Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/EuvDhLfR76yTNs8Ypx9lbBC2pA0.roa
File:                     EuvDhLfR76yTNs8Ypx9lbBC2pA0.roa (raw, json)
Hash identifier:          UuHRnA5I2QEIHVul7FoCWprGDvVkT4MEnAt1T5B6ZQU=
Subject key identifier:   12:EB:C3:84:B7:D1:EF:AC:93:36:CF:18:A7:1F:65:6C:10:B6:A4:0D
Certificate issuer:       /CN=88796992df883be1bab2a52f45f5254ebb52b697
Certificate serial:       01EA8C56
Authority key identifier: 88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/EuvDhLfR76yTNs8Ypx9lbBC2pA0.roa
Signing time:             Tue 15 Feb 2022 19:25:42 +0000
ROA not before:           Tue 15 Feb 2022 19:25:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206766
IP address blocks:        195.16.74.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32148566 (0x1ea8c56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88796992df883be1bab2a52f45f5254ebb52b697
        Validity
            Not Before: Feb 15 19:25:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12ebc384b7d1efac9336cf18a71f656c10b6a40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:16:77:70:4e:84:e6:3b:94:13:9e:7f:7b:
                    89:c5:8a:44:e0:4a:08:91:17:83:7e:34:38:c7:7e:
                    42:22:f7:27:28:8b:2b:c3:82:78:a7:f1:e9:c0:b0:
                    6d:d5:e7:e6:1e:1f:19:df:d3:92:4a:cd:43:1d:99:
                    bf:48:58:c5:8e:19:56:76:1a:08:45:b4:a3:82:df:
                    3d:35:0e:6d:cf:ea:98:75:8e:80:9e:82:53:f0:c8:
                    b3:6f:44:3b:8e:f2:ac:a5:fb:00:f0:fd:32:74:78:
                    b4:c5:d4:26:61:5c:f7:a4:b4:bf:5a:71:76:5a:cc:
                    bd:b7:f4:2b:64:82:16:49:92:7e:61:c0:68:6a:5d:
                    fd:86:a4:16:4c:07:23:19:87:b6:d9:3c:85:9c:84:
                    8c:41:0a:68:ec:fe:27:01:51:33:5c:b9:b9:9e:84:
                    f2:ed:cf:3c:cd:a3:78:a7:bf:0f:d8:76:48:e4:e4:
                    7b:69:e3:0a:7c:9d:35:65:1d:15:d0:9b:b3:73:84:
                    6f:85:ae:4f:be:9f:eb:fb:a4:ea:8a:37:2f:13:b9:
                    62:a3:8a:61:9c:c9:d6:79:60:03:e8:13:54:c0:b7:
                    8d:05:9b:d1:fc:45:ae:8e:89:3d:9c:f2:6c:2c:fe:
                    e7:d3:ff:63:19:10:99:98:43:d6:d1:3c:0f:fa:ad:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EB:C3:84:B7:D1:EF:AC:93:36:CF:18:A7:1F:65:6C:10:B6:A4:0D
            X509v3 Authority Key Identifier:
                keyid:88:79:69:92:DF:88:3B:E1:BA:B2:A5:2F:45:F5:25:4E:BB:52:B6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHlpkt-IO-G6sqUvRfUlTrtStpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/EuvDhLfR76yTNs8Ypx9lbBC2pA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7e070e-7930-43c8-a66d-215c3d8f8914/1/iHlpkt-IO-G6sqUvRfUlTrtStpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.16.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:14:d7:75:4c:3f:d6:1b:97:0f:93:de:84:55:8d:78:39:b2:
         28:da:76:66:90:1a:34:22:e0:d9:51:7d:1e:1a:cc:b8:84:8b:
         c9:91:43:fc:c6:e0:b8:53:52:52:79:e8:b9:23:c9:42:de:34:
         2c:33:6b:8c:86:3d:4b:a4:39:4e:69:ff:b2:b4:ff:f5:fc:e4:
         af:3e:40:37:8f:79:a4:54:f8:3f:4e:b5:aa:95:3a:1d:04:0c:
         8e:e6:c7:62:8f:66:e9:68:41:9a:60:49:e1:0a:8f:1a:77:d1:
         02:57:5f:64:c7:2b:37:84:42:f8:7c:ee:f7:49:5d:1f:fe:fa:
         63:32:60:68:5c:44:89:36:f5:4e:09:18:85:03:73:24:01:61:
         ca:39:c8:af:54:ae:ad:eb:02:26:2a:59:a3:34:3a:95:47:be:
         e9:3d:91:03:a6:03:f6:43:60:70:29:6c:4f:bf:8f:34:7d:fc:
         f6:87:86:17:cb:9a:24:28:29:50:c0:f4:d7:77:48:e3:94:8e:
         e6:ce:35:5e:94:ca:c6:38:ec:c7:32:63:7f:be:29:24:9c:75:
         45:08:c6:0c:83:d1:2c:27:c7:3b:17:6e:e6:88:3e:c9:94:44:
         1e:af:81:bb:19:16:62:bc:f1:33:f7:4e:36:13:20:44:8c:75:
         18:d3:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:43:50 2025 by rpki-client