Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6i-68M1NZGva-Zq9C6VbzDMlLr8.roa
File:                     6i-68M1NZGva-Zq9C6VbzDMlLr8.roa (raw, json)
Hash identifier:          yEiQuMisHxNuJcPjSdB/ngM1YYr+27pVFsNP1ejbXAU=
Subject key identifier:   EA:2F:BA:F0:CD:4D:64:6B:DA:F9:9A:BD:0B:A5:5B:CC:33:25:2E:BF
Certificate issuer:       /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial:       0582BB4D
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6i-68M1NZGva-Zq9C6VbzDMlLr8.roa
Signing time:             Fri 03 Jun 2022 15:26:20 +0000
ROA not before:           Fri 03 Jun 2022 15:26:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        45.95.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92453709 (0x582bb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
        Validity
            Not Before: Jun  3 15:26:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea2fbaf0cd4d646bdaf99abd0ba55bcc33252ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:94:46:17:4c:9f:4e:5a:94:96:60:c2:0c:2f:
                    99:59:0d:34:e3:ea:88:03:05:f4:15:6f:ea:ac:74:
                    02:47:36:59:c6:b2:a8:7c:2f:64:cb:2f:1d:8e:b0:
                    5a:e0:df:b5:d7:ad:f5:16:d6:e5:0f:7a:43:a6:3a:
                    06:ff:d0:c8:7a:51:85:65:c6:ea:6c:a3:50:67:86:
                    df:2a:68:be:24:a8:d6:70:04:75:05:52:ba:7c:f7:
                    e2:3e:44:23:a9:49:65:6c:e7:90:e0:14:9b:d1:fa:
                    47:57:64:7d:b0:ad:3e:9a:54:24:c6:98:cc:fa:ef:
                    8b:06:72:b5:59:8f:25:97:41:49:50:13:c5:7b:c4:
                    71:a5:e0:51:7f:ec:db:9b:d2:f5:02:3d:fd:12:8d:
                    4f:fd:b2:bc:ec:97:4b:c2:c1:31:26:c1:3a:00:81:
                    e1:d1:20:76:da:ac:32:ac:69:e7:c7:18:71:95:5e:
                    c2:34:9f:6d:de:da:43:fc:c9:ce:86:a7:39:db:f1:
                    e6:24:65:3a:c6:f6:ec:a2:ba:33:ff:43:53:ef:bb:
                    07:49:9f:24:b3:5d:85:de:7f:f3:36:2d:e0:b3:67:
                    9d:4b:02:97:85:a5:ba:b1:00:3b:35:08:6b:ab:4a:
                    79:d0:e0:9e:f3:25:fd:41:38:59:34:57:43:8a:9d:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2F:BA:F0:CD:4D:64:6B:DA:F9:9A:BD:0B:A5:5B:CC:33:25:2E:BF
            X509v3 Authority Key Identifier:
                keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/6i-68M1NZGva-Zq9C6VbzDMlLr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:4e:25:89:10:68:63:c7:9c:1e:7a:05:9c:07:08:0f:bd:9c:
         6f:3f:e8:4a:de:a6:78:27:0f:59:1c:9b:a0:af:75:b8:88:04:
         76:d6:f6:4d:ac:d4:82:0c:ff:b2:76:25:22:71:3d:e5:d5:cf:
         bb:b9:34:3e:27:f7:f0:f0:ea:8c:ea:54:5e:17:87:88:a2:07:
         8f:02:ec:e7:86:4e:f4:5a:68:a5:8e:27:24:02:bc:4b:77:60:
         eb:46:30:6e:54:ef:19:ba:08:e4:b9:df:da:6a:34:2c:86:ba:
         ca:10:eb:b7:c9:6d:58:a8:19:ce:62:63:cc:8e:39:f4:2a:e6:
         7b:c6:c5:3e:0a:7c:bd:a4:01:b8:da:ca:e6:6f:61:c8:d2:9f:
         ea:f3:23:c1:1c:c2:5c:88:df:ff:6f:35:ea:57:60:7b:e5:13:
         bd:41:7f:4f:db:a0:e1:53:a8:81:48:0a:ba:f8:f0:cb:b5:50:
         a2:a7:89:83:e9:81:a1:12:cb:a9:7f:86:59:cd:b7:fe:ca:e4:
         d3:25:cb:6d:ca:8a:5f:a6:97:aa:20:71:28:3c:b4:c3:f1:7c:
         c8:b3:1e:29:7f:71:ee:bb:5c:90:a5:55:8c:07:4c:17:58:cb:
         37:b2:d0:be:dc:98:09:e3:ad:0a:b2:84:dd:9a:66:03:49:85:
         eb:b6:97:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:53 2025 by rpki-client