Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/Ny4iCDm4TZuGChxos_tSwDqXY7s.roa
File:                     Ny4iCDm4TZuGChxos_tSwDqXY7s.roa (raw, json)
Hash identifier:          T1d0eZW9kXm4lWby1z496mZs0UhjHmta5sU41uOwBY8=
Subject key identifier:   37:2E:22:08:39:B8:4D:9B:86:0A:1C:68:B3:FB:52:C0:3A:97:63:BB
Certificate issuer:       /CN=474180cc1112bd41687ba6609c2716757e5425de
Certificate serial:       0181F988A2656C3DBB012237F2E66BAFA28A
Authority key identifier: 47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/Ny4iCDm4TZuGChxos_tSwDqXY7s.roa
Signing time:             Wed 13 Jul 2022 21:48:10 +0000
ROA not before:           Wed 13 Jul 2022 21:48:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     18779
IP address blocks:        2a12:4980::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f9:88:a2:65:6c:3d:bb:01:22:37:f2:e6:6b:af:a2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474180cc1112bd41687ba6609c2716757e5425de
        Validity
            Not Before: Jul 13 21:48:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=372e220839b84d9b860a1c68b3fb52c03a9763bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:11:4e:ff:7a:a6:07:26:e1:3a:1c:91:73:ef:
                    41:20:72:7f:5a:bb:75:0c:8a:a1:06:e8:32:ac:67:
                    d6:1a:87:95:6f:32:c4:aa:d7:9c:b0:ba:4b:82:0e:
                    33:ad:71:1f:e5:4f:bf:1e:2b:b4:18:da:7d:21:46:
                    04:b9:b0:b3:25:a4:1c:4d:c6:29:e6:51:19:f1:e0:
                    4a:1f:19:cc:f6:ca:3a:a4:16:bf:9b:1f:3f:d3:2a:
                    8f:40:ee:72:be:fa:22:8a:a2:33:c2:84:75:03:d2:
                    5e:b8:8e:c0:67:8e:ed:1f:aa:89:94:1e:29:82:d6:
                    d8:30:75:77:a1:77:fe:33:ba:ae:69:67:6b:05:07:
                    23:a7:9c:ec:ae:1b:66:ac:88:41:1e:0d:67:bb:75:
                    ad:2f:8b:e2:3c:8b:30:14:17:38:73:7c:48:b4:8e:
                    76:a2:3f:02:1c:e0:2f:a4:d9:32:41:e2:6d:7f:6d:
                    fd:f6:fb:9a:bc:e6:8c:5f:31:75:b8:78:2b:dd:6f:
                    55:b8:6c:9e:cc:98:f0:bc:eb:c3:7e:76:98:f4:80:
                    3f:1b:b5:19:25:82:c6:f2:db:e7:b3:b6:e5:99:45:
                    64:9b:b7:ff:e5:26:c2:44:07:e9:2d:3f:87:9b:d3:
                    1f:b9:bf:5a:97:e5:c4:33:e8:70:68:dd:0c:a6:44:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2E:22:08:39:B8:4D:9B:86:0A:1C:68:B3:FB:52:C0:3A:97:63:BB
            X509v3 Authority Key Identifier:
                keyid:47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/Ny4iCDm4TZuGChxos_tSwDqXY7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/R0GAzBESvUFoe6ZgnCcWdX5UJd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4980::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:1a:da:ba:fa:10:48:a8:f4:90:7b:9b:53:b0:fd:0d:a9:
         6a:dc:9d:e5:c1:55:28:ea:64:6c:35:c5:58:1e:a4:e2:a8:0c:
         a9:43:79:76:69:3e:0f:d7:cf:f2:1c:2a:a3:30:a7:e0:47:e0:
         18:dc:d3:6a:01:82:ff:88:ca:65:c1:15:8d:d5:d1:5c:fd:ae:
         38:38:dd:1c:77:6b:e4:31:5f:83:7c:37:d7:03:bb:63:11:41:
         cf:63:66:2d:4c:10:58:dc:f8:c0:eb:52:93:1f:6a:d9:29:40:
         ab:39:b5:66:7d:53:0b:e1:3d:e6:35:4c:d6:fc:3e:63:df:30:
         ac:65:67:c7:82:4e:d6:e3:40:a6:94:42:22:63:7b:94:d2:03:
         7a:24:9f:c1:81:ee:07:a8:10:5f:75:a4:0f:91:5b:6d:da:62:
         f6:e6:08:e1:ab:16:31:8e:f0:77:e4:1f:4d:df:49:45:0c:73:
         ff:62:e4:a1:d3:db:c5:10:d7:c2:ef:f5:84:91:35:47:a3:5e:
         75:1e:27:55:1e:a8:76:df:19:46:ec:30:f8:7e:f4:75:e0:43:
         95:1f:66:a4:a5:35:53:15:cc:67:43:b7:c7:88:c7:b5:75:15:
         92:ef:99:04:ea:73:db:c4:1a:83:0b:a6:5e:66:8f:5f:bb:fc:
         3f:0f:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:37 2025 by rpki-client