Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/Qep8yNEfeBLEvVezKpQqbGBrLcI.roa
File:                     Qep8yNEfeBLEvVezKpQqbGBrLcI.roa (raw, json)
Hash identifier:          sBvRz8GgywTSG14cY4rxZpYNgsedJJurKx8TskqSCEE=
Subject key identifier:   41:EA:7C:C8:D1:1F:78:12:C4:BD:57:B3:2A:94:2A:6C:60:6B:2D:C2
Certificate issuer:       /CN=787650d0951529b1a817232c12c42e49b889e1b8
Certificate serial:       018B1E115AA1F488A8815E99110E5F7B3527
Authority key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/Qep8yNEfeBLEvVezKpQqbGBrLcI.roa
Signing time:             Wed 11 Oct 2023 09:28:55 +0000
ROA not before:           Wed 11 Oct 2023 09:28:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1e:11:5a:a1:f4:88:a8:81:5e:99:11:0e:5f:7b:35:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787650d0951529b1a817232c12c42e49b889e1b8
        Validity
            Not Before: Oct 11 09:28:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=41ea7cc8d11f7812c4bd57b32a942a6c606b2dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6d:b7:11:6d:e8:02:77:62:d3:3b:90:33:98:
                    ca:ef:a1:8c:27:f2:4e:6f:6f:e0:df:02:3c:20:1b:
                    5d:c3:68:93:c4:aa:37:06:e4:10:32:f3:fb:f1:98:
                    10:07:6a:f5:82:7a:ef:bc:28:33:47:e7:ff:d4:2e:
                    fe:38:2b:65:0c:2c:7a:f8:43:a3:3a:80:4a:d7:73:
                    68:24:55:a6:44:f3:7c:4b:fc:80:e9:22:2a:b0:35:
                    17:51:37:f8:7c:21:ea:00:a3:f3:36:20:4d:9d:5e:
                    6f:b9:b5:09:87:1e:62:47:5e:77:f0:f8:36:00:61:
                    83:df:e2:f4:ba:81:4b:fd:d8:43:4e:04:ec:f2:2f:
                    a6:5e:44:a7:37:85:24:34:31:a1:32:df:ce:ff:19:
                    f2:d6:4a:0a:a0:80:8b:bd:78:0a:bf:d6:bd:5c:2c:
                    d3:67:99:ee:3f:ce:59:60:63:2b:36:15:6d:a2:2a:
                    bb:2e:41:35:4b:d1:a2:b2:7e:42:16:1d:90:65:f2:
                    50:07:c0:eb:0f:b5:47:71:60:af:e9:c6:54:8a:a6:
                    65:a4:95:cd:be:33:a7:c5:b0:d4:2e:b8:a1:17:1d:
                    8e:d5:85:ba:d2:38:3a:0f:59:f9:f3:a7:ff:e0:f3:
                    98:66:40:59:13:98:74:2e:ec:f1:dc:62:41:01:5f:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EA:7C:C8:D1:1F:78:12:C4:BD:57:B3:2A:94:2A:6C:60:6B:2D:C2
            X509v3 Authority Key Identifier:
                keyid:78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/Qep8yNEfeBLEvVezKpQqbGBrLcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:56:33:80:c9:0c:c6:93:81:ab:7c:3b:63:ac:68:48:71:c9:
         cc:e2:6c:02:9f:0b:cb:89:b5:4d:03:d2:1a:57:3a:f1:6e:02:
         6e:41:62:ba:93:c0:4f:30:b6:73:12:f9:c8:9a:60:cb:95:89:
         e8:db:66:4f:b1:c0:49:2c:3e:85:3f:46:20:70:7d:19:80:01:
         1d:7e:33:a9:19:95:fe:1a:ec:5a:6c:c3:f1:14:44:9d:20:b1:
         67:f5:37:45:e9:3d:81:da:01:ba:d8:0b:f0:e9:06:36:b8:9d:
         d3:bd:30:66:19:d2:19:06:39:26:27:4b:a3:07:41:ea:d9:5c:
         98:67:e8:65:94:12:d1:ea:86:83:7e:98:aa:1b:4e:13:f3:1c:
         2c:cc:c6:89:bf:87:ee:bf:63:d4:71:2c:ab:1e:e9:43:b4:f8:
         ae:0b:d5:6d:fe:2d:4f:7f:e0:86:c3:42:38:c9:c0:cc:bb:46:
         ca:64:64:9a:86:db:1b:e5:9d:81:53:e6:86:61:3d:db:68:6a:
         9a:f0:de:9a:f5:29:3a:93:0e:1b:9e:da:21:7e:30:ea:c6:48:
         09:c3:ed:3a:47:cf:66:00:3b:65:51:6f:3c:02:8c:15:47:36:
         5c:d0:34:99:19:63:41:89:2a:a1:01:7b:af:dc:36:1b:21:d4:
         ed:4e:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:06 2025 by rpki-client