Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7E6Yjtw4S5woPVdagJ7udCJl5RA.roa
File:                     7E6Yjtw4S5woPVdagJ7udCJl5RA.roa (raw, json)
Hash identifier:          39Gi/rZHLqlNm15z+oavTYHN+xuEGg13WlzRqzoNz+w=
Subject key identifier:   EC:4E:98:8E:DC:38:4B:9C:28:3D:57:5A:80:9E:EE:74:22:65:E5:10
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       0194282563120848901FAAA20D983F21A81E
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7E6Yjtw4S5woPVdagJ7udCJl5RA.roa
Signing time:             Thu 02 Jan 2025 17:52:06 +0000
ROA not before:           Thu 02 Jan 2025 17:52:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211887
IP address blocks:        185.237.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:63:12:08:48:90:1f:aa:a2:0d:98:3f:21:a8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Jan  2 17:52:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ec4e988edc384b9c283d575a809eee742265e510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:f0:4a:39:9a:97:7a:e7:90:89:64:6e:9e:
                    9f:ba:79:0f:aa:b2:0e:24:25:44:89:fc:97:f2:7e:
                    73:28:87:99:a2:51:5e:ef:07:73:8d:ad:d0:5d:4e:
                    de:02:f9:12:ab:8e:dd:e2:6b:67:bf:b0:c4:ad:81:
                    37:17:a5:81:84:e6:86:68:78:56:d0:ba:f6:31:8a:
                    1c:a5:53:2c:48:2c:48:71:f5:0a:cd:17:ad:0e:da:
                    a5:d6:06:da:8d:ab:b4:03:51:f9:e1:01:0f:02:b4:
                    70:e4:f0:03:a1:ec:03:47:3f:87:49:f1:11:4f:8d:
                    80:1a:41:34:7e:a4:d0:51:a6:f0:c5:0c:42:6d:19:
                    97:4e:ee:60:2c:09:1f:3a:de:64:5b:47:28:10:60:
                    24:af:0a:ba:12:3d:36:1f:79:53:e2:93:a8:ab:d2:
                    b3:6b:6f:f4:c9:74:cb:53:b0:b1:d7:d0:cd:6e:62:
                    54:d8:fa:97:18:11:1c:e4:1f:bc:41:cb:5a:a8:81:
                    10:7c:5a:1d:0b:78:f7:8c:d6:75:33:c4:07:cf:fd:
                    c8:b1:e2:03:86:92:df:ca:23:0b:ec:4f:af:68:fa:
                    b5:63:61:50:e6:bc:83:1f:03:ff:7b:a0:77:fd:e6:
                    bc:df:eb:e5:07:3b:e0:e8:ae:15:be:8d:79:5d:ae:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4E:98:8E:DC:38:4B:9C:28:3D:57:5A:80:9E:EE:74:22:65:E5:10
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/7E6Yjtw4S5woPVdagJ7udCJl5RA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:96:d1:7a:08:48:26:05:49:ef:83:fc:87:33:db:48:50:77:
         ee:96:02:3c:cf:28:7e:16:f8:6b:b0:b9:77:35:8d:a5:17:fe:
         20:cb:ac:15:fa:55:f4:3e:7c:f4:6b:5d:17:d4:99:e1:af:3b:
         ac:f2:7c:33:41:e6:f6:75:e1:b1:d5:5d:14:b6:b8:b1:de:81:
         1a:e3:89:b1:1b:96:c3:92:45:ce:b3:bb:42:28:9a:f9:08:cd:
         7d:9e:d2:e5:65:01:44:7f:19:f2:dc:d4:2f:b1:65:4d:5c:f8:
         59:48:81:f3:b1:cb:ff:3e:ff:15:82:64:d3:a2:b1:1e:1b:64:
         51:63:41:22:52:36:19:74:a0:ac:d1:8c:71:ce:eb:22:26:06:
         54:a1:73:80:48:85:8d:6d:2d:3c:6b:f3:54:58:b8:e6:a5:7b:
         e4:f4:0c:2f:08:46:ca:6c:87:83:8f:a5:23:e1:1c:48:13:c0:
         b5:47:1d:0e:96:52:e9:e0:68:ff:2f:25:f4:1b:02:1e:b8:68:
         10:a6:88:08:54:7e:b7:09:bd:55:4d:6e:44:45:35:31:ad:71:
         59:b8:29:3d:f8:b7:65:17:59:d8:7e:9a:40:a0:bb:e1:79:b9:
         96:8b:49:4a:f2:99:3b:1b:bf:2a:c3:f6:ab:20:10:6f:15:57:
         c7:09:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:45:42 2025 by rpki-client