Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/9gs7rHaBGImzChR5ZEMZn0-zzE4.roa
File:                     9gs7rHaBGImzChR5ZEMZn0-zzE4.roa (raw, json)
Hash identifier:          Owirfsoyw8cGS7jCQa5TzSi2avtpTyfHlJiCu+JqnzA=
Subject key identifier:   F6:0B:3B:AC:76:81:18:89:B3:0A:14:79:64:43:19:9F:4F:B3:CC:4E
Certificate issuer:       /CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Certificate serial:       E1BAB7
Authority key identifier: 73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/9gs7rHaBGImzChR5ZEMZn0-zzE4.roa
Signing time:             Sat 01 Jan 2022 07:59:05 +0000
ROA not before:           Sat 01 Jan 2022 07:59:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        37.72.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14793399 (0xe1bab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
        Validity
            Not Before: Jan  1 07:59:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f60b3bac76811889b30a14796443199f4fb3cc4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:9c:d2:65:bf:c7:32:d1:67:dc:79:bd:ed:
                    33:f3:84:9a:fd:58:a3:ee:d2:8f:07:1c:b9:05:20:
                    71:35:0a:90:b6:dd:98:3a:f4:2a:fe:bd:13:0b:9e:
                    32:b3:4e:7a:77:8f:f2:04:0d:43:62:7a:82:0e:90:
                    ec:e1:2c:81:a8:44:52:1a:ab:60:62:bb:15:c3:61:
                    48:28:e5:66:06:7f:57:b5:99:27:6c:af:91:76:c6:
                    97:d0:4e:bd:b2:d2:f3:e1:e9:de:bc:14:1e:ab:5a:
                    ad:43:c0:a5:6d:18:24:62:a8:51:e3:3e:3a:b8:e7:
                    a3:9b:7e:8f:6a:31:cf:5b:71:cc:ac:f3:83:60:7a:
                    1d:fd:33:66:7d:aa:0e:68:ca:41:8e:de:38:a2:13:
                    c3:6c:6c:6f:b4:0c:43:dd:e4:6e:68:1b:b9:a8:58:
                    66:03:7f:0b:08:fd:fb:43:41:c9:be:ce:9b:2f:d6:
                    0b:31:ea:21:b5:58:47:da:d0:90:d8:de:fa:e4:aa:
                    ae:40:38:cd:3a:ad:67:94:4b:39:33:ca:e0:74:e6:
                    38:69:4b:90:cd:c7:6f:fc:ef:83:74:02:d8:56:be:
                    1a:4b:d9:ac:0f:e2:48:72:50:91:66:36:a1:e6:05:
                    14:63:02:e0:07:18:f4:fd:f9:62:50:4c:95:d6:52:
                    33:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0B:3B:AC:76:81:18:89:B3:0A:14:79:64:43:19:9F:4F:B3:CC:4E
            X509v3 Authority Key Identifier:
                keyid:73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/9gs7rHaBGImzChR5ZEMZn0-zzE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:2a:47:9b:00:b0:db:64:9d:af:0b:21:c1:29:00:81:af:ba:
         4b:0c:f8:8d:9b:38:ae:ab:08:b6:53:f4:ab:84:bf:ec:05:5e:
         76:b1:07:5f:48:24:c4:94:18:8f:b8:01:3a:e4:60:ca:cf:27:
         0f:c2:ea:1d:89:d9:bf:07:2d:52:3a:25:3c:6b:ef:77:a0:2d:
         2e:c8:d5:ba:81:6f:82:64:44:8c:df:e1:30:0a:ec:c7:57:51:
         8d:de:76:92:dd:b0:ed:e7:c0:68:ea:38:6e:bf:ce:82:6e:28:
         f7:71:fb:48:06:bf:8a:71:e7:85:81:b4:1b:6b:b5:4d:06:12:
         89:fa:c6:a5:ed:c3:d3:c4:95:44:3a:6c:2d:34:bf:33:1d:74:
         55:c4:e6:5b:55:99:eb:23:cc:66:cc:75:a5:e0:f5:25:93:16:
         37:05:c2:63:5c:c8:88:0a:5b:d9:4d:38:d0:03:25:c9:5f:ee:
         cc:ec:66:24:79:a8:8b:9e:5b:fa:ad:0a:ce:50:4e:fd:60:41:
         d6:98:ea:f7:8a:91:52:da:e6:5c:59:58:12:1e:df:7f:5c:b9:
         4d:13:ed:ef:f9:d2:29:50:e3:ad:1b:ec:a1:bc:89:c6:86:10:
         54:3a:96:49:81:6d:87:ba:45:b5:11:9e:fe:a5:63:6a:9e:47:
         5d:53:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:55:35 2025 by rpki-client