Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/0m6Zs8TtQ0noHtuYMEIz7RlZ7FM.roa
File:                     0m6Zs8TtQ0noHtuYMEIz7RlZ7FM.roa (raw, json)
Hash identifier:          SY6YBaXw8ZDaB1rXBNbn1lkSJOuF9LQILLzywGY4QG4=
Subject key identifier:   D2:6E:99:B3:C4:ED:43:49:E8:1E:DB:98:30:42:33:ED:19:59:EC:53
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       0195CF19CE4CA321C6D0C3A639687F7D3C7B
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/0m6Zs8TtQ0noHtuYMEIz7RlZ7FM.roa
Signing time:             Tue 25 Mar 2025 20:58:49 +0000
ROA not before:           Tue 25 Mar 2025 20:58:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6079
IP address blocks:        194.179.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:cf:19:ce:4c:a3:21:c6:d0:c3:a6:39:68:7f:7d:3c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Mar 25 20:58:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d26e99b3c4ed4349e81edb98304233ed1959ec53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:05:a5:ad:a3:2c:1b:b4:87:88:fd:dd:44:
                    dc:22:7e:2c:b2:1e:63:b4:5a:87:da:d0:b6:b8:fb:
                    b5:4a:2f:1b:37:41:83:e7:0a:53:fd:46:cc:a6:aa:
                    b2:2a:5f:ed:64:20:af:c2:ab:1a:21:bd:e5:73:7d:
                    39:17:4b:e6:fb:7e:61:2e:cd:64:55:6d:c7:cb:3b:
                    eb:0b:55:a3:9c:58:29:05:bd:a0:a5:fb:e6:9b:31:
                    65:c6:3f:3d:69:80:82:12:01:c1:91:48:7c:41:15:
                    a5:2f:e2:5c:44:f0:3b:7b:42:dc:3c:3a:e2:1d:29:
                    d7:f8:b9:9c:83:25:48:f6:fc:40:15:d0:6a:c2:56:
                    e3:da:f0:a3:4d:a6:f6:e6:d8:29:0a:27:22:76:42:
                    90:b4:af:8d:8e:e2:b6:c8:39:c6:ee:71:b6:18:20:
                    7c:16:64:04:40:e7:0a:f5:65:a8:00:6f:f7:27:ea:
                    f4:ea:83:cf:79:2c:50:31:15:5d:37:e2:50:41:d9:
                    ad:6f:18:4a:cc:ac:ae:83:fe:ef:ee:a6:41:b5:d4:
                    d7:4e:ed:64:44:3c:07:a7:2f:bc:3d:7c:7c:7c:35:
                    4a:f3:8e:fe:ba:17:c4:cc:6c:ae:5e:09:27:b1:3f:
                    fe:06:5a:33:bf:61:71:22:03:4a:df:2f:e8:53:20:
                    fd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6E:99:B3:C4:ED:43:49:E8:1E:DB:98:30:42:33:ED:19:59:EC:53
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/0m6Zs8TtQ0noHtuYMEIz7RlZ7FM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.179.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:57:2b:40:97:2f:6f:eb:31:00:12:da:8d:48:ee:4f:38:f3:
         87:2e:d9:ae:fa:fd:d1:ed:e4:ba:5a:56:de:4a:1f:7b:15:5c:
         4d:0e:6b:27:96:d0:7f:64:4f:cf:b6:13:51:6d:5b:3d:9a:9e:
         28:49:c5:9f:95:0b:06:79:68:46:07:94:fe:02:99:51:25:de:
         24:c9:32:7d:04:e7:24:0f:f0:13:cd:63:1c:f8:73:88:fd:52:
         c1:22:c0:d2:fa:22:42:16:94:1c:83:f4:fe:d2:e1:73:7d:5f:
         db:2f:ba:7d:d6:3a:07:e7:35:12:76:ed:28:f3:6a:d0:6a:db:
         40:50:42:de:e9:b9:b7:f3:42:39:df:28:1e:b9:a8:29:3e:55:
         6e:c3:ba:cc:4e:2d:8b:07:d9:20:ca:42:f2:60:72:64:90:ac:
         21:21:17:47:85:9d:dd:6a:a2:1f:81:b7:17:f4:88:93:24:2f:
         f0:20:86:21:4a:73:3e:70:b5:c0:f7:40:02:c6:46:a1:41:43:
         ca:f2:ab:63:ba:4f:c3:51:75:ce:1a:62:7a:ac:f6:ac:69:2b:
         50:4c:67:f7:39:df:48:81:d2:a2:aa:23:14:37:41:95:2b:27:
         c1:24:ef:cf:4c:ed:d5:09:8a:7a:74:51:ba:19:4e:9e:49:3f:
         d0:93:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:24 2025 by rpki-client