Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7f72b7-6ae6-42ba-981c-ba44979144d0/1/wnX_WoL6mi_f-JPWcD1sYmtN_pI.roa
File:                     wnX_WoL6mi_f-JPWcD1sYmtN_pI.roa (raw, json)
Hash identifier:          y2KMIpvdrpx2zugfo+QVzDQuaC5wD0ARR5r8OsD+xDc=
Subject key identifier:   C2:75:FF:5A:82:FA:9A:2F:DF:F8:93:D6:70:3D:6C:62:6B:4D:FE:92
Certificate issuer:       /CN=69c8ea3e18d8e9be36327534ec8ae87a4cccf263
Certificate serial:       FAA50A
Authority key identifier: 69:C8:EA:3E:18:D8:E9:BE:36:32:75:34:EC:8A:E8:7A:4C:CC:F2:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acjqPhjY6b42MnU07IroekzM8mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7f72b7-6ae6-42ba-981c-ba44979144d0/1/wnX_WoL6mi_f-JPWcD1sYmtN_pI.roa
Signing time:             Sat 01 Jan 2022 13:05:18 +0000
ROA not before:           Sat 01 Jan 2022 13:05:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57311
IP address blocks:        194.213.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16426250 (0xfaa50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c8ea3e18d8e9be36327534ec8ae87a4cccf263
        Validity
            Not Before: Jan  1 13:05:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c275ff5a82fa9a2fdff893d6703d6c626b4dfe92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:7d:25:cb:3f:19:02:ae:0e:8b:cb:4f:48:
                    9e:83:5d:15:28:2e:23:07:eb:2c:96:4b:21:ea:a2:
                    5b:3d:68:3d:46:f0:8e:7f:61:8f:dc:44:50:51:d4:
                    87:51:11:17:84:e2:04:19:12:2b:46:3a:e1:b6:72:
                    75:c0:24:b2:c3:6e:a0:90:26:1d:65:49:e1:82:d7:
                    d7:cf:1d:08:77:56:9c:39:b6:81:a5:70:19:e8:34:
                    20:a6:77:68:d0:36:33:5c:de:cc:0c:2b:c0:2f:e2:
                    6f:3d:99:54:a4:5d:3f:0f:80:99:65:99:a6:35:2c:
                    47:9e:e5:30:ae:c4:e8:e7:60:24:9c:be:17:1d:e7:
                    7a:ea:ff:0e:a2:8f:7b:2a:32:fd:ee:a4:ce:2b:6e:
                    1b:3b:c1:ab:03:e1:50:c2:f1:7b:b6:41:4d:e4:68:
                    dc:b3:ea:c9:c7:d6:41:17:34:37:0c:b9:ac:cf:d9:
                    90:5a:86:c6:22:16:10:41:70:98:e0:ca:6a:7c:9d:
                    d9:4a:b5:eb:ba:a4:46:99:78:14:04:7d:d8:57:bf:
                    43:a1:e8:8f:79:84:13:8b:c4:be:f2:55:22:89:af:
                    04:29:54:b6:51:53:e1:c9:42:55:bc:ff:41:4e:a2:
                    00:a2:3d:35:9a:2a:f7:38:d6:e4:aa:24:c3:05:fc:
                    15:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:75:FF:5A:82:FA:9A:2F:DF:F8:93:D6:70:3D:6C:62:6B:4D:FE:92
            X509v3 Authority Key Identifier:
                keyid:69:C8:EA:3E:18:D8:E9:BE:36:32:75:34:EC:8A:E8:7A:4C:CC:F2:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acjqPhjY6b42MnU07IroekzM8mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7f72b7-6ae6-42ba-981c-ba44979144d0/1/wnX_WoL6mi_f-JPWcD1sYmtN_pI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7f72b7-6ae6-42ba-981c-ba44979144d0/1/acjqPhjY6b42MnU07IroekzM8mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.213.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:88:45:b0:66:4a:0e:7a:88:64:cc:1b:a1:70:ec:d1:58:f1:
         1b:20:0f:47:d6:8f:b1:cb:ff:a4:e8:be:f9:57:c7:c0:17:9f:
         93:c8:96:d3:74:1a:d9:91:8f:b1:d3:c8:f2:20:57:07:32:e5:
         5f:54:b9:34:41:a4:5d:d5:65:23:a9:fa:c3:20:88:3d:ad:ae:
         ca:f9:70:7f:98:48:93:0b:f4:c4:b7:f2:c0:b7:65:93:99:f4:
         a2:9e:d9:07:a3:e7:16:e8:0f:e0:48:b3:06:df:16:89:b3:58:
         07:10:cf:bf:d6:51:4b:95:24:db:37:0c:94:8e:30:e1:9d:5b:
         cb:80:55:2b:a8:4c:21:06:de:d3:e7:e1:41:9a:11:c5:0f:69:
         df:c6:bb:73:95:43:2c:d0:db:93:3e:84:13:e7:58:19:ac:41:
         9e:3b:d2:c7:be:92:cf:cf:7b:22:76:ec:d0:68:7c:d6:d5:5a:
         ff:4f:25:e9:f7:bf:f4:96:a6:92:bb:f6:2d:49:85:64:4f:50:
         76:ab:8a:3d:84:82:40:8a:25:76:50:51:85:74:7a:6b:5e:35:
         aa:6c:b2:45:69:75:24:98:c4:19:f6:08:5b:f7:4c:d4:1b:2c:
         88:91:5f:28:0f:5a:6b:00:cb:79:fa:36:4b:8e:84:8a:b0:65:
         ca:fe:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:36:39 2025 by rpki-client