Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/buwLT7EWF4hm7a5C0VWh9xiIzyY.roa
File:                     buwLT7EWF4hm7a5C0VWh9xiIzyY.roa (raw, json)
Hash identifier:          EYDydIT0qe4x4sy3wiJ1l1hZAraTRzYr8w8PWdEOr4k=
Subject key identifier:   6E:EC:0B:4F:B1:16:17:88:66:ED:AE:42:D1:55:A1:F7:18:88:CF:26
Certificate issuer:       /CN=26d98af410751d5ec7bd54f751572247ebe88399
Certificate serial:       01239E
Authority key identifier: 26:D9:8A:F4:10:75:1D:5E:C7:BD:54:F7:51:57:22:47:EB:E8:83:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtmK9BB1HV7HvVT3UVciR-vog5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/buwLT7EWF4hm7a5C0VWh9xiIzyY.roa
Signing time:             Sun 17 Apr 2022 12:45:15 +0000
ROA not before:           Sun 17 Apr 2022 12:45:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8849
IP address blocks:        185.230.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74654 (0x1239e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d98af410751d5ec7bd54f751572247ebe88399
        Validity
            Not Before: Apr 17 12:45:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6eec0b4fb116178866edae42d155a1f71888cf26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:f1:ff:56:ff:c3:16:55:65:f2:a4:36:38:
                    13:c8:92:a0:a8:b5:0e:d3:ca:2c:27:ee:7d:c9:65:
                    6c:b9:97:3a:e7:93:43:60:3c:b9:3c:e3:57:25:3f:
                    3e:f4:5f:19:60:1e:2d:12:d2:1b:f7:20:87:d8:69:
                    11:8d:c0:bb:97:9f:43:24:72:7c:35:75:80:91:62:
                    23:e8:ff:d2:dc:59:9f:d8:49:3e:52:c7:7e:9b:75:
                    cd:f2:0e:05:01:a5:3b:a1:3e:46:23:71:54:fd:18:
                    30:ca:bd:8e:0d:96:dd:34:1c:a8:e3:97:a5:cd:a7:
                    8a:05:e9:93:2f:a8:1a:4b:35:38:ab:3a:22:10:4c:
                    c5:71:d6:89:fa:30:9f:06:49:25:a3:90:3a:5e:41:
                    78:09:ad:77:cb:40:1b:ff:bc:22:da:0b:81:91:92:
                    0c:e2:ea:80:16:0c:49:37:c2:50:24:a8:7a:c8:3a:
                    64:ff:f1:9c:bd:16:45:8d:55:a1:3b:7a:ec:1a:3a:
                    e3:20:ee:c4:2b:a9:b0:38:98:19:74:88:ad:76:eb:
                    70:4f:00:0f:2f:e1:2b:99:df:3d:db:93:6c:4a:09:
                    8d:c3:c3:45:b7:4e:76:4c:d6:56:12:67:16:7c:3d:
                    2c:f0:1e:c4:8d:1e:11:aa:53:c1:a3:89:6e:4f:a2:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EC:0B:4F:B1:16:17:88:66:ED:AE:42:D1:55:A1:F7:18:88:CF:26
            X509v3 Authority Key Identifier:
                keyid:26:D9:8A:F4:10:75:1D:5E:C7:BD:54:F7:51:57:22:47:EB:E8:83:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmK9BB1HV7HvVT3UVciR-vog5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/buwLT7EWF4hm7a5C0VWh9xiIzyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/JtmK9BB1HV7HvVT3UVciR-vog5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:8e:96:59:46:56:97:bf:36:68:68:f7:80:6a:dc:8b:73:
         37:a8:21:5a:7d:3d:b7:d0:f9:d1:37:4b:6d:48:b8:72:b0:df:
         e8:01:f3:e5:12:23:05:c2:ff:c8:5d:ae:18:f4:5f:51:4b:18:
         7a:ed:cb:39:23:36:c1:c1:3a:1e:e8:41:34:e9:7f:fd:f3:eb:
         6d:60:95:a0:fe:46:2b:40:5e:51:c1:79:46:10:91:2f:5e:73:
         6e:7d:3b:fb:ab:08:10:b2:04:2b:88:41:75:e2:31:34:13:9d:
         f4:6d:41:25:6d:43:37:5d:a7:c5:41:2d:4b:d6:e2:8c:24:89:
         92:d6:39:ef:1c:b5:41:43:1d:dc:3e:22:34:d8:e4:bd:78:58:
         47:39:9f:60:ce:56:cc:cf:a2:68:bf:c8:23:e7:e6:2d:01:1b:
         7e:e4:45:1d:7a:46:0a:5f:1e:8c:a9:96:76:91:13:e7:e9:70:
         40:6d:0c:04:e4:55:c7:01:05:c6:bc:57:84:0b:38:ef:a8:2f:
         88:bf:f0:cf:f9:39:0d:ad:db:02:f8:63:24:2e:15:55:18:3a:
         42:85:f6:90:10:47:f9:be:42:1e:20:36:92:f8:a7:0b:37:20:
         33:74:ce:11:1b:a2:c3:f6:98:ea:0d:2e:7d:b5:b7:cc:19:6b:
         42:87:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:00 2025 by rpki-client