Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SEIGpFaUOT-3BhxD428wdHjXkF4.roa
File:                     SEIGpFaUOT-3BhxD428wdHjXkF4.roa (raw, json)
Hash identifier:          kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=
Subject key identifier:   48:42:06:A4:56:94:39:3F:B7:06:1C:43:E3:6F:30:74:78:D7:90:5E
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       0194222007C716FBDF8AD76D41C8AA3B4C99
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SEIGpFaUOT-3BhxD428wdHjXkF4.roa
Signing time:             Wed 01 Jan 2025 13:48:32 +0000
ROA not before:           Wed 01 Jan 2025 13:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214003
IP address blocks:        46.38.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:07:c7:16:fb:df:8a:d7:6d:41:c8:aa:3b:4c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jan  1 13:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=484206a45694393fb7061c43e36f307478d7905e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:28:a7:ed:36:64:ae:6b:79:21:d6:0b:0c:cd:
                    c0:5e:e7:5f:e5:85:7a:1e:37:e9:40:f6:11:e4:d6:
                    9f:76:b1:68:66:82:9a:8f:11:1f:9b:20:d9:fb:8d:
                    25:06:96:a0:21:13:2d:e7:6f:83:a7:90:8d:e4:2d:
                    4f:7b:d2:d7:e1:ee:3c:f7:de:2e:29:b7:ec:76:4c:
                    e7:fa:c6:61:7c:e1:a0:a5:94:61:c0:e0:42:4c:d5:
                    df:64:29:4c:64:69:7c:2b:16:23:41:ba:77:82:3d:
                    34:d2:36:2d:91:47:03:96:eb:11:01:00:0f:1f:88:
                    42:12:d2:16:16:c5:30:03:30:83:1e:fb:eb:dd:d9:
                    81:7f:5a:bb:ba:e3:85:2b:e3:59:b3:54:58:af:5c:
                    75:7b:73:2a:39:8c:98:d3:f0:23:8e:64:aa:29:24:
                    6e:60:8e:7b:98:8a:d4:36:c7:ef:1e:73:32:fd:6f:
                    c7:11:83:78:6f:e9:7c:a7:f2:c1:68:21:3b:f5:bd:
                    a7:93:c7:25:c3:0c:c6:d7:e4:e0:bf:55:cd:b1:b8:
                    e8:1c:85:95:a1:49:7f:66:5d:53:d3:5a:3a:ad:fe:
                    1f:72:ff:f3:36:f5:85:30:79:a9:c3:04:f3:de:e9:
                    0a:7b:e2:c3:d8:6a:6a:f5:61:f4:e6:4c:0d:4e:4b:
                    1d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:06:A4:56:94:39:3F:B7:06:1C:43:E3:6F:30:74:78:D7:90:5E
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SEIGpFaUOT-3BhxD428wdHjXkF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.38.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:60:25:5a:a8:7d:3d:16:6e:04:6e:c8:6d:9a:9f:47:7e:cf:
         29:86:2a:62:55:12:9e:94:80:83:28:c5:80:e5:2f:a3:68:45:
         ee:d7:33:a5:60:25:cd:99:20:40:cb:0e:09:30:5f:a8:3a:c1:
         98:ad:ff:26:7a:75:8b:2e:c1:68:b5:c2:14:fd:d2:8a:0d:8a:
         d4:d9:18:e5:e0:d6:15:97:f9:05:ee:46:9a:a0:45:18:5a:19:
         0d:94:7c:4a:8d:a9:47:21:0f:f8:51:d3:8f:aa:b7:20:4b:25:
         1c:a3:4e:ae:9d:75:96:87:77:88:b8:be:63:04:7b:71:49:e8:
         44:84:dd:2e:e6:dc:ff:ea:4c:92:87:f7:27:21:5a:66:cf:11:
         0a:63:b9:87:bf:39:5a:6a:e6:6b:c8:73:39:5e:fc:1a:0d:b3:
         4e:99:3d:f9:94:6a:ac:1e:75:34:3f:d9:99:5d:b1:cc:7c:c3:
         d4:18:d6:e5:e7:ce:fb:9b:ff:bc:b5:90:da:e5:58:07:c0:9a:
         82:26:02:7e:e7:3c:65:ce:7c:fc:88:51:a5:dd:35:f6:8f:b9:
         ef:ad:76:d6:72:92:55:96:6b:bb:79:2a:03:52:02:5f:78:d9:
         8d:33:41:7f:13:fd:09:51:2b:dd:ac:5e:c7:23:88:89:48:d6:
         cd:35:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:23:04 2025 by rpki-client