Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/00q_V9fiuxK8x1J5dDf6heEWqpM.roa
File:                     00q_V9fiuxK8x1J5dDf6heEWqpM.roa (raw, json)
Hash identifier:          XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=
Subject key identifier:   D3:4A:BF:57:D7:E2:BB:12:BC:C7:52:79:74:37:FA:85:E1:16:AA:93
Certificate issuer:       /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial:       019425FDD308C8DB2D3802CE8D72067D3809
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/00q_V9fiuxK8x1J5dDf6heEWqpM.roa
Signing time:             Thu 02 Jan 2025 07:49:39 +0000
ROA not before:           Thu 02 Jan 2025 07:49:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207647
IP address blocks:        87.239.8.0/24 maxlen: 24
                          87.239.9.0/24 maxlen: 24
                          87.239.10.0/24 maxlen: 24
                          87.239.12.0/24 maxlen: 24
                          87.239.13.0/24 maxlen: 24
                          87.239.14.0/24 maxlen: 24
                          87.239.15.0/24 maxlen: 24
                          2001:678:6a0::/48 maxlen: 48
                          2001:678:be4::/48 maxlen: 48
                          2a13:da40::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:d3:08:c8:db:2d:38:02:ce:8d:72:06:7d:38:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
        Validity
            Not Before: Jan  2 07:49:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d34abf57d7e2bb12bcc752797437fa85e116aa93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:41:1f:55:fc:8b:47:ce:69:50:ea:15:3f:
                    2a:c4:dc:32:fe:fe:61:2c:68:72:77:a7:f4:d3:6f:
                    25:66:cc:91:1d:cc:41:ad:27:d7:4b:61:24:82:0e:
                    ba:22:95:dd:6a:21:92:f3:95:07:8a:13:ab:f2:17:
                    ab:7d:1a:b0:3e:b5:87:bf:f1:d3:dd:fa:9c:6c:97:
                    6d:11:06:ed:0c:ac:9e:1b:87:1f:29:71:11:04:0f:
                    d0:7d:0d:8b:05:f8:4e:57:6c:5c:4a:93:33:d3:23:
                    77:ac:7d:df:e4:92:d5:9c:10:ad:a1:72:a5:af:18:
                    45:1f:04:a5:f6:e5:84:39:6d:01:0d:7a:57:cd:27:
                    8c:0b:6d:7f:f5:5b:12:41:13:88:61:0c:f7:21:6c:
                    14:63:20:11:40:96:ed:c0:06:a2:0e:0f:23:e3:4f:
                    39:e5:c5:ac:82:9c:11:54:29:71:ff:cb:a0:7f:ac:
                    ad:48:c9:7b:7d:41:2e:cb:64:5e:99:af:a7:31:ce:
                    4b:23:d2:0a:85:fe:ce:99:f4:e6:f2:6b:54:61:fe:
                    6d:20:aa:25:86:c8:66:47:d5:26:e4:fb:d5:75:de:
                    a5:56:5a:94:15:92:8d:92:bd:93:d6:f1:d3:5b:cf:
                    38:ff:9a:4e:44:d2:69:3f:fa:65:85:07:e0:22:f2:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4A:BF:57:D7:E2:BB:12:BC:C7:52:79:74:37:FA:85:E1:16:AA:93
            X509v3 Authority Key Identifier:
                keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/00q_V9fiuxK8x1J5dDf6heEWqpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.239.8.0-87.239.10.255
                  87.239.12.0/22
                IPv6:
                  2001:678:6a0::/48
                  2001:678:be4::/48
                  2a13:da40::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:e3:9f:98:a2:60:a1:46:d5:c5:b4:87:e6:9d:1a:cc:51:4c:
         53:be:cc:4a:d6:e0:ee:c0:f1:ef:ba:d4:41:17:92:18:bf:8c:
         4f:6a:1a:e9:40:9c:5c:2c:9e:74:c8:6e:4c:4d:14:01:16:b9:
         4b:e0:69:fe:3c:99:17:25:60:65:be:db:0a:ab:1a:f1:a7:87:
         c1:17:26:33:7f:ba:0c:63:a0:8d:9e:0c:65:10:ef:9c:27:4d:
         8e:5a:3f:67:ff:48:06:3a:07:62:99:e6:bd:e6:ab:98:d0:37:
         3b:6f:50:32:6d:25:d3:e5:cc:7b:fd:86:9d:12:5e:21:42:85:
         dc:3e:ca:02:41:58:cb:33:7f:dd:6d:98:8a:bb:f4:cd:e6:3d:
         7a:a0:c1:a1:bd:ee:ad:74:57:ef:5d:cc:ae:0b:ad:8b:b9:6a:
         b8:18:71:31:cd:d7:6f:a8:19:4d:bc:46:88:73:49:de:ec:42:
         d6:98:a0:c9:2d:88:64:38:d5:20:bc:8f:44:71:ca:91:aa:f9:
         7f:1e:19:3f:17:95:b2:fc:2c:d9:30:6f:ad:07:2c:c3:9a:da:
         ff:f0:b1:aa:77:0a:96:8b:61:84:80:8c:d7:f1:a9:34:5f:69:
         93:0c:d2:b8:2f:f4:00:9f:4a:f0:41:46:ca:15:eb:4d:d8:2e:
         54:0d:16:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:16 2025 by rpki-client