Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/WUfO2Y2z6Cd1nJKEF2CwALkrA3Y.roa
File:                     WUfO2Y2z6Cd1nJKEF2CwALkrA3Y.roa (raw, json)
Hash identifier:          SF82GrQtpbBmbMHDX76z3K8m0MLOwFRDF9oxQ4oL/78=
Subject key identifier:   59:47:CE:D9:8D:B3:E8:27:75:9C:92:84:17:60:B0:00:B9:2B:03:76
Certificate issuer:       /CN=e06ebea64c464dff30177b57d6028b67d1ee862e
Certificate serial:       018258F22F9305DF211A333C33E45F5E4C84
Authority key identifier: E0:6E:BE:A6:4C:46:4D:FF:30:17:7B:57:D6:02:8B:67:D1:EE:86:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/WUfO2Y2z6Cd1nJKEF2CwALkrA3Y.roa
Signing time:             Mon 01 Aug 2022 10:27:23 +0000
ROA not before:           Mon 01 Aug 2022 10:27:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399618
IP address blocks:        37.77.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:58:f2:2f:93:05:df:21:1a:33:3c:33:e4:5f:5e:4c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06ebea64c464dff30177b57d6028b67d1ee862e
        Validity
            Not Before: Aug  1 10:27:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5947ced98db3e827759c92841760b000b92b0376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:92:f3:6a:ef:15:35:df:d4:1f:6a:f0:d6:
                    69:4b:98:ad:4d:ae:d1:c1:3d:5a:ac:b9:9d:eb:0f:
                    1c:95:4f:99:54:9f:0b:7e:62:8f:e0:b5:03:14:06:
                    c8:0d:6e:30:e7:95:8e:97:a5:70:ec:37:00:b1:69:
                    d1:c0:ab:09:df:95:82:05:47:2d:11:03:15:1e:a8:
                    80:c9:4b:7a:0f:e4:a1:28:c6:fc:32:43:4c:0d:41:
                    bb:73:bd:57:db:ed:f8:a5:fe:64:ee:6f:2a:50:3e:
                    ee:d8:2c:76:af:6b:39:94:e7:db:b5:46:76:ca:75:
                    c7:52:15:d2:cd:04:7f:48:ee:73:b6:49:d3:06:5a:
                    95:bf:6e:60:3d:7c:2f:c1:ef:19:5c:3a:04:95:67:
                    38:ba:5b:9c:bc:1a:b8:2b:f1:37:dc:a1:00:ed:17:
                    56:2d:30:4d:b5:c0:79:67:80:58:4e:61:1b:4e:6e:
                    3d:92:75:ef:94:d1:19:c2:ac:b5:fc:3e:32:c4:a1:
                    a1:45:10:ff:fc:97:1b:20:e2:53:c9:f0:26:b7:76:
                    92:d5:bb:23:8c:2b:da:f5:de:98:38:cd:97:92:49:
                    9f:73:8d:b9:c4:58:24:2c:4d:a6:85:47:70:b8:26:
                    68:fa:54:2c:0b:23:8a:86:09:18:6a:94:be:9e:f6:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:CE:D9:8D:B3:E8:27:75:9C:92:84:17:60:B0:00:B9:2B:03:76
            X509v3 Authority Key Identifier:
                keyid:E0:6E:BE:A6:4C:46:4D:FF:30:17:7B:57:D6:02:8B:67:D1:EE:86:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/WUfO2Y2z6Cd1nJKEF2CwALkrA3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:cb:14:24:d5:32:f5:42:18:ec:bf:ff:2b:08:f9:4b:c1:
         cb:ff:46:76:39:a1:43:8b:04:a1:8b:30:2e:f7:73:25:c2:57:
         fc:cb:49:54:73:6e:b7:3c:44:b5:9c:ff:a4:36:31:48:49:c9:
         18:0e:ce:e2:20:35:11:20:9b:a2:7a:1f:8e:d4:9c:43:5a:df:
         5c:f8:24:5a:b4:57:db:74:90:4a:90:8a:fe:77:36:1f:3a:33:
         e1:5c:2d:2c:d4:38:51:3f:02:3a:4e:b1:6d:7c:ec:49:f7:d0:
         13:84:1e:96:02:c6:07:7a:be:10:0c:ed:46:b6:29:30:7d:6d:
         b3:78:cf:00:9c:d2:65:fd:0c:90:2d:c1:98:d1:84:97:d9:da:
         7b:c5:af:27:75:a0:a1:43:bf:8c:92:ae:25:b6:f8:cb:19:0f:
         35:92:a9:c2:76:79:79:3b:53:5e:31:48:9c:b6:38:f8:d9:ea:
         86:21:ab:7c:c2:39:0a:ee:56:01:d4:42:f4:dc:0a:5b:28:24:
         b1:f2:c9:9a:d5:1f:33:80:33:84:bd:b9:73:60:b4:b3:63:cb:
         f5:a6:56:33:d4:98:83:4f:6f:05:65:4a:32:49:b1:8d:40:cf:
         d8:b0:2a:4b:15:3d:b0:51:40:fb:f7:f6:58:18:4f:bf:af:cb:
         28:66:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:14 2025 by rpki-client