Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/Tyl0t3EDu7GFxuOCuXrJ6SzC7Ow.roa
File:                     Tyl0t3EDu7GFxuOCuXrJ6SzC7Ow.roa (raw, json)
Hash identifier:          edKapxRMj5oEOZXavVyDSfXqwL0Ka9+xYqeAQeG+NDU=
Subject key identifier:   4F:29:74:B7:71:03:BB:B1:85:C6:E3:82:B9:7A:C9:E9:2C:C2:EC:EC
Certificate issuer:       /CN=8f1b7edf827db1366de571f00b4a5cfdb239cc61
Certificate serial:       1A7A81B0
Authority key identifier: 8F:1B:7E:DF:82:7D:B1:36:6D:E5:71:F0:0B:4A:5C:FD:B2:39:CC:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxt-34J9sTZt5XHwC0pc_bI5zGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/Tyl0t3EDu7GFxuOCuXrJ6SzC7Ow.roa
Signing time:             Sat 01 Jan 2022 13:00:17 +0000
ROA not before:           Sat 01 Jan 2022 13:00:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208043
IP address blocks:        46.236.110.0/24 maxlen: 24
                          80.244.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444236208 (0x1a7a81b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1b7edf827db1366de571f00b4a5cfdb239cc61
        Validity
            Not Before: Jan  1 13:00:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f2974b77103bbb185c6e382b97ac9e92cc2ecec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:7a:04:4f:10:ec:96:80:fd:07:d1:27:a9:
                    5f:b4:d3:17:35:19:b4:a8:53:84:3c:11:60:00:88:
                    3b:30:5c:0f:25:7f:b3:df:05:dc:9b:ed:3e:19:f3:
                    35:4b:f1:e1:fb:19:e9:6f:d1:e8:fa:15:b8:9c:41:
                    69:4f:ce:d2:94:6b:46:c4:36:2b:ba:15:4c:65:e1:
                    bb:d2:0a:12:29:9b:4f:6b:12:f0:7d:b2:5b:e8:ed:
                    f0:85:03:7d:b3:df:1f:7d:fe:fa:bd:e9:9c:6e:03:
                    64:81:e1:ed:e5:7a:16:0d:15:11:e0:09:71:26:87:
                    4a:c8:42:ef:a4:e0:5f:3a:f8:4e:3e:bd:1a:06:5e:
                    b6:9a:ef:83:0b:b9:96:e7:e9:47:1a:a8:39:b1:12:
                    2b:19:fa:59:56:0a:09:51:f1:8a:0a:cf:9a:f6:f1:
                    e1:d8:85:0b:6e:36:43:cd:17:0f:a6:33:1b:75:0f:
                    9f:fd:bb:db:39:d9:4b:21:d1:ae:4c:ed:15:0a:eb:
                    88:fd:4a:93:a4:4d:08:fb:3d:46:6b:00:ef:1e:e8:
                    e3:a7:77:44:5c:15:e6:75:70:bb:9d:a4:de:00:ac:
                    c4:cd:a6:4e:b7:76:36:39:9f:75:c8:66:2c:93:a9:
                    c3:0d:a7:7a:97:09:d0:3e:37:aa:2b:a8:7e:34:d3:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:29:74:B7:71:03:BB:B1:85:C6:E3:82:B9:7A:C9:E9:2C:C2:EC:EC
            X509v3 Authority Key Identifier:
                keyid:8F:1B:7E:DF:82:7D:B1:36:6D:E5:71:F0:0B:4A:5C:FD:B2:39:CC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxt-34J9sTZt5XHwC0pc_bI5zGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/Tyl0t3EDu7GFxuOCuXrJ6SzC7Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2c293c-6df0-4112-b800-3c18bc87c65c/1/jxt-34J9sTZt5XHwC0pc_bI5zGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.236.110.0/24
                  80.244.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:dd:c6:90:c1:19:7d:37:45:7c:cd:76:39:25:29:d3:10:0c:
         6a:58:7c:22:fb:43:ee:b6:16:02:9f:77:1e:05:dc:c4:69:40:
         6b:6b:ca:b1:b5:d2:e2:9b:80:e6:7d:f2:15:52:f7:19:ba:63:
         84:69:ee:93:d0:86:ce:8a:dc:8b:1e:b8:f9:3c:91:40:2f:30:
         8f:4e:2d:07:d7:6b:25:08:c9:1d:65:d2:e3:46:6a:ca:aa:3f:
         a7:6a:73:0c:ec:f4:6e:3d:ff:86:21:02:3f:06:90:57:38:ec:
         5e:25:42:a4:01:7d:6d:56:65:8e:1f:53:4b:8d:d4:bf:63:1c:
         b7:b9:d6:91:3c:86:aa:da:43:c4:8e:bd:b3:24:4a:e2:36:7b:
         27:0e:c6:f7:81:37:ef:59:d9:ad:bd:44:db:f5:9c:e1:f5:90:
         f9:68:81:26:67:32:83:89:f3:4b:a0:8b:7b:8b:66:8c:c3:7d:
         89:a1:b7:e9:4d:4a:82:fe:7d:14:b1:0b:93:12:9a:3e:1a:22:
         da:cd:17:e3:93:92:a5:d3:5e:c1:53:b4:26:38:a1:d7:15:4f:
         50:e0:6f:c9:da:62:7e:c5:bb:c2:03:dc:cd:f3:f6:f2:52:52:
         d5:0a:fd:42:59:3e:7d:d7:72:2c:d6:41:72:a4:5c:7d:17:a6:
         6a:14:85:b3
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEGnqBsDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZjFiN2VkZjgyN2RiMTM2NmRlNTcxZjAwYjRhNWNmZGIyMzljYzYxMB4XDTIyMDEw
MTEzMDAxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGYyOTc0Yjc3MTAz
YmJiMTg1YzZlMzgyYjk3YWM5ZTkyY2MyZWNlYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANeVegRPEOyWgP0H0SepX7TTFzUZtKhThDwRYACIOzBcDyV/
s98F3JvtPhnzNUvx4fsZ6W/R6PoVuJxBaU/O0pRrRsQ2K7oVTGXhu9IKEimbT2sS
8H2yW+jt8IUDfbPfH33++r3pnG4DZIHh7eV6Fg0VEeAJcSaHSshC76TgXzr4Tj69
GgZetprvgwu5lufpRxqoObESKxn6WVYKCVHxigrPmvbx4diFC242Q80XD6YzG3UP
n/272znZSyHRrkztFQrriP1Kk6RNCPs9RmsA7x7o46d3RFwV5nVwu52k3gCsxM2m
Trd2NjmfdchmLJOpww2nepcJ0D43qiuofjTTThUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRPKXS3cQO7sYXG44K5esnpLMLs7DAfBgNVHSMEGDAWgBSPG37fgn2xNm3l
cfALSlz9sjnMYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2p4dC0zNEo5c1RadDVYSHdDMHBjX2JJNXpHRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvMmMyOTNjLTZkZjAtNDExMi1iODAwLTNjMThiYzg3YzY1Yy8x
L1R5bDB0M0VEdTdHRnh1T0N1WHJKNlN6QzdPdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
MmMyOTNjLTZkZjAtNDExMi1iODAwLTNjMThiYzg3YzY1Yy8xL2p4dC0zNEo5c1Ra
dDVYSHdDMHBjX2JJNXpHRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC7sbgMEAFD0QDANBgkqhkiG9w0B
AQsFAAOCAQEAcN3GkMEZfTdFfM12OSUp0xAMalh8IvtD7rYWAp93HgXcxGlAa2vK
sbXS4puA5n3yFVL3GbpjhGnuk9CGzorcix64+TyRQC8wj04tB9drJQjJHWXS40Zq
yqo/p2pzDOz0bj3/hiECPwaQVzjsXiVCpAF9bVZljh9TS43Uv2Mct7nWkTyGqtpD
xI69syRK4jZ7Jw7G94E371nZrb1E2/Wc4fWQ+WiBJmcyg4nzS6CLe4tmjMN9iaG3
6U1Kgv59FLELkxKaPhoi2s0X45OSpdNewVO0Jjih1xVPUOBvydpifsW7wgPczfP2
8lJS1Qr9Qlk+fddyLNZBcqRcfRemahSFsw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:25 2025 by rpki-client