Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rhdV13LL09Jp7HIGa5S93fi_WRs.roa
File:                     rhdV13LL09Jp7HIGa5S93fi_WRs.roa (raw, json)
Hash identifier:          ZbzKDIdbpYSUJN1iQo1MDkDuz+GVVKNVuQeEBO9M/fY=
Subject key identifier:   AE:17:55:D7:72:CB:D3:D2:69:EC:72:06:6B:94:BD:DD:F8:BF:59:1B
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A9A2504
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rhdV13LL09Jp7HIGa5S93fi_WRs.roa
Signing time:             Sat 01 Jan 2022 04:52:22 +0000
ROA not before:           Sat 01 Jan 2022 04:52:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212251
IP address blocks:        82.177.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983180548 (0x3a9a2504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:52:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ae1755d772cbd3d269ec72066b94bdddf8bf591b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:4d:8d:5c:93:de:1d:44:c6:82:be:10:52:
                    94:11:a2:22:9d:57:03:98:bc:3b:a8:6f:b8:dc:6d:
                    15:ba:b6:47:5b:ca:de:50:b4:67:2a:d8:4d:a9:85:
                    d9:1f:f0:ce:7a:3d:41:1d:e1:ef:0f:1e:8b:ab:45:
                    3e:9a:95:89:15:12:b1:89:d9:ec:f6:62:99:36:33:
                    7c:9f:bb:56:13:71:fd:ab:f7:0b:58:36:68:01:12:
                    54:00:c3:55:a7:f5:35:f3:1d:e0:3b:dd:7d:a6:76:
                    f4:18:7b:aa:63:2b:04:96:6d:3d:91:ab:3a:ff:dd:
                    31:e6:9c:ee:25:41:19:14:de:a4:e8:af:fb:0d:29:
                    61:d5:2d:9d:46:26:b9:63:29:e3:c4:83:88:27:ae:
                    c9:ff:9c:7b:f0:66:ab:31:7f:9c:d0:61:3b:7a:92:
                    a9:19:99:9b:be:e0:a6:03:ad:df:8f:2d:ca:d3:12:
                    be:3f:88:f7:c7:f8:75:ea:b8:d9:d5:d1:12:eb:e1:
                    44:fb:b3:3c:87:eb:13:6d:be:e0:0b:81:f0:1b:10:
                    e5:77:a5:e1:fa:05:51:52:73:56:1a:30:8e:dc:68:
                    3c:4c:3c:48:67:77:84:d4:63:33:d3:b0:69:c2:1b:
                    fc:be:1b:a2:b3:94:ba:9c:00:0d:e3:65:f6:60:a4:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:17:55:D7:72:CB:D3:D2:69:EC:72:06:6B:94:BD:DD:F8:BF:59:1B
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/rhdV13LL09Jp7HIGa5S93fi_WRs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:23:f9:c5:b9:66:09:81:12:a0:0b:32:02:b9:b7:89:bc:55:
         0c:ba:58:ef:51:f6:74:dc:40:5c:52:d1:56:7a:e2:d9:1b:fd:
         e1:92:f1:e3:f8:3b:2d:f7:de:f8:3c:8b:a1:1f:66:6d:60:50:
         c8:f4:91:b8:a0:c8:7a:77:45:24:9c:50:f4:51:74:02:91:16:
         4f:ab:a4:38:36:b4:39:6b:b1:03:ba:ec:77:52:37:9e:8c:e8:
         dd:bc:46:1b:db:d0:13:93:ab:e5:54:d3:99:bf:a8:d9:97:d5:
         a1:6c:23:14:ee:95:ef:f7:26:05:a6:77:b4:d9:ee:26:69:85:
         70:41:fb:19:db:85:18:c2:c2:65:8c:8b:83:44:0a:d6:90:ca:
         7b:d0:a3:e4:0e:b9:ec:19:60:d7:35:a1:2d:10:37:61:0f:2c:
         ee:06:a6:37:23:21:09:6e:ca:b8:19:17:6f:c2:24:3b:ef:43:
         67:4e:57:a7:cf:e2:22:4c:61:50:2b:3d:1c:1c:64:c1:e7:0c:
         fc:af:76:ef:01:1b:f8:29:ef:3d:a5:03:28:ed:f9:8e:26:d8:
         ef:14:bc:90:ba:ce:a6:07:25:18:df:70:d2:81:7e:48:b0:c6:
         39:ea:ea:a0:9e:e8:0a:b5:13:09:76:2f:55:bc:82:6d:ad:df:
         8b:e1:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:07 2025 by rpki-client