Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/V6J3YwWiTxXE62cDuEaQCbMRcc0.roa
File:                     V6J3YwWiTxXE62cDuEaQCbMRcc0.roa (raw, json)
Hash identifier:          CkR6uew5jmhlFtWnAL5VEIwVzer3dlBmcer/rpzcpUI=
Subject key identifier:   57:A2:77:63:05:A2:4F:15:C4:EB:67:03:B8:46:90:09:B3:11:71:CD
Certificate issuer:       /CN=b9979c26f2ca6f0f4e6e74a1c50b1e7d1d209111
Certificate serial:       018200BAAD0427F20A2D8271E3C8161B7877
Authority key identifier: B9:97:9C:26:F2:CA:6F:0F:4E:6E:74:A1:C5:0B:1E:7D:1D:20:91:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZecJvLKbw9ObnShxQsefR0gkRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/V6J3YwWiTxXE62cDuEaQCbMRcc0.roa
Signing time:             Fri 15 Jul 2022 07:20:09 +0000
ROA not before:           Fri 15 Jul 2022 07:20:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50316
IP address blocks:        45.82.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:00:ba:ad:04:27:f2:0a:2d:82:71:e3:c8:16:1b:78:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9979c26f2ca6f0f4e6e74a1c50b1e7d1d209111
        Validity
            Not Before: Jul 15 07:20:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57a2776305a24f15c4eb6703b8469009b31171cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:5e:bf:9e:49:8d:b9:da:e4:ea:d6:10:1f:
                    af:36:1d:c9:cb:20:9d:97:8f:7e:fb:3e:98:f2:e5:
                    e4:f3:96:0a:84:fd:43:97:39:c9:1c:7b:de:61:ce:
                    2d:29:fb:9c:af:27:62:06:fe:26:ba:9b:e2:96:d2:
                    9d:dc:c2:71:76:90:5a:9c:45:14:bf:82:6b:a7:5e:
                    2f:ed:74:a8:96:3b:f2:d5:63:79:8b:9a:86:a8:60:
                    74:7d:29:17:2c:76:d5:fc:2c:fb:31:1b:e7:a3:d1:
                    31:94:1b:d8:37:d5:a1:96:5e:d2:f3:31:1a:03:40:
                    17:83:4f:20:41:84:e1:19:ee:c4:d3:af:50:dd:df:
                    12:4a:95:b4:33:38:c8:7e:97:f2:69:76:00:0e:be:
                    a7:1b:e2:d2:4e:79:70:b0:ae:9a:d3:61:2c:22:57:
                    09:3d:0d:4f:bd:59:74:07:8b:bc:72:4a:0a:14:01:
                    36:3a:63:a6:df:61:a8:59:9a:7e:11:35:1e:14:93:
                    e2:b3:f7:a3:31:3e:39:49:c8:e9:7d:f2:cd:62:6d:
                    00:5a:e1:f0:cd:b2:00:b1:de:83:1c:ad:55:59:19:
                    30:fb:5d:69:59:46:ee:71:16:9a:29:7c:0f:a7:17:
                    65:16:a1:ec:79:a6:7a:21:73:ac:b9:56:95:26:e2:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:77:63:05:A2:4F:15:C4:EB:67:03:B8:46:90:09:B3:11:71:CD
            X509v3 Authority Key Identifier:
                keyid:B9:97:9C:26:F2:CA:6F:0F:4E:6E:74:A1:C5:0B:1E:7D:1D:20:91:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZecJvLKbw9ObnShxQsefR0gkRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/V6J3YwWiTxXE62cDuEaQCbMRcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/uZecJvLKbw9ObnShxQsefR0gkRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7a:42:14:52:a3:cd:b4:58:fd:8d:35:89:ef:b7:77:aa:a0:
         4c:10:74:da:34:64:3e:b5:53:52:d9:b3:41:d4:db:00:df:92:
         e0:4f:67:e4:e5:58:e1:eb:67:be:26:ed:8a:b0:8e:d4:ec:2e:
         b3:6e:2d:3a:f1:c4:78:90:a0:d5:12:76:9a:f1:c6:b0:d9:48:
         5b:3c:f9:84:bc:23:b6:62:bb:81:1d:1c:97:bc:7a:19:d4:4d:
         6c:75:c7:75:a1:f2:29:a3:ef:6b:11:55:4b:91:81:35:9a:73:
         dc:e6:75:e7:c6:02:a9:8d:11:f9:4c:66:de:18:84:44:d6:d9:
         2a:54:08:9c:39:33:01:58:e4:fe:e5:26:81:ec:a5:f9:b7:7c:
         08:6f:4d:9c:ba:e7:b9:77:05:86:14:6d:57:a5:b5:b5:06:a6:
         76:c1:14:7f:5f:58:bb:12:d6:5d:0f:e7:0b:fb:18:66:a2:95:
         be:e4:cb:74:ea:61:dc:97:29:aa:98:63:f1:89:b1:e6:a0:b8:
         b5:80:21:bf:64:4e:4b:91:bd:c0:97:fb:f6:4d:2e:21:82:a5:
         cb:91:29:46:61:cb:20:c5:0b:74:05:ea:b3:7b:9e:fc:c0:d4:
         8b:a7:f4:8e:c2:65:2d:1b:53:01:b8:07:96:5d:e4:65:f3:20:
         77:f2:90:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:31 2025 by rpki-client