Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/m7zCSefWf6DWI29q0ryI5cUmrCc.roa
File:                     m7zCSefWf6DWI29q0ryI5cUmrCc.roa (raw, json)
Hash identifier:          kH1G/L949Cfg9AkUrJq5JhddXkMWt30HFpCE4oB243c=
Subject key identifier:   9B:BC:C2:49:E7:D6:7F:A0:D6:23:6F:6A:D2:BC:88:E5:C5:26:AC:27
Certificate issuer:       /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial:       0185734CC60A554C15EE6BCE8AE2D75E1F9B
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/m7zCSefWf6DWI29q0ryI5cUmrCc.roa
Signing time:             Mon 02 Jan 2023 16:24:49 +0000
ROA not before:           Mon 02 Jan 2023 16:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400384
IP address blocks:        80.76.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:4c:c6:0a:55:4c:15:ee:6b:ce:8a:e2:d7:5e:1f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
        Validity
            Not Before: Jan  2 16:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bbcc249e7d67fa0d6236f6ad2bc88e5c526ac27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:a9:ef:03:2e:2a:18:9a:19:ea:34:f1:59:
                    a6:f7:98:c0:f2:a8:b4:76:a7:f6:a6:69:d1:04:e5:
                    f0:a7:b8:9e:41:f7:69:24:6f:ed:cb:b9:0b:81:3b:
                    89:2a:c2:7e:fc:5c:0e:c2:cb:b9:06:4f:c5:b1:da:
                    a9:31:56:2c:78:41:41:c9:8e:e3:c7:12:16:2c:28:
                    69:3a:49:9b:06:7a:2c:e5:a4:fa:10:96:ff:e6:8e:
                    c5:64:75:d6:c9:3f:1c:52:db:8f:79:ad:42:f2:74:
                    29:d4:5e:2a:df:a3:9c:66:42:18:53:af:fe:eb:08:
                    e8:d1:59:04:7c:27:2f:40:de:fb:88:bb:3e:b3:19:
                    83:c2:f8:cb:70:3c:81:79:54:bd:be:75:46:5b:97:
                    2c:c6:66:fe:18:a8:74:0a:92:42:52:e7:32:25:c6:
                    69:b9:b1:40:ff:b8:96:5f:e7:21:8f:49:31:b7:ac:
                    0f:64:a3:63:51:2b:1d:c3:70:bf:6b:a2:29:41:c5:
                    dd:47:9d:ec:23:72:76:db:1c:53:29:3f:22:36:64:
                    ab:bc:13:de:8a:f7:10:7d:83:4e:18:bd:12:33:2c:
                    4e:c7:2e:04:c4:eb:4c:16:60:b7:18:a6:d2:f3:f4:
                    38:1a:e3:3d:d3:13:86:2d:5f:58:6b:e7:69:62:4d:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BC:C2:49:E7:D6:7F:A0:D6:23:6F:6A:D2:BC:88:E5:C5:26:AC:27
            X509v3 Authority Key Identifier:
                keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/m7zCSefWf6DWI29q0ryI5cUmrCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:82:50:ed:fb:57:e7:27:57:ba:05:ac:1f:35:7a:7c:38:16:
         e8:8c:6d:4e:16:40:c6:ce:bf:0b:d1:a8:81:5f:f6:0a:8f:48:
         b3:d7:77:de:74:03:bb:d2:a9:f8:39:6e:63:a3:5a:fb:e6:29:
         2a:24:14:10:25:6e:95:f7:b1:5e:57:8f:a8:a0:c0:21:bf:ac:
         1e:cd:4e:6f:8e:95:85:68:de:1e:22:8b:62:61:9d:d4:23:df:
         12:97:33:7e:dc:49:51:45:49:4a:cb:22:f0:d0:19:16:72:ac:
         96:54:aa:5d:2c:ab:33:bf:e0:55:dc:5c:7d:79:f5:58:c1:95:
         d5:13:8c:28:14:e9:5f:a9:85:ff:f6:33:24:e1:39:bf:ff:03:
         94:c0:26:a8:7c:b2:e2:de:70:58:2e:ee:c9:de:2e:8a:06:cd:
         a3:1f:7e:22:86:5a:b0:58:da:dc:9f:44:3f:20:b7:e2:ef:d8:
         af:fe:59:24:1c:6a:4a:38:4d:29:b4:eb:17:c3:17:b7:90:ac:
         92:62:b5:ac:14:d5:c5:97:dd:f0:fb:e4:47:45:5d:b3:b2:72:
         9a:12:d8:9e:f5:69:f9:53:a8:f0:00:46:7d:fe:41:8d:b9:7a:
         73:b6:79:d3:a9:df:78:32:ae:45:1d:a8:d9:2b:ba:bc:a2:06:
         0d:df:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:08:46 2025 by rpki-client