Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/EUwVS2lfivzgb88Q__eQm3BCrAI.roa
File:                     EUwVS2lfivzgb88Q__eQm3BCrAI.roa (raw, json)
Hash identifier:          Z+JEMYJEoObVjtw7qvJ65p8x+2Bwynxk4rlh8qsDhVY=
Subject key identifier:   11:4C:15:4B:69:5F:8A:FC:E0:6F:CF:10:FF:F7:90:9B:70:42:AC:02
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       018A8BFBCF40A99080DF1FE10D00C39D85D3
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/EUwVS2lfivzgb88Q__eQm3BCrAI.roa
Signing time:             Wed 13 Sep 2023 00:40:50 +0000
ROA not before:           Wed 13 Sep 2023 00:40:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54900
IP address blocks:        45.139.208.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8b:fb:cf:40:a9:90:80:df:1f:e1:0d:00:c3:9d:85:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Sep 13 00:40:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=114c154b695f8afce06fcf10fff7909b7042ac02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b2:8b:97:98:c3:07:33:0f:dc:b7:8e:bc:93:
                    93:a6:55:0a:c8:63:e8:4f:2f:8d:7c:63:f0:92:3a:
                    89:5d:e1:aa:94:c7:46:f3:d4:de:c7:5d:aa:b4:b1:
                    ea:96:27:ec:1c:94:2a:f0:f6:ac:fc:3e:ca:e3:ca:
                    33:7c:65:8a:68:1f:89:70:7b:b6:82:ad:bf:93:d7:
                    e5:a2:04:ac:4f:8f:7c:8d:c3:65:ff:f0:7f:6e:b9:
                    36:49:96:ba:09:20:4b:fb:ef:a3:a0:d2:5b:35:32:
                    ca:66:fa:b6:7e:0b:55:6a:35:97:31:fa:ba:fd:a4:
                    c6:c4:ac:5e:06:f1:8b:1f:46:da:82:7d:bb:ba:20:
                    dd:bc:03:66:b2:f6:ae:75:6e:7b:79:9c:1a:92:0f:
                    93:23:11:d2:87:d0:e9:de:ab:e2:e6:32:e8:d7:39:
                    79:3d:c2:13:95:47:06:3b:4e:46:58:f5:19:df:81:
                    39:19:50:af:6c:cb:2d:6e:b7:7c:ef:1a:38:6b:b7:
                    f5:b2:fa:84:92:39:40:4e:2b:9d:c9:08:38:13:14:
                    d7:9d:88:07:ab:57:68:d7:2d:9c:8d:3b:f8:9a:28:
                    60:e2:8f:87:36:11:f1:c3:e8:62:4d:9d:56:e5:10:
                    0c:14:c4:8b:c3:be:23:1e:89:29:8d:01:8d:f7:d7:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:15:4B:69:5F:8A:FC:E0:6F:CF:10:FF:F7:90:9B:70:42:AC:02
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/EUwVS2lfivzgb88Q__eQm3BCrAI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:fa:5b:42:95:e3:08:7f:7c:16:1f:fe:2e:35:73:78:a8:5b:
         fa:6e:4b:49:30:c2:8a:ee:db:e6:69:b1:5f:6b:45:bf:bf:49:
         67:5e:d6:a4:bc:4f:d2:22:70:f9:9c:6f:a0:78:13:30:c5:b5:
         42:ca:a6:d5:a1:7f:dc:7f:d9:60:e2:0e:93:42:60:c6:31:26:
         2b:3e:c1:14:ea:4d:8f:8a:7d:fd:5b:c2:f2:ee:ab:94:53:27:
         2e:25:72:da:42:c9:90:0f:80:4d:23:26:52:37:27:e3:3f:bd:
         9c:0a:a7:b9:10:3e:97:26:71:b5:f3:82:a2:43:fb:3e:df:29:
         46:2b:c0:d0:21:3c:a3:35:7f:79:bc:17:fd:e0:e7:5c:da:d9:
         1e:c8:79:a1:eb:ed:dc:53:89:6b:ce:c4:c5:86:fa:74:b2:61:
         c7:7c:50:92:bd:01:ac:d6:6b:d9:e5:69:97:2a:6a:8a:60:e7:
         20:c7:15:21:6d:15:43:f1:7b:e1:78:1d:93:b9:a3:7f:08:e2:
         57:e9:2d:9a:ee:60:af:7a:70:b1:0a:2c:9f:03:d0:df:8e:d3:
         4f:17:4f:7a:73:a5:18:3f:08:c7:1f:f8:f0:15:6f:c1:38:02:
         3a:73:2e:37:86:68:f3:39:18:a2:7c:73:e2:f7:55:6c:4e:28:
         17:9e:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:36 2025 by rpki-client