Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/wkxNlzq1QAtaUf7pBhCmSPO3qVs.roa
File:                     wkxNlzq1QAtaUf7pBhCmSPO3qVs.roa (raw, json)
Hash identifier:          xF4sFLUOCUG9XSsbz+W7xEXHIRD9vlzIKhqvBa/i8lk=
Subject key identifier:   C2:4C:4D:97:3A:B5:40:0B:5A:51:FE:E9:06:10:A6:48:F3:B7:A9:5B
Certificate issuer:       /CN=244d7a389964b64f8ea3572b6a7963b89413d7d9
Certificate serial:       0373E0A5
Authority key identifier: 24:4D:7A:38:99:64:B6:4F:8E:A3:57:2B:6A:79:63:B8:94:13:D7:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JE16OJlktk-Oo1cranljuJQT19k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/wkxNlzq1QAtaUf7pBhCmSPO3qVs.roa
Signing time:             Sat 01 Jan 2022 11:55:51 +0000
ROA not before:           Sat 01 Jan 2022 11:55:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44486
IP address blocks:        176.118.193.0/24 maxlen: 24
                          2a0c:a300::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57925797 (0x373e0a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244d7a389964b64f8ea3572b6a7963b89413d7d9
        Validity
            Not Before: Jan  1 11:55:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c24c4d973ab5400b5a51fee90610a648f3b7a95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:d3:49:f7:b6:20:1d:4a:37:be:98:9a:27:
                    d4:4f:cd:d6:b2:ca:3c:2b:26:2e:81:43:37:f5:cf:
                    67:30:f5:e1:f1:1f:53:4e:e7:ba:43:7e:3d:28:f9:
                    8c:16:db:fa:85:c8:09:e6:01:20:0f:6b:df:01:b0:
                    85:48:ca:10:31:49:79:d8:85:15:31:34:49:70:a5:
                    63:24:d2:28:30:11:f5:96:e1:49:86:f6:3c:a4:50:
                    f0:a2:db:df:ec:a9:cb:38:23:11:f7:29:83:f8:46:
                    de:9f:fe:0d:d9:54:c7:a9:32:00:4d:f1:4f:d7:31:
                    50:87:c9:30:bd:22:dd:0d:4d:be:e1:39:4b:72:f5:
                    28:df:50:1d:1b:30:ca:b1:c2:93:d8:db:b3:ec:ff:
                    8c:30:8e:1d:12:11:52:e7:ef:15:df:0c:40:17:55:
                    20:46:72:c9:38:b4:04:0a:62:39:69:b2:e4:8d:04:
                    45:34:a4:29:53:b6:f6:0b:4a:67:53:66:21:e5:36:
                    4e:a9:92:29:84:28:ad:b0:5d:9e:24:bd:e0:8c:47:
                    64:92:b3:fa:af:be:59:6c:66:ee:26:d2:c3:16:6a:
                    f6:1e:aa:63:59:14:ec:7d:da:95:d9:51:01:30:39:
                    1d:4e:ae:a6:d8:50:6a:32:3b:f1:45:54:18:4d:9f:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:4D:97:3A:B5:40:0B:5A:51:FE:E9:06:10:A6:48:F3:B7:A9:5B
            X509v3 Authority Key Identifier:
                keyid:24:4D:7A:38:99:64:B6:4F:8E:A3:57:2B:6A:79:63:B8:94:13:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JE16OJlktk-Oo1cranljuJQT19k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/wkxNlzq1QAtaUf7pBhCmSPO3qVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/JE16OJlktk-Oo1cranljuJQT19k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.118.193.0/24
                IPv6:
                  2a0c:a300::/29

    Signature Algorithm: sha256WithRSAEncryption
         a8:1f:aa:80:71:17:7a:d2:91:2a:cd:8f:cd:0c:eb:2a:c9:8a:
         fd:b9:fe:d2:5a:a5:c7:4a:00:8a:0d:a9:4f:67:b2:32:01:9e:
         27:d9:88:08:25:6d:26:ea:60:a8:98:0f:6e:2d:cc:4a:77:b1:
         03:b0:a4:f8:df:8e:f9:eb:8a:c8:2e:43:f7:97:06:5a:cc:64:
         f4:15:45:d4:c4:d6:95:5b:21:2e:06:48:16:a7:12:46:17:d7:
         77:ce:0d:cb:0c:30:8b:89:3e:ee:26:b3:3f:2a:36:c0:15:d3:
         1a:93:5f:fe:48:66:99:94:13:99:6b:d6:05:86:89:16:3e:c5:
         ab:1c:7a:2a:22:4c:5e:2d:90:69:1b:af:a8:7f:74:ff:4c:6b:
         b1:02:08:1e:6e:02:4f:11:1b:17:4b:1a:20:92:c6:cc:4c:9f:
         b8:a9:0a:ca:0e:66:41:64:95:c5:ea:e9:f3:f6:51:ff:a1:e1:
         e8:cc:80:ff:3f:01:c6:bd:d2:6c:ec:d7:02:73:67:f0:00:c6:
         46:19:5f:30:c6:1a:14:da:6a:b5:ee:cb:11:d1:fa:ed:39:3e:
         35:16:04:d1:cd:20:2b:30:f0:ef:f3:de:d1:38:05:df:50:6d:
         c6:7a:4d:e9:d0:e1:81:5a:bb:8a:3d:d7:dd:50:bd:f2:d6:dd:
         a9:db:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:51 2025 by rpki-client