Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa
File:                     Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa (raw, json)
Hash identifier:          +iIyFBA3ZhKNuVhyNzUqDLxWmuz7/LHtk6wG8bzNLCw=
Subject key identifier:   09:A9:AE:BB:AD:FF:92:94:54:7F:A1:71:32:62:7E:3A:4F:A8:07:07
Certificate issuer:       /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial:       019424455FE0EA505FE060D27D65BEE1280C
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa
Signing time:             Wed 01 Jan 2025 23:48:33 +0000
ROA not before:           Wed 01 Jan 2025 23:48:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25508
IP address blocks:        194.179.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:5f:e0:ea:50:5f:e0:60:d2:7d:65:be:e1:28:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
        Validity
            Not Before: Jan  1 23:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=09a9aebbadff9294547fa17132627e3a4fa80707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:c2:68:7f:61:4e:47:cf:4e:0c:dd:1b:0e:
                    b7:73:9e:17:e1:26:a4:b1:65:16:17:a0:ed:ec:e3:
                    d8:a3:72:10:42:d2:89:5a:e7:06:1f:25:1b:c4:d1:
                    10:d6:d2:a1:cc:53:dc:dd:dd:3d:e7:ce:eb:ab:03:
                    81:4d:46:52:f3:74:93:48:2e:c1:24:c6:00:4a:57:
                    e4:46:49:8b:75:58:e1:a4:51:c2:3f:75:4f:1d:0b:
                    3b:f2:1f:88:06:18:69:3a:26:04:ba:43:24:d9:28:
                    5e:07:27:65:7f:2f:64:d2:36:33:d5:28:d3:e4:62:
                    3c:43:b8:d9:17:e6:bc:ac:0c:3e:cd:cd:8d:54:38:
                    b5:9c:f8:6b:71:55:c2:cf:3f:70:c3:f0:97:f2:e0:
                    b4:da:17:f8:21:11:8c:b2:ec:2f:29:08:cf:79:0a:
                    d9:2d:0a:71:9e:0b:e1:b9:bb:e7:16:8b:e8:87:31:
                    56:27:9c:0b:ba:00:f5:95:27:7f:1f:85:85:9d:c7:
                    0b:12:8b:e3:f3:1a:8a:82:3f:db:fd:dc:e5:ef:3c:
                    f2:61:20:4b:7d:60:83:62:1e:90:86:36:52:6f:e7:
                    69:6b:9e:b6:ee:55:b2:db:a1:cb:d3:e6:5d:80:a3:
                    80:5c:68:01:f7:f0:e9:48:be:c4:fd:f2:dc:f8:ed:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A9:AE:BB:AD:FF:92:94:54:7F:A1:71:32:62:7E:3A:4F:A8:07:07
            X509v3 Authority Key Identifier:
                keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/Camuu63_kpRUf6FxMmJ-Ok-oBwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:7b:54:63:03:7a:12:cf:bd:32:c4:ac:74:d4:3d:06:62:
         d3:8b:e6:81:31:ab:7f:4f:03:d6:2d:78:51:e8:a2:8b:51:91:
         1e:7b:1a:37:b9:39:46:05:5e:26:16:3a:40:81:ec:fd:f6:c9:
         fc:4b:11:e3:49:e9:32:ac:6c:65:9d:8f:15:37:ab:94:3f:74:
         42:87:c0:4f:48:52:78:f4:c7:12:9f:1b:75:74:26:62:9d:18:
         a5:05:09:64:ee:dc:c8:ef:cd:e9:51:e6:bc:6c:21:ee:2e:33:
         0d:d9:89:63:a0:0b:54:6b:65:9a:1c:5c:0e:f6:b5:9f:6d:7a:
         26:ee:2f:15:7c:52:2e:34:12:39:23:31:dc:f9:d0:fe:2b:23:
         5a:a8:e7:41:91:61:ed:8b:d7:3c:ec:1f:be:19:cc:70:2f:87:
         03:d6:51:3a:8f:00:45:b6:e5:77:75:c2:bd:af:89:13:49:0d:
         b5:a9:93:e4:86:27:4b:af:44:9b:cb:6c:16:b1:fe:87:5c:d8:
         85:cf:a5:ee:90:6d:c3:44:38:1e:bd:b3:3e:c3:3b:bf:95:f2:
         02:27:57:78:a4:0f:f1:07:24:f6:58:da:4f:05:6f:55:b3:0c:
         4f:3a:7b:07:6b:eb:da:ff:c8:4d:58:88:4f:2d:b5:9b:55:57:
         fb:0f:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:39:38 2025 by rpki-client