Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/L_zNGCBGEDj9N3rMQTMrFIV782w.roa
File:                     L_zNGCBGEDj9N3rMQTMrFIV782w.roa (raw, json)
Hash identifier:          iEnQGxNkOXhcD3/Y51bb+xH867h+cusqokd1iOCi7KQ=
Subject key identifier:   2F:FC:CD:18:20:46:10:38:FD:37:7A:CC:41:33:2B:14:85:7B:F3:6C
Certificate issuer:       /CN=170ef71a422a2f0fe91160579a4050618d8baf10
Certificate serial:       035E3973
Authority key identifier: 17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/L_zNGCBGEDj9N3rMQTMrFIV782w.roa
Signing time:             Sat 01 Jan 2022 05:54:36 +0000
ROA not before:           Sat 01 Jan 2022 05:54:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206150
IP address blocks:        46.244.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56506739 (0x35e3973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170ef71a422a2f0fe91160579a4050618d8baf10
        Validity
            Not Before: Jan  1 05:54:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2ffccd1820461038fd377acc41332b14857bf36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:8b:f1:20:ff:3a:4d:21:6a:3a:89:9d:0b:
                    cc:40:2a:31:bc:d0:c8:a5:25:86:41:81:37:b8:06:
                    b0:44:82:57:05:47:5a:65:46:57:ad:d2:30:8b:c3:
                    56:1f:b3:b0:73:98:17:23:2a:f0:8e:d3:e5:e1:16:
                    21:51:fc:0d:aa:59:1a:80:39:75:17:19:04:e2:db:
                    d2:85:86:0f:7b:6d:3c:30:e5:57:2f:41:fb:fd:f5:
                    c3:87:f9:40:17:16:9f:4f:13:13:8f:ef:f2:42:20:
                    00:ff:c4:78:76:86:a4:d1:c6:16:bf:ba:59:06:1e:
                    0e:4d:63:52:fc:17:7a:54:44:3d:b0:e7:28:31:a9:
                    a7:b5:61:06:6d:51:9b:34:21:a7:cd:9a:0d:5a:47:
                    ab:7b:f2:36:93:f2:a0:b2:ac:48:5e:8c:d8:8b:38:
                    e5:23:38:b2:ba:54:9a:80:3c:07:ff:f4:b1:5b:a3:
                    23:9c:16:24:d4:c8:ac:f0:e9:60:03:6f:0e:73:b1:
                    36:e2:60:dc:59:95:c8:96:a0:b1:7c:4f:b2:dc:28:
                    ce:70:3e:59:f4:e9:a0:64:82:20:d5:1b:b1:fe:a0:
                    fb:b5:8c:88:91:b4:dc:97:be:59:67:45:bc:c3:b8:
                    6c:27:0a:9b:55:c6:be:31:57:61:45:bc:b2:1a:36:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FC:CD:18:20:46:10:38:FD:37:7A:CC:41:33:2B:14:85:7B:F3:6C
            X509v3 Authority Key Identifier:
                keyid:17:0E:F7:1A:42:2A:2F:0F:E9:11:60:57:9A:40:50:61:8D:8B:AF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fw73GkIqLw_pEWBXmkBQYY2LrxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/L_zNGCBGEDj9N3rMQTMrFIV782w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e5f7e9-80f9-4317-b21e-8336fec488f3/1/Fw73GkIqLw_pEWBXmkBQYY2LrxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.244.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:87:9d:5d:af:ec:b3:da:06:de:d6:cf:21:cc:2c:1d:b7:
         47:f1:72:d8:f7:60:75:d3:37:42:94:3f:da:06:ce:b5:82:c6:
         26:e9:21:ca:11:67:c2:aa:5d:62:bc:e7:7d:87:9d:1a:d1:35:
         6b:89:59:bb:d9:8c:e0:8a:80:36:8a:59:2e:66:6b:33:a9:2e:
         fc:cc:cd:a4:ae:26:5a:4a:6c:73:3d:9e:c1:2d:54:00:ce:ba:
         45:44:65:9a:14:57:4f:d4:7a:59:68:e4:da:a3:99:65:ce:aa:
         38:ae:72:3f:7d:60:ef:d6:da:ce:6a:81:bb:2d:9a:b9:3c:09:
         20:8f:56:7b:79:d3:5f:b9:64:23:f0:04:fd:56:be:dd:e8:e1:
         96:64:73:95:7d:94:fd:44:d6:45:0c:d8:42:1c:a7:d0:b3:58:
         82:ad:ca:61:dc:18:f3:69:95:18:3c:12:9c:0e:6e:44:f6:5a:
         40:f2:c9:01:c8:9a:80:4b:b4:8d:ca:fc:c0:4c:b3:8a:2e:4d:
         85:7f:89:f1:95:24:7c:ef:89:18:cb:99:3f:df:80:b5:f8:ed:
         f1:0e:8d:ff:2d:68:26:96:88:f6:f4:4a:9e:da:c7:d0:2f:61:
         d2:06:44:5c:ff:9f:48:e6:7f:0e:3f:09:73:a4:68:44:d3:ca:
         ca:1c:1c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:02 2025 by rpki-client