Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EUfATmkq1EdILfqvyPSZpu5gYIY.roa
File:                     EUfATmkq1EdILfqvyPSZpu5gYIY.roa (raw, json)
Hash identifier:          EymBkyrzbsAzI6nGiRxDgokuIHCyxUG6foppebGgSuY=
Subject key identifier:   11:47:C0:4E:69:2A:D4:47:48:2D:FA:AF:C8:F4:99:A6:EE:60:60:86
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       01942220083E9025B2069516D23755CD1D50
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EUfATmkq1EdILfqvyPSZpu5gYIY.roa
Signing time:             Wed 01 Jan 2025 13:48:32 +0000
ROA not before:           Wed 01 Jan 2025 13:48:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216127
IP address blocks:        185.78.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:08:3e:90:25:b2:06:95:16:d2:37:55:cd:1d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Jan  1 13:48:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1147c04e692ad447482dfaafc8f499a6ee606086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:ed:13:ca:4b:41:c9:d0:d1:1e:e2:fd:6c:
                    bf:6d:be:e2:df:c7:c1:14:81:48:ca:13:4d:ca:e8:
                    66:f6:ec:c6:4e:22:3b:e2:8b:63:df:de:27:49:1d:
                    c2:fe:b4:67:c1:43:96:50:47:ae:88:26:2a:80:74:
                    0a:4b:8c:a4:fd:ee:7f:6e:bd:6d:68:b7:68:ea:4d:
                    c4:d9:ff:88:0d:bf:6e:e2:04:19:8f:6f:fb:ad:8b:
                    ac:69:b1:51:18:d6:f3:67:53:f7:76:dd:de:54:92:
                    72:b9:b2:50:41:fc:c7:41:9c:2c:f7:76:d6:5b:0e:
                    aa:32:35:e1:b3:05:9f:9c:71:e0:5c:bd:95:fc:5d:
                    d1:6e:27:76:ac:1a:75:97:a7:82:07:43:5c:3e:a4:
                    b4:90:ab:7e:93:0d:bf:ab:ec:39:b0:2f:69:f2:37:
                    e8:9e:c8:05:b8:62:ef:ab:02:af:f6:b7:ed:0a:14:
                    6e:ea:bd:4b:6b:e7:6f:d0:9b:62:f6:d5:c5:9d:53:
                    6b:72:3f:4f:64:40:c4:4f:48:49:51:08:6d:56:04:
                    96:38:e8:86:ed:0b:29:b4:1f:ff:17:54:bd:79:20:
                    1b:55:ac:9a:33:a3:d2:69:4b:f1:30:87:2e:8e:2a:
                    51:e5:1a:ea:11:a0:cb:52:50:90:28:db:53:3c:9f:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:47:C0:4E:69:2A:D4:47:48:2D:FA:AF:C8:F4:99:A6:EE:60:60:86
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/EUfATmkq1EdILfqvyPSZpu5gYIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:bf:e3:fb:0b:1e:c6:91:18:38:f2:85:7f:0e:d6:28:d0:d4:
         63:47:6e:75:8d:06:4b:53:df:b1:29:13:e1:a6:2f:3c:52:e5:
         29:0d:81:de:48:af:f0:26:c1:30:e2:44:d9:0f:20:88:fb:ad:
         fe:11:7f:47:3a:c9:3c:90:cc:b1:ce:d4:36:4c:c2:bd:00:64:
         84:34:d2:eb:e3:18:79:03:cf:90:8d:bb:9d:a4:81:d4:5d:10:
         15:89:49:e0:8f:ee:3c:33:65:62:83:20:aa:37:f5:0e:08:ed:
         a0:eb:ce:3a:ce:f3:c8:f0:0f:5c:2b:e4:c8:8c:58:9c:b2:5f:
         3a:6b:85:0c:74:09:79:a9:8a:45:af:09:36:5d:1e:0c:ed:fe:
         d7:61:b5:88:b5:a2:fd:78:92:0a:86:4f:7d:04:72:fe:c4:b7:
         63:62:74:69:cd:2d:81:a7:3a:22:52:bc:4c:20:b4:cb:9a:f1:
         d7:ba:da:4c:0a:8f:68:32:3a:0f:aa:d1:ee:e7:e3:34:4f:eb:
         3a:cb:94:da:25:e6:41:e5:4e:6b:f6:d9:19:71:5e:0c:fa:61:
         0c:e7:72:0f:58:d4:24:36:51:60:23:77:9e:d8:d2:d1:f3:c2:
         c0:98:7d:66:41:dd:e1:e1:5d:fb:47:93:88:64:99:5e:a8:c7:
         ad:47:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:36 2025 by rpki-client