Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/e1EayWz0uAHl5eWWZbT1L-tpFds.roa
File:                     e1EayWz0uAHl5eWWZbT1L-tpFds.roa (raw, json)
Hash identifier:          dGMVwkUz+lqm0+yzeDZIta94DzwS/qA8TRMINX6cJlk=
Subject key identifier:   7B:51:1A:C9:6C:F4:B8:01:E5:E5:E5:96:65:B4:F5:2F:EB:69:15:DB
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A6D296A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/e1EayWz0uAHl5eWWZbT1L-tpFds.roa
Signing time:             Sat 01 Jan 2022 04:51:51 +0000
ROA not before:           Sat 01 Jan 2022 04:51:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35463
IP address blocks:        82.177.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980232554 (0x3a6d296a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:51:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b511ac96cf4b801e5e5e59665b4f52feb6915db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:c2:1b:2b:ab:f1:51:fa:84:d0:bd:40:d8:
                    3b:b4:ee:e6:3d:9e:d6:0c:4a:7d:bf:20:9f:6f:13:
                    e0:02:e4:f4:48:7f:1d:16:f2:9a:ab:58:17:bc:9f:
                    e5:67:6f:d2:45:48:e9:12:5d:2b:a7:68:df:bb:00:
                    50:0c:c2:d6:d9:4c:af:7b:a5:c4:35:6e:d3:8d:8f:
                    c4:f2:26:3f:e3:c0:35:96:3b:84:5e:12:6c:d7:e4:
                    7b:b0:94:cd:a4:3c:b7:94:e2:40:53:3e:a7:66:f3:
                    a2:82:5a:04:59:59:8a:21:24:0c:9d:82:c0:df:1d:
                    23:e9:d8:f7:1b:8f:f6:46:6d:2e:f7:30:50:72:9b:
                    33:79:21:c5:1b:a4:b8:75:99:6f:a7:26:84:11:78:
                    69:9e:b9:f3:9f:ca:5e:4c:ce:2c:c0:0a:07:4d:29:
                    b5:90:6d:18:fb:c9:86:b9:39:f7:86:11:80:22:44:
                    37:eb:a0:73:ff:43:ba:b6:1b:c2:d6:c0:cc:cb:2f:
                    b8:3b:6f:28:74:98:d4:2e:5e:0f:02:fe:72:37:28:
                    cc:ae:d4:0c:3e:4f:01:91:0f:40:0d:a9:cd:ff:30:
                    94:4b:58:a7:a0:f9:0a:a5:61:a5:fb:59:49:fd:da:
                    6e:b5:16:63:71:84:65:6d:42:14:ca:67:df:e1:31:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:51:1A:C9:6C:F4:B8:01:E5:E5:E5:96:65:B4:F5:2F:EB:69:15:DB
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/e1EayWz0uAHl5eWWZbT1L-tpFds.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:3e:cd:a2:0c:65:52:f4:b6:96:54:0e:24:89:5d:7f:4b:9b:
         5b:24:96:fc:b5:99:eb:b7:b9:29:f6:ee:d0:cc:20:25:3e:b4:
         99:f0:bc:d3:bb:73:fd:1c:cd:70:5a:7b:0b:22:a0:17:b4:27:
         e6:d4:0f:ab:21:27:f1:d4:d8:a4:91:6d:1f:f6:1a:eb:4f:98:
         2a:54:ce:61:fd:b0:16:18:0a:bb:cb:c4:bb:c0:85:b4:f8:80:
         b8:0c:58:3a:30:b8:3e:92:9c:ee:d2:45:13:0e:d7:e2:0d:a4:
         16:04:06:2d:fd:b7:5f:5a:0b:69:63:d7:d9:b1:c0:d7:67:a2:
         32:f9:d0:75:3d:33:b3:5f:eb:54:76:dc:5e:1c:be:34:0d:aa:
         ec:82:97:6c:4a:98:7d:ea:e9:9a:39:4b:2f:5b:46:98:0d:a4:
         20:9f:dd:b5:eb:22:2f:61:de:97:82:cc:de:f3:46:f8:c2:87:
         13:c9:c3:26:0e:c8:5c:1c:b9:c5:fb:c5:74:55:51:03:cc:40:
         44:9a:1b:2c:71:ee:e9:28:7c:fc:65:3f:a5:12:a0:b9:b3:0e:
         99:14:be:16:ef:52:fb:ee:ac:bf:4b:ad:48:08:e6:81:e4:b4:
         4b:02:9a:64:3d:ff:33:70:46:f5:a8:f8:d6:78:7e:13:f5:cf:
         19:55:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:23 2025 by rpki-client