Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/yjMCuNcGwZZVv9r41ruVyOLTmxE.roa
File:                     yjMCuNcGwZZVv9r41ruVyOLTmxE.roa (raw, json)
Hash identifier:          jdGhJ+13Sn6QsYnd5Lpekpnmj+O5D0OZVLaFEaGUcBo=
Subject key identifier:   CA:33:02:B8:D7:06:C1:96:55:BF:DA:F8:D6:BB:95:C8:E2:D3:9B:11
Certificate issuer:       /CN=69bc6e5f486c9ad89c92ae303bdbe16c85f97ec8
Certificate serial:       908680
Authority key identifier: 69:BC:6E:5F:48:6C:9A:D8:9C:92:AE:30:3B:DB:E1:6C:85:F9:7E:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abxuX0hsmtickq4wO9vhbIX5fsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/yjMCuNcGwZZVv9r41ruVyOLTmxE.roa
Signing time:             Sat 01 Jan 2022 03:53:10 +0000
ROA not before:           Sat 01 Jan 2022 03:53:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57013
IP address blocks:        194.26.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9471616 (0x908680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69bc6e5f486c9ad89c92ae303bdbe16c85f97ec8
        Validity
            Not Before: Jan  1 03:53:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ca3302b8d706c19655bfdaf8d6bb95c8e2d39b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:76:5f:6e:88:47:a0:e4:d5:5f:b7:12:7e:62:
                    9f:06:63:00:19:08:dd:04:ad:37:e8:36:86:a6:1c:
                    8b:e5:45:b9:7b:1b:59:e5:73:f8:d6:96:29:10:77:
                    b5:2a:a6:8e:4a:db:4c:9c:06:c6:1d:37:e7:16:04:
                    f3:58:c6:bb:20:c2:d5:5f:0f:16:bf:77:2c:f4:aa:
                    89:ec:2a:fe:fe:b8:98:b4:e1:8a:ad:33:36:d3:5f:
                    22:e8:64:43:90:94:d7:19:ad:cd:b8:87:7b:c2:16:
                    fb:93:e5:54:80:a2:f9:a7:58:35:bb:5a:3a:8d:5f:
                    ca:6c:22:7d:51:94:97:32:27:5d:0e:5f:1c:b6:2b:
                    e5:5c:27:bc:0c:98:f1:92:25:9f:18:c1:3e:15:00:
                    5f:07:4b:97:99:bf:e2:8a:d0:61:a2:fc:5b:6f:25:
                    17:e0:53:da:6e:5c:df:f4:8d:ab:b5:07:f1:c4:d3:
                    70:f1:54:77:e2:c6:8b:06:1f:57:57:18:62:e1:70:
                    bc:b4:70:c4:b1:c8:06:34:50:14:84:6c:d4:51:04:
                    17:6a:b7:ef:03:57:24:26:96:10:c2:33:07:ec:5d:
                    df:43:61:78:1a:a9:5f:54:a3:9e:e9:98:83:a0:e0:
                    9b:51:36:c4:66:e7:4d:36:48:e7:0e:99:2a:df:6c:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:02:B8:D7:06:C1:96:55:BF:DA:F8:D6:BB:95:C8:E2:D3:9B:11
            X509v3 Authority Key Identifier:
                keyid:69:BC:6E:5F:48:6C:9A:D8:9C:92:AE:30:3B:DB:E1:6C:85:F9:7E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abxuX0hsmtickq4wO9vhbIX5fsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/yjMCuNcGwZZVv9r41ruVyOLTmxE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/abxuX0hsmtickq4wO9vhbIX5fsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:d0:7f:3f:51:3b:52:c1:f3:10:1d:d7:09:7c:e7:a5:ab:
         6b:97:75:d2:49:99:8a:04:e7:b8:c6:d1:55:61:37:83:1f:93:
         fa:55:2a:a5:58:75:23:ff:c7:29:f1:e5:30:5a:05:4a:5a:7b:
         53:de:b5:39:3f:04:2c:1e:ac:93:32:66:71:9a:e1:b6:0c:3b:
         e4:cd:e7:21:6f:10:68:03:f1:51:3c:5c:70:cb:ae:fd:dc:b3:
         c2:36:a2:6e:6f:8f:0c:26:b2:96:36:33:9a:e9:e5:da:69:93:
         16:4f:a2:a0:fb:3e:ca:36:f7:53:71:25:4d:f1:f7:5e:36:34:
         b5:68:b7:70:49:12:32:b1:f2:d2:b4:ab:f4:cd:36:fe:e7:a3:
         a6:3f:47:77:06:db:86:88:49:02:b5:0a:27:c7:3f:c4:56:5f:
         46:e4:ee:87:92:53:42:7e:64:45:f4:ce:30:26:f3:75:75:96:
         78:23:18:e4:a8:c5:3e:b0:4a:c1:56:a3:ed:19:f7:76:78:95:
         82:f4:cb:6e:eb:3a:f1:d7:37:89:46:36:ea:6a:62:03:9a:9a:
         cc:34:8f:a5:8a:65:b1:be:a0:e2:50:78:7e:5a:e5:36:fd:9a:
         7f:c6:37:86:ed:0a:61:16:20:17:fd:9c:f5:6a:eb:5c:66:7b:
         69:ff:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:45 2025 by rpki-client