Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ANR1N0phBBL-nH1BncwUfgfVIGI.roa
File:                     ANR1N0phBBL-nH1BncwUfgfVIGI.roa (raw, json)
Hash identifier:          zzsBBjRR/NHRAQ+8MHtxsj4A6glLzCV/J2ULyuvhouw=
Subject key identifier:   00:D4:75:37:4A:61:04:12:FE:9C:7D:41:9D:CC:14:7E:07:D5:20:62
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       030D7D90
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ANR1N0phBBL-nH1BncwUfgfVIGI.roa
Signing time:             Mon 14 Feb 2022 11:05:05 +0000
ROA not before:           Mon 14 Feb 2022 11:05:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49877
IP address blocks:        141.11.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51215760 (0x30d7d90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Feb 14 11:05:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=00d475374a610412fe9c7d419dcc147e07d52062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:49:e5:c5:07:58:30:6f:d6:bc:45:c2:2b:
                    58:8f:53:86:fa:8c:7f:04:5a:c3:8e:43:a1:d3:71:
                    5d:1a:ff:3d:f2:0b:7d:45:fd:6d:26:9b:1b:4c:31:
                    e0:6c:f8:51:21:1a:6c:1a:9b:96:ff:f1:a5:6f:2c:
                    ef:66:6c:25:b2:bf:fa:02:7f:3e:00:1f:25:73:22:
                    bb:eb:97:84:24:ef:c8:35:3f:35:86:de:53:35:09:
                    d1:3c:95:8c:99:99:3d:41:51:90:ac:75:1e:98:e4:
                    eb:58:2a:b6:eb:83:13:e7:72:97:64:19:65:78:49:
                    bb:70:83:7a:6a:9f:91:5a:29:67:c1:9f:c7:bb:3b:
                    02:2d:e5:99:67:12:79:94:46:98:fe:a9:ba:be:16:
                    e2:68:7d:d4:ec:e5:51:d6:44:72:c6:56:f7:6e:98:
                    c7:9e:8e:e5:a7:bd:48:10:bf:32:57:b1:45:51:35:
                    11:56:a4:42:86:57:c7:57:d7:06:2d:a4:0e:6c:b1:
                    5f:6e:8f:c1:ae:cb:4d:ff:cf:f8:d8:ce:c1:03:9b:
                    77:56:93:17:d3:18:b2:af:16:d1:bd:52:aa:80:ed:
                    22:21:4d:cd:f7:90:b6:a8:ba:f1:7b:6c:f6:db:ee:
                    0a:de:61:5e:49:ab:b8:66:37:a5:ad:7c:74:ea:c2:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:75:37:4A:61:04:12:FE:9C:7D:41:9D:CC:14:7E:07:D5:20:62
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/ANR1N0phBBL-nH1BncwUfgfVIGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ef:be:af:fe:1b:ae:e1:29:35:90:48:a1:0c:4c:d1:88:20:
         51:03:3b:51:0a:b6:5b:6e:60:07:d2:e8:13:41:ba:87:d8:1c:
         1f:d4:a8:2d:e8:2d:84:59:98:25:a8:af:46:c7:30:fd:b1:db:
         75:f5:6e:76:51:2a:b7:fc:88:6a:b3:35:c0:37:9e:78:55:c6:
         10:6f:4e:f1:51:af:6e:b1:33:0a:e8:92:61:48:68:18:48:28:
         cc:f1:54:c2:6a:9c:48:38:42:2b:2b:a3:b6:6b:0b:99:3e:a7:
         c3:66:3d:53:06:be:33:d0:17:2d:81:fc:a7:a3:4d:19:fc:40:
         40:98:78:05:d4:40:46:f9:71:c5:48:81:af:f3:3a:25:41:b2:
         f6:e8:54:2c:de:62:89:de:8b:1d:2a:f2:e8:63:87:87:f3:05:
         6c:c5:47:98:52:6a:b2:c3:45:0d:10:a8:96:cb:05:b6:37:f8:
         db:c9:db:2c:d1:13:7e:14:8e:9c:ac:db:27:8e:46:f5:31:7f:
         13:e4:5e:aa:9e:b3:7f:90:d5:8d:3f:8b:cd:52:55:55:d6:bd:
         21:fe:2c:6b:67:0c:94:5c:20:01:bd:0e:c9:92:96:ef:e3:27:
         fe:c7:05:a0:9e:e1:16:e9:04:97:d1:35:52:74:4b:d7:cf:82:
         c2:99:bc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:01 2025 by rpki-client