Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/bac50b-31b9-4ea7-8ecf-4b8ce75ef231/1/skrk6AJqwr-Gs5BkJFkwBIA3M_I.roa
File:                     skrk6AJqwr-Gs5BkJFkwBIA3M_I.roa (raw, json)
Hash identifier:          z3pTKsyQrleVuPb3YTMo5x9TLKOerqSR/qh2gsioLsI=
Subject key identifier:   B2:4A:E4:E8:02:6A:C2:BF:86:B3:90:64:24:59:30:04:80:37:33:F2
Certificate issuer:       /CN=5cdf6379bfd61c6ca36321b3f00c29d5d6511031
Certificate serial:       6BC06A
Authority key identifier: 5C:DF:63:79:BF:D6:1C:6C:A3:63:21:B3:F0:0C:29:D5:D6:51:10:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XN9jeb_WHGyjYyGz8Awp1dZREDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/bac50b-31b9-4ea7-8ecf-4b8ce75ef231/1/skrk6AJqwr-Gs5BkJFkwBIA3M_I.roa
Signing time:             Sat 01 Jan 2022 00:51:46 +0000
ROA not before:           Sat 01 Jan 2022 00:51:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7061610 (0x6bc06a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdf6379bfd61c6ca36321b3f00c29d5d6511031
        Validity
            Not Before: Jan  1 00:51:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b24ae4e8026ac2bf86b3906424593004803733f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8d:71:21:39:31:e1:c0:33:f2:c5:d2:98:02:
                    42:6e:de:ae:97:eb:c7:48:98:33:a5:49:3b:4d:35:
                    9d:96:bf:6e:7b:6c:46:8b:78:37:99:ef:ea:16:84:
                    77:bc:25:02:38:ba:31:2a:f9:b7:25:02:b1:34:43:
                    21:15:b0:cd:e2:0a:4c:28:f5:d3:81:95:bd:a9:56:
                    16:28:62:be:57:9f:cb:7a:fe:7f:b1:70:38:95:c5:
                    ec:e7:33:6d:fd:b9:76:11:8c:da:0d:76:10:d1:b4:
                    2f:87:b6:9f:7b:bf:1b:d3:59:7a:48:99:c3:d6:48:
                    98:b6:ed:6e:ab:0f:6e:0c:ed:cb:00:9a:89:d8:e4:
                    48:92:c2:e3:2d:90:6b:20:aa:81:c1:70:37:03:eb:
                    41:a2:bc:7b:f7:11:88:05:95:dc:e1:01:5d:9f:81:
                    f3:39:62:27:ac:5b:40:d1:6e:64:32:c5:d6:ee:eb:
                    28:26:ce:77:20:a3:44:c9:45:7b:15:d9:e5:9a:31:
                    bf:c7:07:e2:f0:cd:11:44:7a:38:0c:ed:f5:9f:ba:
                    19:96:31:74:f1:94:09:5b:06:c1:c2:64:2e:c6:91:
                    e0:0a:60:a1:0a:d9:5b:51:44:84:eb:66:11:d1:ac:
                    89:1d:0d:99:88:0b:3e:5b:bf:25:5b:f6:db:45:d3:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4A:E4:E8:02:6A:C2:BF:86:B3:90:64:24:59:30:04:80:37:33:F2
            X509v3 Authority Key Identifier:
                keyid:5C:DF:63:79:BF:D6:1C:6C:A3:63:21:B3:F0:0C:29:D5:D6:51:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN9jeb_WHGyjYyGz8Awp1dZREDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bac50b-31b9-4ea7-8ecf-4b8ce75ef231/1/skrk6AJqwr-Gs5BkJFkwBIA3M_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bac50b-31b9-4ea7-8ecf-4b8ce75ef231/1/XN9jeb_WHGyjYyGz8Awp1dZREDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:40:0d:b1:59:4a:02:24:ac:78:88:c9:21:03:6b:7d:c3:71:
         cf:58:cb:24:e8:06:83:fc:a8:cf:81:54:79:d0:50:02:52:79:
         9d:77:d3:ef:ff:67:ca:7c:ad:51:f9:77:33:ee:8a:e5:90:27:
         9b:3d:23:f1:77:49:dd:61:60:0f:1c:aa:ec:39:7c:35:2c:30:
         a9:99:c3:be:db:1f:a1:b3:1a:aa:d9:f4:73:c8:ff:28:13:f3:
         10:48:69:52:83:af:6c:a1:98:ca:3b:db:aa:70:11:8b:1f:82:
         c8:2b:19:f3:25:0d:47:ad:32:60:19:15:56:84:8a:ea:40:e9:
         87:d9:0d:ea:65:e6:91:61:01:fe:25:da:e0:35:3f:db:32:dd:
         24:54:aa:d8:7e:7b:42:44:15:d6:32:e2:ee:51:64:74:c1:fe:
         2a:02:dd:41:9e:e0:ee:67:c0:d9:6d:4c:bd:42:57:c5:02:d6:
         a5:4d:f4:ad:c1:ae:13:04:bb:98:b1:c9:bd:6e:9a:2e:ce:ac:
         60:93:e2:98:f6:f4:98:ad:49:e7:c0:b0:bd:a5:16:1c:62:b5:
         41:c0:d2:d2:a6:96:a1:5a:25:76:71:34:01:0a:d3:b1:7a:48:
         dc:46:52:a3:d0:3f:87:e6:17:0a:71:cd:3c:24:4f:89:2c:37:
         07:1b:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:28 2025 by rpki-client