Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/E6qDE5Eh_CNiNfUnlJNawihISq0.roa
File:                     E6qDE5Eh_CNiNfUnlJNawihISq0.roa (raw, json)
Hash identifier:          BqBijuVxzqpW94YshJaHEye8WI5EkLILOsgVCIhrg50=
Subject key identifier:   13:AA:83:13:91:21:FC:23:62:35:F5:27:94:93:5A:C2:28:48:4A:AD
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       019424B268E3707CF6A698287B4A2E18D96D
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/E6qDE5Eh_CNiNfUnlJNawihISq0.roa
Signing time:             Thu 02 Jan 2025 01:47:39 +0000
ROA not before:           Thu 02 Jan 2025 01:47:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20649
IP address blocks:        2a0b:9800::/32 maxlen: 32
                          2a0b:9801::/32 maxlen: 32
                          2a0b:9802::/32 maxlen: 32
                          2a0b:9803::/32 maxlen: 32
                          2a0b:9804::/32 maxlen: 32
                          2a0b:9805::/32 maxlen: 32
                          2a0b:9806::/32 maxlen: 32
                          2a0b:9807::/32 maxlen: 32
                          2a14:4080::/32 maxlen: 32
                          2a14:4081::/32 maxlen: 32
                          2a14:4082::/32 maxlen: 32
                          2a14:4083::/32 maxlen: 32
                          2a14:4084::/32 maxlen: 32
                          2a14:4085::/32 maxlen: 32
                          2a14:4086::/32 maxlen: 32
                          2a14:4087::/32 maxlen: 32
                          2a14:4380::/32 maxlen: 32
                          2a14:4381::/32 maxlen: 32
                          2a14:4382::/32 maxlen: 32
                          2a14:4383::/32 maxlen: 32
                          2a14:4384::/32 maxlen: 32
                          2a14:4385::/32 maxlen: 32
                          2a14:4386::/32 maxlen: 32
                          2a14:4387::/32 maxlen: 32
                          2a14:4480::/32 maxlen: 32
                          2a14:4481::/32 maxlen: 32
                          2a14:4482::/32 maxlen: 32
                          2a14:4483::/32 maxlen: 32
                          2a14:4484::/32 maxlen: 32
                          2a14:4485::/32 maxlen: 32
                          2a14:4486::/32 maxlen: 32
                          2a14:4487::/32 maxlen: 32
                          2a14:4980::/32 maxlen: 32
                          2a14:4981::/32 maxlen: 32
                          2a14:4982::/32 maxlen: 32
                          2a14:4983::/32 maxlen: 32
                          2a14:4984::/32 maxlen: 32
                          2a14:4985::/32 maxlen: 32
                          2a14:4986::/32 maxlen: 32
                          2a14:4987::/32 maxlen: 32
                          2a14:4a80::/32 maxlen: 32
                          2a14:4a81::/32 maxlen: 32
                          2a14:4a82::/32 maxlen: 32
                          2a14:4a83::/32 maxlen: 32
                          2a14:4a84::/32 maxlen: 32
                          2a14:4a85::/32 maxlen: 32
                          2a14:4a86::/32 maxlen: 32
                          2a14:4a87::/32 maxlen: 32
                          2a14:4b80::/32 maxlen: 32
                          2a14:4b81::/32 maxlen: 32
                          2a14:4b82::/32 maxlen: 32
                          2a14:4b83::/32 maxlen: 32
                          2a14:4b84::/32 maxlen: 32
                          2a14:4b85::/32 maxlen: 32
                          2a14:4b86::/32 maxlen: 32
                          2a14:4b87::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:68:e3:70:7c:f6:a6:98:28:7b:4a:2e:18:d9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Jan  2 01:47:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13aa83139121fc236235f52794935ac228484aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:11:e9:b8:50:bd:d8:d8:ff:2e:ff:bc:cb:
                    14:8b:44:c2:ec:91:d5:9f:35:44:f8:df:9c:de:f8:
                    fc:fa:7f:20:eb:da:b8:02:d3:30:02:20:46:3f:38:
                    04:38:b1:39:1b:eb:c6:59:bb:d7:e8:b3:b9:cb:c1:
                    37:81:18:bc:68:5c:c5:32:ba:5d:fd:c0:ac:a5:0d:
                    1d:c0:18:fd:00:ef:d6:a2:14:5e:96:74:a1:72:66:
                    c6:56:9a:f6:83:93:44:35:33:96:34:7e:a5:e9:3a:
                    b6:58:5f:2f:3d:c1:b7:47:b8:47:dc:b8:71:1d:96:
                    aa:54:e8:a0:99:94:3c:00:91:30:42:f0:fc:c1:b5:
                    a6:7c:af:45:c1:5a:ad:ab:01:ad:98:af:d9:04:48:
                    29:89:07:79:d8:9e:fd:d7:e7:40:18:e5:91:0f:15:
                    9c:18:57:62:a2:76:f4:37:a2:87:eb:f3:72:2a:04:
                    de:f8:09:8e:ca:b4:02:b2:37:20:1b:4f:8c:77:6c:
                    77:57:5b:3c:96:34:1b:bc:f3:61:3f:85:3f:1c:b3:
                    ba:f1:aa:b7:3f:35:50:f7:ff:1c:79:e5:63:bb:98:
                    dd:23:47:0d:63:0f:38:25:2d:a5:d6:2f:25:c2:e3:
                    79:ad:74:6c:65:09:a4:3c:7f:e5:9e:9f:e2:1f:16:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AA:83:13:91:21:FC:23:62:35:F5:27:94:93:5A:C2:28:48:4A:AD
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/E6qDE5Eh_CNiNfUnlJNawihISq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9800::/29
                  2a14:4080::/29
                  2a14:4380::/29
                  2a14:4480::/29
                  2a14:4980::/29
                  2a14:4a80::/29
                  2a14:4b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         42:65:3b:8c:94:cc:58:87:74:c6:68:06:26:0e:85:1b:9b:3f:
         92:be:fb:de:fe:26:9d:57:1d:d1:ee:96:b8:de:9d:66:83:aa:
         15:55:62:c0:0b:ed:13:b2:93:0f:b3:3d:83:a0:09:a2:4a:20:
         90:8e:68:a3:03:d1:b6:cb:85:f1:ae:ca:5d:a3:5d:3c:5f:1e:
         af:4e:81:8e:07:04:77:c6:21:8a:4a:c4:6b:52:01:16:27:3e:
         db:fa:97:6e:a0:a6:cb:13:95:09:ed:b5:3a:b6:4c:f5:be:f1:
         38:97:7e:4f:aa:45:aa:49:97:5b:17:e9:36:9b:34:28:ff:33:
         b4:83:e4:d1:7d:7d:5f:11:74:2d:3d:6d:53:7c:e4:de:f0:bd:
         ff:56:ab:20:d3:e5:3b:2c:17:03:7f:67:d3:16:9e:0f:e3:2a:
         8b:e1:dd:c2:a6:cd:04:18:5d:4f:68:7e:28:9b:1b:eb:e2:ec:
         01:58:00:91:5c:eb:8d:ce:b0:15:39:ad:02:56:7f:ad:87:f1:
         20:2e:6a:8c:43:25:7d:67:25:bd:64:1d:e0:c0:48:2f:f6:d9:
         70:c9:6e:32:0d:e6:82:65:44:42:7d:f5:9f:c3:17:36:19:85:
         59:62:d2:32:a2:b8:52:53:b2:7c:12:16:69:21:90:e1:1e:ba:
         53:50:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:07 2025 by rpki-client