Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/Lv1YgVYRSN8W_x16sodxlW3roWQ.roa
File:                     Lv1YgVYRSN8W_x16sodxlW3roWQ.roa (raw, json)
Hash identifier:          4LJUbHHdRepVcfjxCbefEVxM2Ei8JousJ1c6kTbySf8=
Subject key identifier:   2E:FD:58:81:56:11:48:DF:16:FF:1D:7A:B2:87:71:95:6D:EB:A1:64
Certificate issuer:       /CN=85982df8c771a012341e667ac38d8bd4f31b084e
Certificate serial:       01971B5AF364F7B559034514867528F8671B
Authority key identifier: 85:98:2D:F8:C7:71:A0:12:34:1E:66:7A:C3:8D:8B:D4:F3:1B:08:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZgt-MdxoBI0HmZ6w42L1PMbCE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/Lv1YgVYRSN8W_x16sodxlW3roWQ.roa
Signing time:             Thu 29 May 2025 09:23:54 +0000
ROA not before:           Thu 29 May 2025 09:23:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209569
IP address blocks:        2001:678:dcc::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:1b:5a:f3:64:f7:b5:59:03:45:14:86:75:28:f8:67:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85982df8c771a012341e667ac38d8bd4f31b084e
        Validity
            Not Before: May 29 09:23:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2efd5881561148df16ff1d7ab28771956deba164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:c8:5b:05:1a:a5:dc:8e:f9:a4:75:94:a6:
                    1a:79:28:d4:20:d8:65:ec:fa:89:e3:4d:95:51:4f:
                    2c:5b:5e:9b:00:78:ff:66:e7:cc:82:9e:f2:8d:4b:
                    2a:e2:89:ce:15:a0:ea:87:6c:a9:5a:c6:20:4b:f6:
                    b3:04:dc:bf:27:b6:fa:3f:11:5f:f4:88:87:36:75:
                    31:e4:07:15:3b:24:19:65:93:5a:14:4e:03:08:dd:
                    6f:cb:3d:b3:2d:7f:02:36:f8:34:1d:e7:73:3c:16:
                    fb:a4:fa:11:19:97:08:71:25:7f:9a:90:aa:a5:12:
                    50:1a:31:63:03:d8:60:9a:28:d4:e6:a2:98:26:8b:
                    e1:6d:04:5a:c4:3b:c7:7d:e0:d4:f3:7f:c7:57:f8:
                    c1:0b:fe:0c:70:57:29:55:fc:c8:0a:dc:58:d4:a7:
                    9f:20:3f:c1:26:c2:27:77:e1:3f:d0:1e:67:1d:fd:
                    41:84:21:c1:e8:a9:28:28:a2:19:f7:81:86:a1:0a:
                    8d:a5:c0:24:4c:84:95:53:45:4f:39:0c:f8:79:41:
                    ab:8a:ea:1b:c9:59:d4:59:3c:86:86:d1:2c:6e:d0:
                    ed:eb:81:0d:b4:6d:0b:60:d1:70:ca:84:d5:d9:47:
                    4d:19:7f:bb:c3:59:58:fd:16:b9:62:5f:43:10:c1:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FD:58:81:56:11:48:DF:16:FF:1D:7A:B2:87:71:95:6D:EB:A1:64
            X509v3 Authority Key Identifier:
                keyid:85:98:2D:F8:C7:71:A0:12:34:1E:66:7A:C3:8D:8B:D4:F3:1B:08:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZgt-MdxoBI0HmZ6w42L1PMbCE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/Lv1YgVYRSN8W_x16sodxlW3roWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8b838f-aa9f-450f-a62e-3d55bdc95650/1/hZgt-MdxoBI0HmZ6w42L1PMbCE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:dcc::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:96:e9:cc:91:05:54:7c:03:57:cb:dd:d7:0b:c5:01:67:e7:
         c8:dc:ad:52:cd:8d:f9:c9:88:72:21:05:92:9a:ab:f0:66:ee:
         df:d9:9d:70:a6:eb:6d:60:7f:bd:60:26:ae:f5:2a:59:d7:cc:
         90:aa:d8:7c:8b:00:99:5d:57:d7:63:4e:08:35:6a:27:e6:65:
         4e:49:86:0b:e5:ca:47:82:2a:fe:63:4c:cc:63:fe:6b:87:79:
         78:d6:17:2f:48:4c:0b:60:66:a1:18:5c:59:9f:ad:d2:57:61:
         71:51:3e:1d:e0:cf:67:b6:a4:da:f3:51:82:fd:43:c5:93:dc:
         c2:61:c6:14:5a:99:ab:ff:e0:9a:a5:f5:1b:7d:46:17:e6:05:
         68:05:41:a0:20:4e:af:0b:50:a3:4d:93:5a:77:ad:3c:e4:9a:
         02:51:af:c2:8c:53:58:65:c7:4d:ab:94:3c:00:8e:11:b1:83:
         6c:47:d4:95:fd:fc:45:10:15:f0:da:50:96:01:ab:5d:1b:92:
         9b:37:46:da:31:94:cf:ec:e4:33:6d:96:ae:14:e6:09:a6:1f:
         f5:f3:7d:33:1a:4c:ed:21:81:45:c8:26:69:17:cb:be:1d:58:
         b9:c7:a5:9f:c4:08:65:c5:a9:e6:f7:2e:9f:51:17:fb:61:8e:
         60:5a:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:14 2025 by rpki-client