Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gcI39M5sxc5sqiLp0QCjxZ6fAus.roa
File:                     gcI39M5sxc5sqiLp0QCjxZ6fAus.roa (raw, json)
Hash identifier:          uWlmIBx/5O7lHokMk++8WcKcTNHYF7eyFNhWjZRxGqE=
Subject key identifier:   81:C2:37:F4:CE:6C:C5:CE:6C:AA:22:E9:D1:00:A3:C5:9E:9F:02:EB
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       0751EEFC
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gcI39M5sxc5sqiLp0QCjxZ6fAus.roa
Signing time:             Tue 11 Jan 2022 14:07:15 +0000
ROA not before:           Tue 11 Jan 2022 14:07:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211557
IP address blocks:        45.141.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122810108 (0x751eefc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jan 11 14:07:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=81c237f4ce6cc5ce6caa22e9d100a3c59e9f02eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:93:88:3e:cd:c6:9c:fc:09:c1:24:ee:8f:55:
                    d7:ff:e8:e2:4b:b0:dd:c7:04:4d:05:24:16:d6:63:
                    ea:2b:87:76:89:53:92:68:d9:b2:a8:a0:44:30:1a:
                    1c:4f:f8:3b:79:ce:e5:47:09:62:32:2d:1e:14:d8:
                    c2:4b:4a:22:d4:ae:1c:36:7b:3f:9a:0f:36:ac:05:
                    cc:cd:42:ea:ae:d2:ee:94:25:52:10:ac:17:d8:72:
                    c2:cd:fb:2b:58:4e:e6:9b:2d:e8:37:83:60:eb:16:
                    f4:ae:59:ac:7d:8c:56:6c:87:ea:6c:f1:93:e2:ae:
                    fd:d9:f3:7c:72:30:da:5c:af:3a:bf:0d:de:81:6f:
                    63:74:77:e2:68:e2:84:36:27:dd:f0:29:7e:42:4b:
                    fc:3c:53:6e:eb:b2:07:fa:33:c5:19:c9:f8:90:84:
                    01:2c:d1:65:07:c8:07:0c:df:58:4c:07:2e:c1:5e:
                    56:b7:b0:c5:dc:0a:84:c7:e7:dc:9a:1f:25:5e:c2:
                    77:e9:b7:68:16:96:1c:dc:1e:3a:13:32:be:e5:ca:
                    a7:c3:69:1a:bd:63:07:a2:10:f8:10:fd:11:af:b3:
                    73:2b:1a:13:a5:87:b6:c9:26:e3:c9:81:4d:bf:b5:
                    0b:7a:03:10:26:0a:24:4e:16:98:33:73:5c:59:4b:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C2:37:F4:CE:6C:C5:CE:6C:AA:22:E9:D1:00:A3:C5:9E:9F:02:EB
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/gcI39M5sxc5sqiLp0QCjxZ6fAus.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:76:12:0c:88:e3:aa:e3:d5:a7:14:6c:13:34:b8:43:f5:ee:
         8e:fc:71:b2:7c:1f:e2:86:8b:7a:a1:b8:db:2d:eb:13:ad:be:
         44:ab:fa:05:b1:cf:02:41:50:ee:6c:b6:98:23:a4:46:40:f0:
         3d:17:5d:9c:ec:32:c2:79:0b:ab:a9:c3:28:60:d6:df:a8:77:
         0e:1d:f0:fa:60:da:cb:4c:5f:3d:14:56:fa:5a:49:85:94:b9:
         fb:5e:0c:fe:ee:d6:54:fb:75:a3:39:e7:99:e5:7a:06:48:87:
         e7:a3:f3:a0:0b:6d:15:2f:51:24:fd:13:c9:61:c9:f1:76:90:
         03:d1:55:59:d8:dd:b7:2c:3d:c3:2c:c7:01:31:f9:58:d9:19:
         f2:e9:4c:04:4e:be:77:7a:52:d0:50:8a:58:91:2e:c7:cc:e7:
         6a:f2:8d:90:8b:d4:c5:7e:2a:cf:56:44:92:3d:fd:a9:e2:5c:
         91:1f:dd:80:3f:cd:07:06:93:2d:63:09:c4:85:14:a2:59:0d:
         b2:4b:2d:2e:60:5f:c1:7f:5d:22:f5:f8:a7:d7:9d:0e:c6:89:
         df:b0:04:14:52:71:a1:85:43:9d:d4:a3:57:95:af:a1:f5:1a:
         3f:4a:00:5f:e8:1c:fd:eb:19:c5:d4:dc:1f:63:24:d5:b2:3b:
         0d:12:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:39 2025 by rpki-client