Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ASRazOlTeNQeMhqJzOi4X938Phw.roa
File:                     ASRazOlTeNQeMhqJzOi4X938Phw.roa (raw, json)
Hash identifier:          6HOIW81Ne6FmCeVx5wh7gqEhJUnMnFxXMI681vWbARU=
Subject key identifier:   01:24:5A:CC:E9:53:78:D4:1E:32:1A:89:CC:E8:B8:5F:DD:FC:3E:1C
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       084F159D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ASRazOlTeNQeMhqJzOi4X938Phw.roa
Signing time:             Thu 21 Apr 2022 22:05:38 +0000
ROA not before:           Thu 21 Apr 2022 22:05:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208475
IP address blocks:        45.147.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139400605 (0x84f159d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Apr 21 22:05:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01245acce95378d41e321a89cce8b85fddfc3e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5f:be:34:60:e3:aa:b9:1e:5e:6c:0c:5b:fe:
                    11:1f:be:cc:80:ba:7d:e4:12:18:b0:25:31:73:52:
                    b2:87:53:36:58:67:36:6f:a3:58:c8:d4:82:c5:4b:
                    06:ba:e2:e7:bc:54:12:11:96:64:27:3e:50:59:c6:
                    de:ef:97:dd:a1:b3:a9:92:23:33:f7:97:78:5c:14:
                    61:11:db:54:e2:95:cf:5c:37:b9:76:22:d8:cd:2f:
                    8f:ca:4e:3d:79:29:1a:a6:73:54:5a:b3:08:7e:c0:
                    19:38:2f:7e:05:0e:94:ee:6d:9f:df:1b:13:c8:e2:
                    01:8e:c2:bf:a4:75:4c:1c:eb:11:87:f3:15:96:93:
                    47:64:6e:61:a4:c9:c0:ff:e1:cc:1c:bf:17:6e:8a:
                    ec:4f:1a:59:ce:24:fb:9d:eb:83:c4:97:3e:1e:8b:
                    1c:a2:9d:06:50:34:5f:af:72:5d:dd:13:d1:dd:ee:
                    61:82:b6:47:6c:ae:f6:71:6a:8d:19:26:16:1e:e5:
                    75:20:08:95:b8:d2:d2:85:c9:60:da:1f:fc:5b:72:
                    30:11:97:c1:fd:6e:2c:29:a9:f6:da:d4:3e:59:cd:
                    55:ef:3b:92:aa:d6:2a:b5:96:a8:55:79:0d:07:4c:
                    81:fa:5b:1f:12:db:34:e4:0e:93:be:8b:39:4c:6a:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:24:5A:CC:E9:53:78:D4:1E:32:1A:89:CC:E8:B8:5F:DD:FC:3E:1C
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/ASRazOlTeNQeMhqJzOi4X938Phw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:0f:9f:aa:db:cb:b5:d4:91:f4:d9:c5:b4:e7:82:bb:14:
         b0:43:45:4f:68:88:03:70:b3:33:c5:1e:5d:9a:a2:03:a3:56:
         40:aa:3a:04:d8:6c:8b:f9:d2:bf:a8:cb:3b:c3:ee:6a:bf:39:
         d1:89:02:9f:bc:99:b8:9f:0d:38:c7:ec:20:7e:61:29:fa:20:
         56:c4:c2:04:f1:b1:b5:88:33:d9:72:73:eb:ae:70:63:39:74:
         4e:6a:06:2c:b5:8a:8a:34:1a:41:64:4b:2a:5f:aa:5d:67:0f:
         ce:7a:b7:56:f3:54:86:85:28:33:21:77:5d:0e:64:c3:92:a1:
         09:f2:4b:17:84:63:60:36:e7:70:9e:d8:b7:cc:10:1a:aa:f6:
         84:28:62:94:cf:05:ec:94:3f:5a:d9:fa:16:e0:2a:e3:dc:14:
         b0:d4:0c:28:7c:ee:c9:6b:42:11:bd:1f:fb:e4:82:4c:72:87:
         9d:cf:ba:18:4a:f4:6d:09:cc:53:99:dd:4c:7d:61:37:fa:eb:
         d8:d6:af:25:c3:d7:2e:38:cb:21:40:c7:83:35:87:3e:40:a9:
         a8:c5:12:3b:db:23:fb:e1:73:35:b6:18:25:63:6e:33:80:d6:
         c4:fb:32:93:1d:76:3f:ae:ff:2d:12:7e:ab:2c:3f:2a:cd:51:
         95:89:e6:04
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECE8VnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODA1ZjE3YzJkNzEzM2QyZGFkM2E4ZGY3ZTM1MzE1ZTM3ZWY1ZGFmMB4XDTIyMDQy
MTIyMDUzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDEyNDVhY2NlOTUz
NzhkNDFlMzIxYTg5Y2NlOGI4NWZkZGZjM2UxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN9fvjRg46q5Hl5sDFv+ER++zIC6feQSGLAlMXNSsodTNlhn
Nm+jWMjUgsVLBrri57xUEhGWZCc+UFnG3u+X3aGzqZIjM/eXeFwUYRHbVOKVz1w3
uXYi2M0vj8pOPXkpGqZzVFqzCH7AGTgvfgUOlO5tn98bE8jiAY7Cv6R1TBzrEYfz
FZaTR2RuYaTJwP/hzBy/F26K7E8aWc4k+53rg8SXPh6LHKKdBlA0X69yXd0T0d3u
YYK2R2yu9nFqjRkmFh7ldSAIlbjS0oXJYNof/FtyMBGXwf1uLCmp9trUPlnNVe87
kqrWKrWWqFV5DQdMgfpbHxLbNOQOk76LOUxqQr8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQBJFrM6VN41B4yGonM6Lhf3fw+HDAfBgNVHSMEGDAWgBRIBfF8LXEz0trT
qN9+NTFeN+9drzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NBWHhmQzF4TTlMYTA2amZmalV4WGpmdlhhOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvOGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8x
L0FTUmF6T2xUZU5RZU1ocUp6T2k0WDkzOFBody5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
OGUwN2RkLTRmZTUtNDgyMC1iY2JlLTVkZDZlMjJlYmFiMC8xL1NBWHhmQzF4TTlM
YTA2amZmalV4WGpmdlhhOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2TLzANBgkqhkiG9w0BAQsFAAOC
AQEAFQ0Pn6rby7XUkfTZxbTngrsUsENFT2iIA3CzM8UeXZqiA6NWQKo6BNhsi/nS
v6jLO8Puar850YkCn7yZuJ8NOMfsIH5hKfogVsTCBPGxtYgz2XJz665wYzl0TmoG
LLWKijQaQWRLKl+qXWcPznq3VvNUhoUoMyF3XQ5kw5KhCfJLF4RjYDbncJ7Yt8wQ
Gqr2hChilM8F7JQ/Wtn6FuAq49wUsNQMKHzuyWtCEb0f++SCTHKHnc+6GEr0bQnM
U5ndTH1hN/rr2NavJcPXLjjLIUDHgzWHPkCpqMUSO9sj++FzNbYYJWNuM4DWxPsy
kx12P67/LRJ+qyw/Ks1RlYnmBA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:04 2025 by rpki-client