Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/enl-OnSsyQQ-hLWZ3nJD3mzCBCY.roa
File:                     enl-OnSsyQQ-hLWZ3nJD3mzCBCY.roa (raw, json)
Hash identifier:          7l9h0QNeocN0K2HkfuBYfGvdE8gcjTjvMl2kLe50eMM=
Subject key identifier:   7A:79:7E:3A:74:AC:C9:04:3E:84:B5:99:DE:72:43:DE:6C:C2:04:26
Certificate issuer:       /CN=1772ca3151cf43fa72ed4e6b0a8b19dbd8c75b68
Certificate serial:       0667E53D
Authority key identifier: 17:72:CA:31:51:CF:43:FA:72:ED:4E:6B:0A:8B:19:DB:D8:C7:5B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3LKMVHPQ_py7U5rCosZ29jHW2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/enl-OnSsyQQ-hLWZ3nJD3mzCBCY.roa
Signing time:             Sat 01 Jan 2022 08:58:51 +0000
ROA not before:           Sat 01 Jan 2022 08:58:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212318
IP address blocks:        178.57.66.0/24 maxlen: 24
                          178.57.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107472189 (0x667e53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1772ca3151cf43fa72ed4e6b0a8b19dbd8c75b68
        Validity
            Not Before: Jan  1 08:58:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a797e3a74acc9043e84b599de7243de6cc20426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:8c:cd:c4:23:34:cd:2e:b1:86:5d:fb:18:
                    fe:6c:50:8d:7e:8d:0b:e2:8c:66:01:23:5f:f0:8b:
                    26:06:7f:85:88:b2:97:23:7a:8d:59:f6:8b:ca:a0:
                    53:c2:7a:0a:c7:a7:fb:e4:26:23:11:42:ce:e7:07:
                    c2:b8:e9:ab:03:2f:49:be:86:c6:da:43:19:de:4e:
                    bc:3d:e0:53:30:df:20:bc:9b:45:ff:e1:c6:23:81:
                    24:75:04:ce:18:30:87:8b:2c:07:67:3b:3d:c1:bf:
                    42:38:e4:b7:d7:6e:90:e3:39:b8:59:3e:74:bd:43:
                    79:2c:96:81:a4:e4:b7:18:12:6f:66:a8:e1:80:44:
                    be:71:f3:5f:7d:78:c6:dd:6d:ac:01:9e:1b:81:b4:
                    9b:9c:87:86:ae:bd:22:03:28:97:16:81:09:a5:21:
                    18:63:5f:4f:ae:56:2e:50:75:f7:31:ba:97:84:46:
                    e4:ed:61:7b:b8:ef:0f:47:4f:ef:fe:48:19:ba:88:
                    e8:63:7f:f0:d0:47:57:59:49:f1:67:20:f5:89:80:
                    c1:86:e7:d7:eb:96:f4:44:37:f5:2a:20:de:45:ab:
                    f4:db:83:aa:45:07:ea:24:51:21:19:9d:c2:b3:3c:
                    c6:67:fc:43:ae:4c:f6:ec:53:ff:c9:cb:38:e4:21:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:79:7E:3A:74:AC:C9:04:3E:84:B5:99:DE:72:43:DE:6C:C2:04:26
            X509v3 Authority Key Identifier:
                keyid:17:72:CA:31:51:CF:43:FA:72:ED:4E:6B:0A:8B:19:DB:D8:C7:5B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3LKMVHPQ_py7U5rCosZ29jHW2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/enl-OnSsyQQ-hLWZ3nJD3mzCBCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/633f93-7ffe-4ce4-b3a0-d7852d6fef93/1/F3LKMVHPQ_py7U5rCosZ29jHW2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.57.65.0-178.57.66.255

    Signature Algorithm: sha256WithRSAEncryption
         3c:74:5d:ad:67:44:fb:f8:00:1d:1c:8b:c0:67:b0:3b:3d:a0:
         04:2e:a7:d2:89:a9:f8:ce:e5:5b:71:cc:e9:a4:61:12:a3:89:
         ab:16:a7:c5:24:47:9e:f8:6e:7d:01:ea:5f:1e:8e:40:ea:ec:
         85:6a:9b:e6:3b:50:75:c2:79:d9:1d:6f:a3:4a:b4:17:1d:85:
         02:9a:09:5f:6a:08:22:f2:18:f8:cc:90:61:2b:ed:57:67:be:
         da:77:83:be:b7:fa:bf:d1:40:94:fe:64:a7:87:45:f8:4a:e8:
         81:d3:f7:c2:0d:a4:15:86:a2:e1:eb:43:81:7d:06:03:81:11:
         b0:c2:cb:89:90:cb:5c:ef:41:1c:87:c7:8e:c3:45:fd:63:a7:
         21:bf:f4:c8:ce:a5:16:95:67:49:45:1d:8d:91:14:5f:db:7a:
         0c:f7:71:e9:3e:c6:db:28:bb:95:50:0e:1b:5a:d4:af:6c:6e:
         e8:b5:21:f0:ba:4b:30:d7:26:71:67:82:83:9d:34:09:33:78:
         7b:df:30:36:08:43:40:c6:b8:16:ff:e7:7f:56:e7:50:38:ea:
         db:75:99:6d:08:26:8a:c5:0f:0c:47:04:fc:ce:08:a5:79:a1:
         84:81:65:2e:d6:d6:29:49:b4:92:1b:c1:25:9f:c8:cc:17:00:
         a5:ca:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:59 2025 by rpki-client