Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c631dd-f882-4303-a73f-b72471fe78ce/1/F6fUDzVvZLOfVnddb72TlJHBggU.roa
File:                     F6fUDzVvZLOfVnddb72TlJHBggU.roa (raw, json)
Hash identifier:          x72Yb95bZFocwqsVO3ZFHomy3hIpSTx0tkyERc6Ufy8=
Subject key identifier:   17:A7:D4:0F:35:6F:64:B3:9F:56:77:5D:6F:BD:93:94:91:C1:82:05
Certificate issuer:       /CN=a8e2621089e94b0ba586f4f4d87a579b000582c4
Certificate serial:       022D69A1
Authority key identifier: A8:E2:62:10:89:E9:4B:0B:A5:86:F4:F4:D8:7A:57:9B:00:05:82:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qOJiEInpSwulhvT02HpXmwAFgsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c631dd-f882-4303-a73f-b72471fe78ce/1/F6fUDzVvZLOfVnddb72TlJHBggU.roa
Signing time:             Sat 01 Jan 2022 06:57:44 +0000
ROA not before:           Sat 01 Jan 2022 06:57:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        62.182.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36530593 (0x22d69a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e2621089e94b0ba586f4f4d87a579b000582c4
        Validity
            Not Before: Jan  1 06:57:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17a7d40f356f64b39f56775d6fbd939491c18205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:83:d5:c9:bb:c2:ae:a0:92:d0:50:0b:1f:
                    c1:4e:c4:63:45:28:ba:9a:63:54:88:d2:43:d2:8d:
                    85:5c:d2:20:9f:a4:56:7f:12:9f:60:be:e0:f3:ef:
                    d2:b2:52:91:81:13:ad:24:0f:02:ea:73:8e:47:d7:
                    de:dc:ed:bf:fe:bf:89:e1:ad:d2:43:c6:f7:97:ee:
                    b0:a1:44:92:a2:4c:c3:31:96:ea:b8:e7:12:ec:d3:
                    fc:45:4d:31:12:fd:29:39:b2:69:76:2a:19:48:f7:
                    c5:7e:15:96:5f:24:ef:e3:4b:9a:b4:d1:42:0e:f5:
                    ab:94:06:ce:bb:3c:66:93:9b:62:a7:d5:7e:75:9a:
                    93:fe:a2:1f:55:7f:7c:11:35:c6:bf:d4:d3:87:d2:
                    08:2a:82:76:4f:f9:59:17:e4:38:b9:9b:2b:e4:c9:
                    07:06:36:d0:fa:6c:b2:05:4e:78:7f:ac:09:79:6a:
                    74:ee:c8:ef:7f:d6:a8:6f:49:63:eb:cc:f7:72:55:
                    43:f0:3d:5f:2e:f5:24:2d:fa:42:b1:75:b1:5b:c4:
                    71:66:51:d8:e9:66:e8:93:4b:0a:a4:2e:f7:0b:48:
                    17:16:ea:05:8e:dd:a1:e0:b7:c1:69:d2:73:55:00:
                    dd:31:4e:6d:37:37:05:33:a7:c8:c2:3b:96:8a:33:
                    f7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A7:D4:0F:35:6F:64:B3:9F:56:77:5D:6F:BD:93:94:91:C1:82:05
            X509v3 Authority Key Identifier:
                keyid:A8:E2:62:10:89:E9:4B:0B:A5:86:F4:F4:D8:7A:57:9B:00:05:82:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOJiEInpSwulhvT02HpXmwAFgsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c631dd-f882-4303-a73f-b72471fe78ce/1/F6fUDzVvZLOfVnddb72TlJHBggU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c631dd-f882-4303-a73f-b72471fe78ce/1/qOJiEInpSwulhvT02HpXmwAFgsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:7d:90:6a:9b:fe:70:39:3e:6e:c5:0a:9e:83:ca:b1:aa:
         49:56:8b:e0:d2:67:ac:e6:a7:6e:8d:8c:48:00:98:8f:8f:41:
         f9:b7:ec:3c:7e:a5:eb:e1:dc:3c:24:69:8b:3c:b1:45:51:27:
         07:19:de:07:d0:5d:bf:37:c8:24:37:73:96:dc:39:2f:b8:8d:
         f6:a2:49:f1:5d:bb:0c:b4:78:95:da:bd:38:a1:d2:5c:92:d7:
         41:f6:e3:9e:8a:05:b3:2f:3f:b4:00:50:a2:26:d0:4d:c8:59:
         c0:b2:81:b7:c9:9c:aa:20:a8:85:80:d0:46:e5:83:88:bf:49:
         84:4f:6f:b0:cb:ad:49:b8:97:57:81:19:1e:1c:62:f2:cf:d9:
         99:66:fc:46:cd:1f:7d:9f:52:7a:b6:62:04:f4:39:be:cd:c6:
         b5:d9:99:4d:63:e4:9f:bd:d2:bb:25:a7:5c:f7:dc:46:cd:7c:
         43:33:26:e8:db:ad:c6:55:2f:33:18:67:fb:2f:aa:51:b1:2b:
         e6:8e:5c:d7:ac:2e:c9:f8:21:fa:41:9d:3c:13:55:19:89:ac:
         96:c5:bf:48:40:5a:8a:a5:cc:c5:d5:61:4b:76:c9:a2:96:0e:
         b5:9a:d3:6f:0c:5a:ff:45:77:b5:b3:c1:2d:2c:21:80:83:2a:
         10:08:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:21 2025 by rpki-client