Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wwmauHS-PnCCwp0FY4mkzjMmXtA.roa
File:                     wwmauHS-PnCCwp0FY4mkzjMmXtA.roa (raw, json)
Hash identifier:          /B29fJDdfq7kG6dby3pT36U9CLvboCPRzgG66gw+xBc=
Subject key identifier:   C3:09:9A:B8:74:BE:3E:70:82:C2:9D:05:63:89:A4:CE:33:26:5E:D0
Certificate issuer:       /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial:       01857227CBCDCF626AFBDE3EA5F6ACB2DC35
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wwmauHS-PnCCwp0FY4mkzjMmXtA.roa
Signing time:             Mon 02 Jan 2023 11:04:48 +0000
ROA not before:           Mon 02 Jan 2023 11:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49340
IP address blocks:        2a00:1c78:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:27:cb:cd:cf:62:6a:fb:de:3e:a5:f6:ac:b2:dc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
        Validity
            Not Before: Jan  2 11:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3099ab874be3e7082c29d056389a4ce33265ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:54:a1:45:7e:dc:2b:2a:01:c6:4c:6f:f7:
                    a2:f1:97:ba:a4:b0:54:71:b6:c6:af:69:6e:e4:30:
                    34:be:81:71:89:5a:71:64:71:db:16:e3:4d:ad:60:
                    f0:51:fe:f9:27:9c:82:97:c3:48:4c:08:04:fb:9c:
                    d7:c2:49:ec:28:c0:85:54:54:ce:a3:df:87:1b:ad:
                    c4:ef:1d:70:fa:cc:d9:7b:3c:71:f8:88:09:2e:af:
                    99:94:23:5f:cf:f3:55:17:6f:17:3d:44:f7:ff:4b:
                    8c:c8:e0:88:26:9b:fb:db:47:ed:66:88:80:20:4d:
                    b7:b3:49:67:3c:4c:0a:40:7b:c7:1d:a6:5f:29:f9:
                    ed:e8:0b:87:8c:71:fc:b5:39:39:d7:62:f5:d0:4b:
                    c7:a8:b5:d0:a8:76:21:23:e0:ad:22:56:2e:dd:c3:
                    fd:64:f8:fd:d7:36:02:4f:e2:44:89:1c:5e:2d:0b:
                    80:84:62:56:f5:e6:3f:ef:c1:06:83:32:e1:0c:a9:
                    39:2d:7e:55:f5:e5:c7:76:5e:c0:da:58:0d:e5:ef:
                    21:5b:26:be:57:09:fb:e2:b5:a4:cf:71:e4:97:75:
                    19:b8:b7:9f:57:50:80:a1:d5:5a:2d:61:cf:bc:51:
                    45:cf:8d:41:4b:d3:2e:5d:83:31:4f:bc:eb:82:59:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:09:9A:B8:74:BE:3E:70:82:C2:9D:05:63:89:A4:CE:33:26:5E:D0
            X509v3 Authority Key Identifier:
                keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wwmauHS-PnCCwp0FY4mkzjMmXtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1c78:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:da:e1:be:a1:d9:f6:cc:d3:0c:74:3c:1f:2b:ac:e0:f7:83:
         d1:fe:35:b9:55:fb:2f:3b:d6:c0:0d:3f:7e:30:9e:b7:63:40:
         24:66:db:86:db:95:83:eb:5c:59:26:df:81:1b:7f:07:cc:0e:
         7f:5c:2b:14:fe:fc:75:a3:61:8c:42:ea:4b:bd:b2:39:52:7f:
         d6:31:98:52:e1:3d:7a:cd:e2:62:38:5b:88:00:7a:e0:69:cc:
         ed:eb:0c:07:cb:17:57:e5:8e:1f:52:61:cb:9e:3d:57:af:91:
         11:76:7d:95:36:fd:79:7b:6a:dd:5b:87:3a:16:87:fd:05:5a:
         64:c8:ae:7b:9f:de:b7:5c:cf:0e:38:ca:3c:6d:27:bc:ca:28:
         2c:22:0c:13:73:97:eb:e8:28:a0:d4:54:7a:99:bd:c3:b6:91:
         74:2a:83:9d:23:d6:e4:a0:12:ed:27:bb:0b:6d:16:32:8a:86:
         8e:2b:12:0a:96:7b:cc:51:03:b5:1e:1e:9d:54:a2:b1:46:88:
         75:30:de:28:14:c8:75:20:e8:e6:83:b8:a3:ee:bf:0b:01:04:
         da:91:d5:3c:4e:e7:aa:3f:7e:07:28:79:eb:89:5e:39:3d:7d:
         73:f5:26:4c:75:ed:21:e9:e5:53:17:a9:59:2e:a3:21:b0:db:
         5d:1d:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:28:01 2025 by rpki-client