Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/jKF6wz72ScPZmeo0mi6NVEee2Ck.roa
File:                     jKF6wz72ScPZmeo0mi6NVEee2Ck.roa (raw, json)
Hash identifier:          sHGvoA4HrviEHqRZltmXvCtbovC4E+aIWU8zCVPgBoc=
Subject key identifier:   8C:A1:7A:C3:3E:F6:49:C3:D9:99:EA:34:9A:2E:8D:54:47:9E:D8:29
Certificate issuer:       /CN=b855a226f4eb12a5516deca1196b71287ca0185c
Certificate serial:       5E7123
Authority key identifier: B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/jKF6wz72ScPZmeo0mi6NVEee2Ck.roa
Signing time:             Sat 01 Jan 2022 00:51:29 +0000
ROA not before:           Sat 01 Jan 2022 00:51:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        146.19.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6189347 (0x5e7123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b855a226f4eb12a5516deca1196b71287ca0185c
        Validity
            Not Before: Jan  1 00:51:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ca17ac33ef649c3d999ea349a2e8d54479ed829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:dd:20:51:90:4a:6d:5e:50:0f:81:a9:33:
                    04:4f:11:88:cb:fc:35:85:2a:e4:40:75:d8:9f:c7:
                    fb:3a:ce:4d:e4:48:c2:4f:9b:2a:98:ba:aa:43:62:
                    d5:50:a1:cc:09:ba:7e:17:81:3a:be:3b:4e:32:48:
                    1a:b9:3b:a2:3c:ca:8b:94:b7:68:8b:23:d7:07:b9:
                    1b:07:83:d9:e2:78:2d:54:d8:bf:4e:b3:92:5b:61:
                    1c:18:75:e6:a0:21:ce:ef:1c:c0:36:fe:bd:0b:63:
                    45:6d:70:1e:3b:b8:42:41:73:5d:56:68:55:c1:f9:
                    f9:8f:21:2c:b9:15:63:41:22:cf:f1:ed:0d:06:30:
                    59:5a:76:66:bf:16:7e:07:e7:27:d2:24:00:f9:24:
                    07:1b:df:59:c4:92:68:75:ac:90:1a:50:d2:f6:5e:
                    32:4b:10:61:35:45:be:44:c0:9d:0f:93:d6:ee:9a:
                    3b:1f:fe:af:f9:40:15:f5:d1:94:54:eb:37:9e:be:
                    91:8a:76:d7:84:25:2b:96:ab:50:57:d8:90:2e:93:
                    4e:14:2b:81:92:35:fa:ea:ee:6f:38:9f:06:99:c9:
                    5d:2d:80:d2:72:5a:a3:18:05:fe:5d:b9:64:db:c2:
                    98:b9:43:06:39:2f:cb:c1:4f:f5:5b:08:fc:75:49:
                    36:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A1:7A:C3:3E:F6:49:C3:D9:99:EA:34:9A:2E:8D:54:47:9E:D8:29
            X509v3 Authority Key Identifier:
                keyid:B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/jKF6wz72ScPZmeo0mi6NVEee2Ck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:66:88:a9:e8:c7:78:b4:c2:8a:3a:ea:52:4c:d8:11:3f:9d:
         2a:3c:78:76:48:36:40:a6:42:1f:22:3a:83:f3:21:74:c3:d7:
         56:9c:01:1d:8e:01:5a:5e:89:eb:3f:0a:36:ea:49:07:75:32:
         e0:22:fd:0b:dd:c5:0b:82:9d:97:60:ff:74:7a:94:4b:86:9e:
         f3:de:6a:6c:85:91:4c:1e:7b:69:52:6e:ee:2d:c9:62:b2:f9:
         4e:34:ae:0a:1a:d3:bc:2b:b9:0d:26:fd:f6:b5:e5:c7:8b:1c:
         a9:86:d8:5b:87:20:9a:d9:2a:34:78:d6:2a:c2:d1:ac:8f:c6:
         78:79:fa:52:ee:4e:cf:dd:95:8d:b2:4f:1d:28:10:1e:3e:85:
         3c:72:af:02:fc:b5:24:37:84:4c:e9:84:1a:2b:db:24:56:43:
         54:81:03:81:dd:b0:7b:e8:95:9a:58:bc:94:c7:f6:a0:e6:5b:
         06:5e:09:49:3e:dd:26:58:e4:50:36:b6:7b:a1:23:de:86:88:
         c5:2b:90:5a:13:99:7e:88:ea:7e:d3:66:af:89:82:6f:6b:27:
         72:a0:f2:1f:9c:7c:c7:73:a1:9a:be:9c:4e:ef:0c:99:68:7c:
         54:ee:7d:89:4e:c0:2a:dd:50:24:95:e3:53:03:d9:c2:80:ff:
         60:ae:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:04 2025 by rpki-client