Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/bk0EmmJSnsFtTRYwmLj-gb_NItQ.roa
File:                     bk0EmmJSnsFtTRYwmLj-gb_NItQ.roa (raw, json)
Hash identifier:          DaLMf+ot1Aqj/nL1hDde7FFWUiEV/wyiRiXE1noKDsM=
Subject key identifier:   6E:4D:04:9A:62:52:9E:C1:6D:4D:16:30:98:B8:FE:81:BF:CD:22:D4
Certificate issuer:       /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial:       01AC1FF5
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/bk0EmmJSnsFtTRYwmLj-gb_NItQ.roa
Signing time:             Mon 07 Mar 2022 10:38:10 +0000
ROA not before:           Mon 07 Mar 2022 10:38:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        178.212.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28057589 (0x1ac1ff5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
        Validity
            Not Before: Mar  7 10:38:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e4d049a62529ec16d4d163098b8fe81bfcd22d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:f4:89:0b:42:16:da:de:ca:19:22:05:31:
                    30:08:d5:00:fe:ad:13:f6:dd:f5:25:a3:8e:3e:db:
                    d8:b7:c2:5f:a4:0f:ce:f3:64:2c:d6:2d:d7:b8:93:
                    a4:42:a9:d9:3a:fd:12:24:84:fd:87:19:55:52:0b:
                    4c:04:05:bb:3f:54:71:b0:3a:6a:43:e2:40:86:2c:
                    ee:d3:f4:34:e2:9c:e5:93:35:9b:05:c7:c8:ed:f8:
                    67:5e:e0:9a:d0:09:f9:e4:d2:95:24:48:f5:d4:26:
                    96:a8:b8:a4:6f:57:28:9f:76:d3:b8:33:12:e0:c4:
                    c8:39:81:a7:ae:29:4b:11:3a:e2:38:95:6e:5c:7b:
                    dd:e7:e9:42:7d:1c:a5:7c:a0:e4:1f:45:96:7e:ea:
                    a0:43:01:6e:1a:7a:2e:84:f5:51:1f:af:02:bf:8c:
                    ae:b7:98:06:a2:fb:be:4a:4b:5f:d2:e6:7b:6c:50:
                    75:2a:9a:bb:14:41:c6:23:28:a9:73:76:45:9a:ff:
                    97:06:2e:6d:fb:1d:f6:c8:a8:9b:6a:0c:c1:32:6b:
                    e9:c0:44:2a:19:e3:0c:e1:24:44:0a:16:e5:6d:4b:
                    cb:cd:36:79:1e:4a:69:73:54:7f:37:8b:b4:df:a6:
                    d3:30:00:62:89:81:dc:d7:d5:3d:db:68:0d:82:98:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4D:04:9A:62:52:9E:C1:6D:4D:16:30:98:B8:FE:81:BF:CD:22:D4
            X509v3 Authority Key Identifier:
                keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/bk0EmmJSnsFtTRYwmLj-gb_NItQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:3e:70:d2:27:c3:7d:07:68:9e:49:10:d9:8e:5b:7f:03:e0:
         26:d8:9a:2c:de:09:0d:93:fb:ca:ab:ce:16:22:dd:2f:cd:00:
         37:14:be:dc:c3:ce:f6:a6:cf:98:45:ff:0d:f8:01:a8:14:d1:
         5e:02:16:dc:ad:84:e4:c7:a3:4a:fc:13:42:61:0c:3a:7c:bd:
         7e:35:55:96:4a:2c:d0:09:ae:e8:02:e3:80:d7:f4:94:40:4d:
         99:36:21:f1:10:f4:de:45:4d:9f:27:a3:bf:fa:69:73:8f:2e:
         88:48:2d:03:62:95:0a:b3:d8:e3:9b:cf:20:ec:f8:b8:b2:eb:
         cb:2b:aa:8c:68:80:6a:24:7c:11:11:4c:1d:cd:98:b0:11:07:
         9e:52:c1:e6:4a:70:f1:8f:34:05:dd:9a:6f:a9:78:85:9a:d1:
         14:88:6f:1c:57:41:cb:42:87:8e:93:1e:5d:cc:6f:96:f4:3f:
         d2:3b:17:17:ef:5b:51:dd:c7:a4:0f:07:3c:fb:9b:71:c3:92:
         21:07:97:15:0f:58:63:af:71:6d:2d:6b:c5:01:11:9a:78:61:
         6d:ee:e4:28:78:8c:6f:e3:a3:7a:58:a8:85:a9:c9:9d:dd:f2:
         c2:36:23:f3:67:4b:66:1f:64:71:cf:5d:22:1c:88:a8:c8:10:
         d6:61:5f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:02 2025 by rpki-client