Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/eNd8Al7oDt-zwdw_Q9BcC1ZvoX8.roa
File:                     eNd8Al7oDt-zwdw_Q9BcC1ZvoX8.roa (raw, json)
Hash identifier:          ZUBhlCXLVuTiZXQ4+JQo2TLilfbvTwLGl29pYydY/jg=
Subject key identifier:   78:D7:7C:02:5E:E8:0E:DF:B3:C1:DC:3F:43:D0:5C:0B:56:6F:A1:7F
Certificate issuer:       /CN=142b3b8607c414d86934ce09e116fdbc1d1f7f28
Certificate serial:       018573037E78F61102679F2AD21097E187D6
Authority key identifier: 14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/eNd8Al7oDt-zwdw_Q9BcC1ZvoX8.roa
Signing time:             Mon 02 Jan 2023 15:04:46 +0000
ROA not before:           Mon 02 Jan 2023 15:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        193.141.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:03:7e:78:f6:11:02:67:9f:2a:d2:10:97:e1:87:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142b3b8607c414d86934ce09e116fdbc1d1f7f28
        Validity
            Not Before: Jan  2 15:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78d77c025ee80edfb3c1dc3f43d05c0b566fa17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:69:88:87:37:84:30:13:f1:cd:8c:d8:12:
                    04:13:c4:dc:5e:e1:55:45:bc:4a:f7:2a:08:c7:e6:
                    f8:8f:8e:8f:40:dc:30:87:14:6e:a6:1a:09:b0:7c:
                    73:07:70:dc:b2:6f:4b:61:47:81:9b:23:6f:88:87:
                    25:63:f3:d7:88:78:45:d5:af:27:f3:a8:4f:53:dd:
                    b6:4b:fe:4e:0c:41:3e:ed:9a:58:a2:ce:bc:da:90:
                    9c:2b:8f:65:95:71:2b:be:5d:b7:b3:35:77:17:f2:
                    ce:34:9c:e3:c8:26:da:67:de:4b:84:bf:26:40:fd:
                    c2:b7:54:d9:52:7b:36:34:42:76:7c:1f:e4:a8:fa:
                    cf:37:8c:4d:3a:12:91:28:09:70:c8:7a:a5:93:59:
                    1f:91:a0:14:59:1b:26:d8:4f:0e:85:cb:82:06:e6:
                    89:33:b4:7d:8c:91:00:a1:cf:33:6b:f5:0c:61:9f:
                    a2:cf:b1:3c:b6:e4:b6:34:ea:0d:1a:b2:99:4c:6a:
                    b7:23:f2:86:71:5c:99:4a:ce:2c:2d:91:b1:a0:42:
                    aa:48:c8:57:6d:31:1a:39:99:17:1b:2c:78:63:d1:
                    05:67:1a:b8:c5:22:3f:6b:89:22:4d:74:81:b5:b8:
                    01:0b:5f:cf:8e:e9:36:f1:47:e2:06:5d:98:52:47:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:7C:02:5E:E8:0E:DF:B3:C1:DC:3F:43:D0:5C:0B:56:6F:A1:7F
            X509v3 Authority Key Identifier:
                keyid:14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/eNd8Al7oDt-zwdw_Q9BcC1ZvoX8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.141.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:c7:b8:73:9e:23:4d:b6:44:6d:f9:f6:32:80:8a:77:e4:
         8a:fd:f9:86:8e:73:dd:44:e1:d3:e8:f0:58:5c:fa:d3:99:0a:
         e2:12:e1:0a:d7:35:d3:da:9f:b1:bc:20:77:0c:0e:5b:aa:01:
         04:7f:3f:ed:0e:41:9e:1e:b2:bc:68:63:83:90:48:9c:16:4e:
         ad:b2:47:7e:54:9a:1d:e3:09:40:6c:9b:a0:c7:7d:3d:1a:ab:
         71:70:54:a7:25:b7:79:43:e8:94:b3:1d:3a:cb:1e:85:90:b8:
         e4:e3:1a:f0:d3:36:57:16:be:38:d5:bc:49:a4:d6:6c:41:56:
         76:b7:c9:bc:87:e2:a4:9b:84:e5:72:82:8f:47:88:d2:e7:09:
         e4:21:4d:7c:3a:13:bc:49:83:8e:26:29:60:c2:11:f8:8b:db:
         d0:cc:48:07:ff:f3:5d:b1:f9:1e:9e:dc:8b:df:9c:f1:f6:43:
         14:bc:a3:d5:97:b4:38:8d:74:b3:41:3b:6c:19:7c:7c:b2:ef:
         54:2a:91:31:23:e2:51:86:7c:80:86:de:ad:ca:76:dc:3e:09:
         f6:43:14:35:a5:9d:5e:1d:0b:c7:5d:1a:73:b2:38:52:69:95:
         a0:08:10:90:72:b1:2c:72:a7:9f:72:50:ee:ce:33:df:2a:e8:
         5f:39:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:28 2025 by rpki-client