Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/xtQgChElc8mZlYvs7mx6gM10LM0.roa
File:                     xtQgChElc8mZlYvs7mx6gM10LM0.roa (raw, json)
Hash identifier:          BpgKhQtNwE7GLS2AEwVgCjfQkBC+hj7JsBYZXmDsLKk=
Subject key identifier:   C6:D4:20:0A:11:25:73:C9:99:95:8B:EC:EE:6C:7A:80:CD:74:2C:CD
Certificate issuer:       /CN=583f4053e432c62dce0460dbecb17c8669c7b502
Certificate serial:       0A022FC5
Authority key identifier: 58:3F:40:53:E4:32:C6:2D:CE:04:60:DB:EC:B1:7C:86:69:C7:B5:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/xtQgChElc8mZlYvs7mx6gM10LM0.roa
Signing time:             Sat 01 Jan 2022 14:58:15 +0000
ROA not before:           Sat 01 Jan 2022 14:58:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47203
IP address blocks:        185.94.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167915461 (0xa022fc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583f4053e432c62dce0460dbecb17c8669c7b502
        Validity
            Not Before: Jan  1 14:58:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6d4200a112573c999958becee6c7a80cd742ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:ce:f7:5c:ad:ff:f4:11:0b:bb:af:20:d7:
                    60:bd:d6:93:d5:33:e6:b6:a6:4e:0a:88:ca:7e:9a:
                    a6:29:71:e5:de:16:a6:98:82:46:d4:c1:85:ff:c2:
                    8e:2a:e3:70:b5:5e:e2:ef:2a:22:fc:54:25:29:ac:
                    61:43:38:f3:6a:43:44:3e:cc:b8:36:24:75:62:17:
                    d0:1f:c2:2d:61:5e:36:d7:03:ed:79:f4:11:fe:9b:
                    94:e4:b5:8e:f3:9e:fe:68:bc:be:13:25:6a:d7:99:
                    3f:50:d5:92:9b:0c:e6:db:9c:2c:fe:4a:a4:c9:b8:
                    d7:aa:76:31:70:4e:64:08:5f:e8:70:ae:b3:35:4c:
                    a3:c2:47:11:ee:95:c1:45:ea:5a:a5:17:3d:0b:33:
                    d1:cf:8f:95:7a:55:bd:95:a2:9a:0d:e2:7e:08:7a:
                    f4:90:ac:ce:d2:e3:88:ac:f2:40:ff:02:0a:ea:6a:
                    a9:a3:d7:a8:0a:41:94:c4:d5:34:84:e0:86:5e:47:
                    f4:53:e1:78:c0:9b:53:36:46:0c:ca:f5:7c:66:e1:
                    17:ff:6e:e7:4f:62:67:16:a9:94:d7:3f:f7:9a:fa:
                    c6:57:ee:32:46:0d:89:be:24:c8:04:4f:b2:31:be:
                    d9:fd:fc:2d:38:4e:19:31:77:60:eb:b8:ce:cc:0c:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D4:20:0A:11:25:73:C9:99:95:8B:EC:EE:6C:7A:80:CD:74:2C:CD
            X509v3 Authority Key Identifier:
                keyid:58:3F:40:53:E4:32:C6:2D:CE:04:60:DB:EC:B1:7C:86:69:C7:B5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/xtQgChElc8mZlYvs7mx6gM10LM0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:d7:e8:56:53:12:55:43:db:6d:47:13:60:92:ca:b5:24:c6:
         57:19:07:e7:79:19:0c:fc:20:7e:72:9f:04:3e:cd:93:76:15:
         70:62:e1:72:fb:e2:31:39:85:65:06:da:db:f7:bc:95:76:f8:
         9d:51:e5:65:b8:02:9d:3b:5e:b3:1d:b7:81:ee:94:85:55:bb:
         13:d9:e2:9f:c6:ed:fd:67:f5:29:63:60:e1:93:72:d9:74:47:
         a8:d9:26:6e:64:0e:46:94:b2:5a:aa:f3:84:93:bd:4b:8b:a4:
         82:f5:d3:33:4e:19:ed:da:6e:d4:cb:f0:01:7c:97:44:a4:cd:
         1d:d8:e7:b9:bd:54:0f:c4:87:ea:e7:5b:25:69:47:04:ed:a7:
         77:f9:96:5f:52:59:74:8f:d8:10:99:f7:4a:45:df:44:80:19:
         3e:04:53:2e:d4:5e:a2:e5:df:dc:d7:6f:3d:f2:83:96:06:3e:
         9e:69:e5:af:f6:e7:89:02:dd:0b:08:39:8d:68:15:a4:9d:80:
         1a:fd:ec:08:81:85:e3:48:59:8f:13:b7:2f:e3:dd:76:ea:b1:
         cb:06:f3:c2:db:b1:90:1e:83:a6:ae:81:f5:7f:5c:61:3c:03:
         2f:4c:90:c9:a9:4a:f8:fe:fc:55:e3:f8:f9:53:7f:0e:19:2c:
         f0:89:31:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:22 2025 by rpki-client