Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/6GnuPpGQ9HA3NuVqWwToIbIrJUM.roa
File:                     6GnuPpGQ9HA3NuVqWwToIbIrJUM.roa (raw, json)
Hash identifier:          Eqcbbo83iJ3nVqtQ0NjMcnFL4S/SSXLvsYJ2q8YPoiw=
Subject key identifier:   E8:69:EE:3E:91:90:F4:70:37:36:E5:6A:5B:04:E8:21:B2:2B:25:43
Certificate issuer:       /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial:       018571309A54F8E4EC8506C2F4ED29272398
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/6GnuPpGQ9HA3NuVqWwToIbIrJUM.roa
Signing time:             Mon 02 Jan 2023 06:34:48 +0000
ROA not before:           Mon 02 Jan 2023 06:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53340
IP address blocks:        83.150.219.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:30:9a:54:f8:e4:ec:85:06:c2:f4:ed:29:27:23:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
        Validity
            Not Before: Jan  2 06:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e869ee3e9190f4703736e56a5b04e821b22b2543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:e2:f3:1b:00:5d:25:86:91:f7:a8:23:4c:
                    78:49:fa:b5:7b:f8:63:e5:db:7b:39:fc:54:4e:4d:
                    08:0e:35:2e:55:f1:52:3f:22:df:82:c7:01:2d:c3:
                    91:3f:a8:6e:47:54:38:a4:1b:20:ad:67:77:28:58:
                    50:b6:d7:5e:5f:be:ed:e8:69:ba:f4:2f:13:76:2b:
                    fe:15:af:57:18:c0:7b:b8:2a:20:1c:16:f4:ed:f5:
                    bc:05:ba:02:47:40:df:40:90:9f:29:12:89:7f:2c:
                    81:40:bf:b0:ed:c5:bb:82:5f:f4:d2:b1:2b:30:cd:
                    41:7f:71:e1:c9:de:31:dc:b3:12:24:cf:e0:42:97:
                    b2:66:4e:e2:98:91:f7:fe:aa:7a:82:b6:6b:a1:55:
                    b4:7d:6c:cf:c1:4d:bf:52:52:52:5c:c2:b4:53:72:
                    d4:fb:ee:5e:14:8d:b9:d5:b7:82:9c:12:8a:c7:41:
                    e2:08:8f:7d:62:6d:ff:37:1c:9f:ce:7a:a2:62:ab:
                    77:00:95:8c:c1:05:cc:77:e2:a6:2e:8f:2e:e1:ab:
                    92:86:70:7a:c4:0c:50:2b:55:a3:c6:7e:b8:f6:f1:
                    fe:5e:3a:e9:5b:52:4c:f2:29:47:0e:21:cf:be:81:
                    19:d5:ed:1b:2a:4f:88:63:91:57:f5:5c:d7:d0:42:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:69:EE:3E:91:90:F4:70:37:36:E5:6A:5B:04:E8:21:B2:2B:25:43
            X509v3 Authority Key Identifier:
                keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/6GnuPpGQ9HA3NuVqWwToIbIrJUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:04:23:40:ed:e5:03:7f:fc:d1:1c:d8:4e:14:8a:7b:40:
         cb:2d:b1:7c:e7:3a:db:98:e5:6a:2f:64:97:ea:21:52:fd:7b:
         c6:c0:75:41:22:d8:5d:0c:a6:c4:f9:4b:3f:0c:f4:09:3d:4c:
         17:1b:f5:1b:b7:ca:0e:5d:66:ba:a3:67:75:a7:08:17:b0:91:
         ef:39:e0:8f:17:e7:e0:66:93:dc:57:56:af:89:04:37:29:dc:
         b8:4c:2b:08:41:2f:06:90:bd:67:13:b7:5a:d7:d7:36:a2:67:
         eb:fe:99:fa:d3:61:29:08:2d:9d:32:cb:3c:84:20:89:0d:96:
         c1:e3:ba:59:1b:58:b1:c9:7d:2b:f7:c9:e5:ad:57:d7:3d:75:
         dc:bc:98:d5:2f:7b:75:0b:71:29:ef:f1:be:8e:8f:42:cd:ab:
         ba:c1:27:f5:f8:09:a4:4b:27:60:ce:62:5f:b8:36:b6:6a:2b:
         d1:43:07:c4:65:f5:0a:b2:68:ef:78:23:e0:78:6d:8a:a0:b3:
         4f:18:0c:03:df:8e:5b:28:05:15:ae:fd:ca:53:c4:eb:72:ca:
         f6:6b:76:cb:94:ba:8e:30:9d:b5:d8:13:f3:5e:82:3a:e5:53:
         d6:15:7c:d5:47:48:b3:42:66:c9:2b:2e:92:d2:43:69:2b:c5:
         97:a5:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:41 2025 by rpki-client