Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/G711R_PeEa4fUsAK7XfrDCif_CU.roa
File:                     G711R_PeEa4fUsAK7XfrDCif_CU.roa (raw, json)
Hash identifier:          CHR63F8/q/smC21yvwX7LXOUd3QZvOvyjLGqu5oUvnI=
Subject key identifier:   1B:BD:75:47:F3:DE:11:AE:1F:52:C0:0A:ED:77:EB:0C:28:9F:FC:25
Certificate issuer:       /CN=c91bbcc5a4e5cf9a2d28e728dfbc130f688bb8dd
Certificate serial:       09D373D5
Authority key identifier: C9:1B:BC:C5:A4:E5:CF:9A:2D:28:E7:28:DF:BC:13:0F:68:8B:B8:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRu8xaTlz5otKOco37wTD2iLuN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/G711R_PeEa4fUsAK7XfrDCif_CU.roa
Signing time:             Sat 01 Jan 2022 09:55:53 +0000
ROA not before:           Sat 01 Jan 2022 09:55:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48920
IP address blocks:        193.23.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164852693 (0x9d373d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91bbcc5a4e5cf9a2d28e728dfbc130f688bb8dd
        Validity
            Not Before: Jan  1 09:55:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1bbd7547f3de11ae1f52c00aed77eb0c289ffc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:18:cc:22:af:66:f4:7c:8e:fd:16:0b:f4:
                    e1:65:3e:8e:ef:d7:a1:8f:31:14:74:1a:98:42:b3:
                    b4:a7:f1:15:f3:39:83:47:2f:a8:3f:25:0c:2e:57:
                    2c:ea:cf:b9:f7:99:d5:39:03:5a:66:02:c3:52:c6:
                    a8:96:f7:e5:d7:ed:ca:d4:ac:a8:5d:d9:ab:32:53:
                    4b:59:99:97:21:b4:a5:45:5b:96:40:70:c1:8a:69:
                    54:70:33:3c:ba:53:89:8b:26:1f:be:ec:80:74:df:
                    f9:10:27:26:77:55:7f:3a:4b:60:78:30:e8:12:cb:
                    08:5d:97:a3:f0:ce:c3:3b:36:9a:6c:51:cd:b4:55:
                    80:ef:3d:1b:ca:19:29:38:d6:49:a6:76:cb:c0:28:
                    75:fa:ac:a7:67:94:86:96:04:a5:b6:b6:82:7f:c6:
                    ad:1e:ba:68:6e:a4:f1:2f:7e:54:4d:b2:9c:47:f7:
                    78:d0:e2:38:a1:3e:7c:50:65:db:26:6e:38:eb:29:
                    77:6b:e5:1b:c5:b9:a7:4e:64:74:f5:ee:77:e5:d5:
                    a8:7d:e1:d2:56:8d:98:eb:91:47:5b:d1:93:44:12:
                    77:65:a6:9e:d5:ac:e0:3d:d5:dc:f7:74:a1:dc:1d:
                    b3:16:54:ae:e2:95:20:dd:ce:49:2c:5f:4e:7f:81:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BD:75:47:F3:DE:11:AE:1F:52:C0:0A:ED:77:EB:0C:28:9F:FC:25
            X509v3 Authority Key Identifier:
                keyid:C9:1B:BC:C5:A4:E5:CF:9A:2D:28:E7:28:DF:BC:13:0F:68:8B:B8:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRu8xaTlz5otKOco37wTD2iLuN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/G711R_PeEa4fUsAK7XfrDCif_CU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c176a7-0a8d-457b-94a7-ffba8dc6d33c/1/yRu8xaTlz5otKOco37wTD2iLuN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:61:94:b2:9b:60:23:50:df:2a:34:a5:29:1f:6e:66:b2:
         59:0b:47:91:c6:65:0f:ab:be:49:c5:59:10:74:7c:6f:56:33:
         d4:2a:d2:ca:d3:a1:73:39:d3:c0:de:95:d4:b7:44:0e:ee:e7:
         08:2b:98:9b:3d:b1:32:84:73:a8:66:48:e8:ad:84:ea:ec:11:
         83:0c:3d:40:dc:39:c7:7d:1b:3c:9f:f3:14:4b:25:ab:46:af:
         85:5c:7c:b8:79:45:35:3b:a6:a8:95:58:0c:66:7c:a2:af:a1:
         bc:dc:8f:df:18:03:da:5b:b8:0c:0f:83:a7:a9:a5:19:d3:21:
         30:54:dc:08:8b:7a:73:8b:38:20:39:65:f1:4c:7b:12:9f:d9:
         73:67:68:8c:17:7c:0e:22:1d:4a:1e:d3:58:fb:27:a5:8b:f1:
         ad:2b:77:98:58:c2:6a:36:f4:a0:08:8c:d7:50:c6:99:e1:34:
         35:65:d8:00:65:c7:42:2d:d7:0a:7d:5c:4b:96:31:7c:3c:b6:
         2e:10:5b:13:38:be:66:9f:d4:8e:8f:7e:14:55:0e:ef:de:16:
         75:0c:b8:84:64:0a:a2:cc:fc:02:4f:d7:2c:34:d0:39:4a:cb:
         f4:34:28:86:06:3e:45:e0:bb:21:63:0b:20:ea:3a:72:f5:ed:
         07:a6:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:23 2025 by rpki-client