Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/zulTuN9RjTf7kSWnofEyjBQVe_M.roa
File:                     zulTuN9RjTf7kSWnofEyjBQVe_M.roa (raw, json)
Hash identifier:          hE1beBUKCCIis9J4aspiwvT7NFkZpJ86VfBMHogCKAo=
Subject key identifier:   CE:E9:53:B8:DF:51:8D:37:FB:91:25:A7:A1:F1:32:8C:14:15:7B:F3
Certificate issuer:       /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial:       03C5CC97
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/zulTuN9RjTf7kSWnofEyjBQVe_M.roa
Signing time:             Fri 04 Mar 2022 06:47:25 +0000
ROA not before:           Fri 04 Mar 2022 06:47:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207895
IP address blocks:        185.130.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63294615 (0x3c5cc97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
        Validity
            Not Before: Mar  4 06:47:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cee953b8df518d37fb9125a7a1f1328c14157bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:c3:54:ef:44:78:64:65:99:ab:aa:d1:83:
                    e5:fa:8c:76:a0:da:95:f1:fc:ef:9a:a5:95:b3:6f:
                    99:ab:1a:45:f2:b5:c1:c2:03:99:be:4e:09:ef:f8:
                    ac:83:2b:eb:a4:6c:1f:dc:30:47:c7:0c:7d:4a:ae:
                    c8:a8:58:ba:76:3e:ad:1f:eb:ba:77:f8:1f:35:d1:
                    2d:0b:e1:b8:55:5d:a8:d6:20:b2:66:43:a5:7f:6f:
                    1c:c0:20:9c:cf:d3:1b:8a:36:f2:21:e4:95:9c:05:
                    26:69:2a:c5:9e:87:94:d8:0a:88:26:64:3a:20:75:
                    31:fc:99:22:12:e4:f6:62:b1:69:59:ea:b9:b7:49:
                    f7:56:1f:29:57:19:ae:e2:2f:6d:b8:2a:3a:88:c1:
                    03:67:85:de:33:74:23:6e:10:cb:2f:e5:c1:dd:58:
                    31:ac:53:ad:c3:cc:5a:d6:2e:b8:a4:e6:21:1e:98:
                    de:43:13:b9:3c:a7:e8:aa:86:2c:52:f8:74:e0:fd:
                    44:02:78:df:a1:ff:2a:f0:be:d6:84:7a:d3:a8:89:
                    ff:cb:9e:74:44:e1:f9:c0:bf:f2:96:cf:9f:0a:43:
                    93:92:00:54:28:1b:37:15:b5:f1:e9:d7:92:57:93:
                    9e:74:aa:e6:d3:df:61:96:07:c6:f6:db:a9:c0:91:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E9:53:B8:DF:51:8D:37:FB:91:25:A7:A1:F1:32:8C:14:15:7B:F3
            X509v3 Authority Key Identifier:
                keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/zulTuN9RjTf7kSWnofEyjBQVe_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:98:e0:fb:1a:e4:f3:15:e3:7c:81:da:50:f8:7d:16:3d:a3:
         ee:ce:2c:de:ef:b0:dc:59:15:ec:b1:86:f6:58:6c:5a:a7:1d:
         0c:ef:d1:66:b0:4b:53:25:90:0b:f1:e3:a7:71:30:1d:62:54:
         d5:25:1f:a4:fd:79:48:ac:fc:6b:d1:6a:3a:dd:46:56:87:f1:
         f0:9d:cc:49:ed:5b:21:7c:62:98:17:e0:91:f1:34:9b:9e:36:
         fc:cd:5b:76:24:29:84:c4:79:84:58:44:43:84:3c:94:2b:33:
         44:21:2d:64:0e:37:f4:38:38:59:14:91:14:18:fb:18:77:2f:
         f6:50:f9:01:a3:c3:2d:e3:2a:bc:da:54:32:c1:48:0a:a3:dd:
         fd:bd:f6:4a:6d:76:6c:21:42:62:e1:bf:9a:be:66:89:48:38:
         fa:ea:00:3d:83:5d:5a:52:31:e9:eb:3a:81:66:1f:f6:9d:07:
         52:bc:45:9e:c7:10:ea:ac:97:6b:56:9d:4b:37:fd:cf:bc:d8:
         2d:10:35:06:9f:a3:5b:05:2a:71:90:ea:65:36:a6:99:9f:03:
         81:34:71:73:23:0e:46:32:94:db:ac:33:2c:0c:3f:2d:ac:3d:
         4f:ff:5d:2c:5e:ef:73:0b:2d:9e:60:26:a1:50:54:94:f8:e6:
         c3:3b:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:16 2025 by rpki-client