT9nt0.roa
Signing time:             Tue 22 Mar 2022 15:52:42 +0000
ROA not before:           Tue 22 Mar 2022 15:52:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35830
IP address blocks:        193.151.188.0/24 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52622512 (0x322f4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
        Validity
            Not Before: Mar 22 15:52:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a809d48fe80dc33a016b5861256700c64fd9edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:8a:ac:9d:dc:81:d0:63:c5:38:70:d9:03:
                    34:28:eb:5a:db:a0:ab:4f:df:fd:e4:c5:55:58:1d:
                    49:50:a9:af:af:64:c3:f2:48:6f:c5:a9:e9:c6:2d:
                    27:5e:1d:5f:2a:47:98:f9:a1:7c:24:43:70:01:11:
                    34:69:62:35:d2:ee:b3:7a:cd:7a:92:f8:79:76:ab:
                    aa:e8:fc:d9:3e:fa:64:b1:41:9f:0e:a4:18:67:0e:
                    52:c1:83:25:46:12:e2:5f:cd:f1:66:3e:53:c0:c6:
                    d6:0d:3c:d9:9e:42:50:0f:48:56:ee:6d:0a:3e:6c:
                    c2:e5:91:6b:70:8b:3c:7c:22:e7:67:c2:7e:46:ed:
                    e7:50:45:42:73:f4:d6:75:0a:d8:a3:8e:b5:85:ef:
                    69:02:83:35:3d:40:ab:08:e8:0e:d1:02:14:9c:dc:
                    95:3f:f3:48:19:24:8b:cb:92:fe:6c:fb:99:32:76:
                    d1:cd:ff:64:40:aa:f4:da:6d:aa:87:61:88:ff:a1:
                    9a:83:93:cd:21:34:35:7c:03:0c:74:b9:26:1d:43:
                    09:b4:71:44:c7:82:ed:8a:71:95:4a:75:96:88:b1:
                    ca:09:c1:15:24:7f:7c:cd:f8:f1:64:bf:62:0c:fa:
                    62:15:eb:6b:87:83:dd:e1:5f:9f:6e:bc:bf:da:a0:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:80:9D:48:FE:80:DC:33:A0:16:B5:86:12:56:70:0C:64:FD:9E:DD
            X509v3 Authority Key Identifier:
                keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/CoCdSP6A3DOgFrWGElZwDGT9nt0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6b:16:51:92:f2:34:b5:9a:e9:a3:3e:13:c6:9b:30:ea:df:
         0d:be:0c:46:cb:6a:2a:21:fd:54:69:d6:de:c1:28:11:b6:47:
         05:8e:77:29:7d:13:e1:0d:65:6b:79:55:8d:1a:83:93:8c:ce:
         9b:0c:cf:ed:d0:d1:b8:8c:2f:6e:08:ac:20:19:d7:07:66:0e:
         10:55:08:4e:5e:3d:01:d3:ad:03:86:ff:d9:07:ab:99:a4:da:
         cd:91:a3:f6:f9:c0:48:35:56:8e:a8:84:80:5f:ef:87:89:46:
         1b:50:09:db:88:6d:8f:04:c6:84:cc:f0:25:a3:e3:63:01:43:
         43:18:69:28:27:74:b8:c7:7c:9c:c4:11:66:14:81:b7:49:e4:
         a1:0a:80:47:fe:8e:64:ef:b1:bd:b6:c6:67:ca:8e:7c:85:98:
         9c:3d:2f:8b:5c:5c:d8:d8:b8:3d:e2:24:0c:3f:41:06:05:31:
         31:45:bc:ca:12:73:8b:6e:a3:8b:1e:27:09:1b:18:e9:2c:dc:
         08:c5:95:c9:53:ca:e5:80:10:74:b5:c6:dc:b3:ba:1e:23:02:
         bf:c8:5b:a1:dc:2c:22:6c:d7:71:1f:4a:0f:ab:99:d5:50:82:
         39:b2:43:d1:e6:29:e8:72:eb:5d:f7:6a:43:df:57:80:f1:d7:
         2e:ba:73:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAyL0sDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZTc0NzQ4MWYyYzk4ZmJiNzBkY2E4ZDY1YzIzZGU0ZmNhMzc1ODNkMB4XDTIyMDMy
MjE1NTI0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGE4MDlkNDhmZTgw
ZGMzM2EwMTZiNTg2MTI1NjcwMGM2NGZkOWVkZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMeLiqyd3IHQY8U4cNkDNCjrWtugq0/f/eTFVVgdSVCpr69k
w/JIb8Wp6cYtJ14dXypHmPmhfCRDcAERNGliNdLus3rNepL4eXarquj82T76ZLFB
nw6kGGcOUsGDJUYS4l/N8WY+U8DG1g082Z5CUA9IVu5tCj5swuWRa3CLPHwi52fC
fkbt51BFQnP01nUK2KOOtYXvaQKDNT1AqwjoDtECFJzclT/zSBkki8uS/mz7mTJ2
0c3/ZECq9NptqodhiP+hmoOTzSE0NXwDDHS5Jh1DCbRxRMeC7YpxlUp1loixygnB
FSR/fM348WS/Ygz6YhXra4eD3eFfn268v9qgQVECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQKgJ1I/oDcM6AWtYYSVnAMZP2e3TAfBgNVHSMEGDAWgBSOdHSB8smPu3Dc
qNZcI95PyjdYPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2puUjBnZkxKajd0dzNLaldYQ1BlVDhvM1dEMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDkvNDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8x
L0NvQ2RTUDZBM0RPZ0ZyV0dFbFp3REdUOW50MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkv
NDBkYjZiLWRhODUtNGM5ZC1hOTQ4LTY1MjFkMzk1ZjEzMi8xL2puUjBnZkxKajd0
dzNLaldYQ1BlVDhvM1dEMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGXvDANBgkqhkiG9w0BAQsFAAOC
AQEAFmsWUZLyNLWa6aM+E8abMOrfDb4MRstqKiH9VGnW3sEoEbZHBY53KX0T4Q1l
a3lVjRqDk4zOmwzP7dDRuIwvbgisIBnXB2YOEFUITl49AdOtA4b/2QermaTazZGj
9vnASDVWjqiEgF/vh4lGG1AJ24htjwTGhMzwJaPjYwFDQxhpKCd0uMd8nMQRZhSB
t0nkoQqAR/6OZO+xvbbGZ8qOfIWYnD0vi1xc2Ni4PeIkDD9BBgUxMUW8yhJzi26j
ix4nCRsY6SzcCMWVyVPK5YAQdLXG3LO6HiMCv8hbodwsImzXcR9KD6uZ1VCCObJD
0eYp6HLrXfdqQ99XgPHXLrpzrQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:59:25 2025 by rpki-client