Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/ZP5tNM3IwV_1Kds9VuoXUQkzgg0.roa
File:                     ZP5tNM3IwV_1Kds9VuoXUQkzgg0.roa (raw, json)
Hash identifier:          VXUHVSQ9ROtaJPuLpybRY8wyn8pZqLYsg4MgVKlzpdk=
Subject key identifier:   64:FE:6D:34:CD:C8:C1:5F:F5:29:DB:3D:56:EA:17:51:09:33:82:0D
Certificate issuer:       /CN=098547627a2b2dea6d080af231430be8a8e69740
Certificate serial:       554975
Authority key identifier: 09:85:47:62:7A:2B:2D:EA:6D:08:0A:F2:31:43:0B:E8:A8:E6:97:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYVHYnorLeptCAryMUML6Kjml0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/ZP5tNM3IwV_1Kds9VuoXUQkzgg0.roa
Signing time:             Sat 01 Jan 2022 01:51:21 +0000
ROA not before:           Sat 01 Jan 2022 01:51:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        146.255.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5589365 (0x554975)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098547627a2b2dea6d080af231430be8a8e69740
        Validity
            Not Before: Jan  1 01:51:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=64fe6d34cdc8c15ff529db3d56ea17510933820d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:1a:a5:aa:b7:ca:5c:96:83:d9:c7:25:3f:
                    fc:94:63:59:e0:d7:73:ab:0b:20:0d:2a:64:89:06:
                    5f:e5:63:3e:b0:f0:a8:3b:48:0c:74:b8:01:8b:51:
                    95:d6:95:63:21:c7:01:05:34:6f:5d:1b:a2:ff:f2:
                    e1:b2:34:bf:bc:b4:b4:b0:47:45:cd:e8:7d:a8:b5:
                    0d:41:8e:25:d6:58:43:33:03:4c:a9:19:62:4e:2b:
                    ed:bf:a0:7e:4c:1c:63:b7:ce:bb:cc:0a:b7:55:bb:
                    dc:89:b6:8c:97:bc:34:6b:69:b8:d3:78:53:16:ed:
                    e2:92:68:e3:8b:d0:ba:90:8e:74:a5:58:ff:c5:2d:
                    2f:74:69:cf:95:ca:6c:b5:51:80:03:ab:bb:0c:02:
                    06:d6:d6:86:57:1a:e9:c7:be:86:80:c8:b7:b8:9a:
                    f4:ee:76:db:51:6e:4a:8d:45:88:b5:f5:cb:b2:f6:
                    95:5e:28:b8:95:38:ab:c8:f2:ce:e7:46:98:66:1e:
                    b2:3d:1a:8e:c7:77:03:5e:38:ef:e4:0a:1f:07:9c:
                    a4:7a:87:cb:f2:3b:31:3d:b1:cf:48:8a:bb:1c:19:
                    13:43:5c:8d:f8:4b:c3:c6:08:b8:5a:f1:3a:6e:47:
                    3c:8d:2d:a5:cf:15:25:be:fb:ed:42:a6:de:13:ee:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FE:6D:34:CD:C8:C1:5F:F5:29:DB:3D:56:EA:17:51:09:33:82:0D
            X509v3 Authority Key Identifier:
                keyid:09:85:47:62:7A:2B:2D:EA:6D:08:0A:F2:31:43:0B:E8:A8:E6:97:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYVHYnorLeptCAryMUML6Kjml0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/ZP5tNM3IwV_1Kds9VuoXUQkzgg0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/95fd62-fe39-4d9d-8ccb-6ce09552b9a3/1/CYVHYnorLeptCAryMUML6Kjml0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.255.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:32:52:ca:20:01:4b:a9:26:2c:db:d0:0b:f0:c7:e3:63:
         72:68:0a:4e:71:6b:16:df:b8:ad:1e:51:14:e5:01:55:ea:6d:
         b6:de:bb:97:67:46:5f:2d:f7:94:79:1c:f7:33:27:04:e9:21:
         8e:49:63:49:45:44:20:00:a7:e0:be:2f:15:cf:ba:82:1e:f6:
         81:a4:85:c2:03:84:31:f1:a8:bc:a3:6d:3a:12:18:bd:23:d7:
         f8:80:62:9b:87:5e:b0:a3:05:7c:fd:1c:64:95:23:53:50:9e:
         ca:e7:58:14:18:84:7b:b3:e8:b8:18:4c:e5:7d:6f:54:de:64:
         8b:50:2a:7d:33:69:d0:1a:db:b1:ac:dc:46:9d:84:50:73:c8:
         38:87:59:46:02:32:5a:b8:0d:2d:e1:6e:5c:4c:da:8f:2f:dd:
         14:62:fd:8a:8e:3c:c5:62:e7:5a:4e:bd:51:22:a7:38:e3:61:
         62:8f:9c:ce:ab:52:3b:1c:c9:8f:9c:b1:5a:2a:7f:cb:c8:df:
         4a:36:fc:21:d8:51:6d:f6:00:d9:14:8f:87:43:57:75:5c:b2:
         50:3e:32:fd:43:a8:c5:55:58:05:8f:33:60:c6:ca:e8:35:2d:
         90:e7:56:4a:c8:47:fa:36:ab:d1:ea:46:c0:de:c5:34:23:66:
         fd:b1:58:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:56 2025 by rpki-client