Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/vFK1lduG3uOzYTR6NtzjKc1iTts.roa
File:                     vFK1lduG3uOzYTR6NtzjKc1iTts.roa (raw, json)
Hash identifier:          IRCEwtftyyZECOFzEDSj0IB10tDan+ZZ/z+kETiznQI=
Subject key identifier:   BC:52:B5:95:DB:86:DE:E3:B3:61:34:7A:36:DC:E3:29:CD:62:4E:DB
Certificate issuer:       /CN=aef910de392d35fca1f563956c5e734049f2ff23
Certificate serial:       01821593C5C48C9EED63640DE0B9AA3D196B
Authority key identifier: AE:F9:10:DE:39:2D:35:FC:A1:F5:63:95:6C:5E:73:40:49:F2:FF:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvkQ3jktNfyh9WOVbF5zQEny_yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/vFK1lduG3uOzYTR6NtzjKc1iTts.roa
Signing time:             Tue 19 Jul 2022 08:29:42 +0000
ROA not before:           Tue 19 Jul 2022 08:29:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30937
IP address blocks:        80.68.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:15:93:c5:c4:8c:9e:ed:63:64:0d:e0:b9:aa:3d:19:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef910de392d35fca1f563956c5e734049f2ff23
        Validity
            Not Before: Jul 19 08:29:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc52b595db86dee3b361347a36dce329cd624edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:0a:fb:ae:32:8e:6f:33:70:2d:09:57:04:
                    ec:96:14:98:40:27:66:ff:8b:b1:1b:3b:ec:1c:18:
                    a5:bd:44:0c:8b:c7:3d:7c:66:bf:bc:cf:2b:a0:2d:
                    c2:71:5c:3b:c9:de:97:d1:b7:7c:38:18:07:32:84:
                    0d:a7:e2:c6:d8:1d:f9:4c:3b:45:05:08:b7:b9:24:
                    75:1e:64:e1:d9:ee:28:7a:e4:05:f8:8b:86:58:ab:
                    a0:65:bd:b7:37:ce:d4:a5:2f:4c:38:e5:ab:d5:49:
                    93:ac:32:64:de:59:fb:ee:6c:dc:f8:6c:04:80:2d:
                    f6:7b:50:5a:b3:3e:46:7b:60:c8:2d:34:0f:88:c2:
                    0c:41:ee:af:6a:b2:fa:85:d0:2f:ae:cc:85:7a:15:
                    06:95:1f:41:ce:b6:56:fb:53:33:75:4e:73:b2:a1:
                    fa:06:ac:77:b0:14:e4:53:59:cc:8c:a9:df:a6:99:
                    56:7e:13:c7:2a:c4:a4:e2:1d:7b:3b:e2:dd:eb:b4:
                    10:00:35:bd:62:da:d0:a8:0a:ec:08:73:17:a0:7d:
                    ff:62:d3:a3:3c:91:89:80:20:68:00:c6:10:f7:99:
                    10:01:e4:26:48:63:52:4f:8a:b1:64:cc:d1:8a:8c:
                    63:32:37:34:c1:31:08:fb:42:08:5c:c6:b8:f7:14:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:52:B5:95:DB:86:DE:E3:B3:61:34:7A:36:DC:E3:29:CD:62:4E:DB
            X509v3 Authority Key Identifier:
                keyid:AE:F9:10:DE:39:2D:35:FC:A1:F5:63:95:6C:5E:73:40:49:F2:FF:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvkQ3jktNfyh9WOVbF5zQEny_yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/vFK1lduG3uOzYTR6NtzjKc1iTts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/7e8b2d-38ff-4c4c-96ed-15bae6ad6fa5/1/rvkQ3jktNfyh9WOVbF5zQEny_yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.68.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:4a:93:4f:26:a0:b0:a2:af:a8:d8:9c:dc:52:ab:02:30:
         1a:38:b5:89:bb:b9:65:1e:b0:80:1d:fe:e3:3a:d9:68:2b:f0:
         67:d3:c1:28:a9:3d:43:9b:7c:47:6d:57:56:91:b9:16:b6:49:
         1d:9d:43:08:6d:7b:4c:9a:37:fc:58:f7:35:23:4b:18:4e:c6:
         62:41:7e:e2:51:5d:25:36:72:e7:ee:fc:45:85:d8:eb:79:0c:
         f9:e6:d5:c4:6b:1b:76:74:9d:90:44:b0:d4:74:0c:f4:1b:3b:
         8c:aa:21:52:1f:ea:e9:f5:b9:0b:d4:15:96:bf:b8:95:39:75:
         2e:a7:e2:9f:5f:30:51:8a:f5:8d:81:a2:d5:28:88:39:87:be:
         f6:55:ea:6b:fb:bd:0b:79:52:ee:ce:41:37:63:ef:12:e2:48:
         08:b5:f4:87:7a:11:d9:9d:37:fe:03:1a:19:e2:c7:5e:01:05:
         5f:4b:7d:60:07:02:cd:60:08:69:db:08:f2:67:0d:bd:fe:ca:
         eb:11:60:14:3a:c3:3b:e5:11:d0:d6:85:01:05:f3:b1:8c:1b:
         44:8e:58:23:9a:a3:94:eb:6f:4e:ff:e2:8e:13:ac:e9:c1:ff:
         9b:76:bf:82:94:80:69:56:ac:eb:ec:5e:7b:49:e6:9a:18:a9:
         56:51:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:45 2025 by rpki-client