Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/R3lT-gTuGnDZeA96aEZQGFFOq_o.roa
File:                     R3lT-gTuGnDZeA96aEZQGFFOq_o.roa (raw, json)
Hash identifier:          jGjkqK3So3KAtBAOEFdSRvrFV4KRi6t938Te18eLgog=
Subject key identifier:   47:79:53:FA:04:EE:1A:70:D9:78:0F:7A:68:46:50:18:51:4E:AB:FA
Certificate issuer:       /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial:       01949CBC7F437A8516006FF08B57481626F1
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/R3lT-gTuGnDZeA96aEZQGFFOq_o.roa
Signing time:             Sat 25 Jan 2025 09:13:06 +0000
ROA not before:           Sat 25 Jan 2025 09:13:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208324
IP address blocks:        195.7.9.0/24 maxlen: 24
                          195.7.10.0/24 maxlen: 24
                          195.7.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:9c:bc:7f:43:7a:85:16:00:6f:f0:8b:57:48:16:26:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
        Validity
            Not Before: Jan 25 09:13:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=477953fa04ee1a70d9780f7a68465018514eabfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:db:ac:ac:a9:45:81:a5:ac:13:06:20:60:
                    44:0d:62:b5:02:77:8a:4e:a5:c5:a4:a1:03:03:84:
                    33:6f:54:43:7c:66:7b:f9:16:2c:c2:1e:ad:eb:12:
                    55:c0:4a:3b:85:b5:c0:5c:9d:21:33:37:59:fc:07:
                    85:98:13:6a:db:54:a0:79:ed:7d:0e:a4:6d:50:54:
                    22:4a:9e:67:cc:73:29:3e:03:fc:9f:ce:f4:4e:dc:
                    66:3c:18:33:93:e6:72:b9:37:a6:ef:13:75:90:d3:
                    1b:9a:3d:48:8e:f3:35:d9:ad:b3:40:20:00:e2:7c:
                    73:b4:f5:4e:84:fb:40:47:7d:b9:68:5a:80:4d:a0:
                    50:41:81:d0:32:d2:26:88:8f:d2:21:64:ee:c7:d7:
                    2e:30:40:9d:f4:09:19:c2:d4:b2:f1:f5:ee:9f:9a:
                    4d:52:9b:a4:f2:86:89:06:e4:df:67:ff:9a:6f:91:
                    64:6c:0f:39:a7:36:06:d8:6e:de:3a:7c:fa:7e:7f:
                    da:f7:78:dd:7f:a2:12:c9:52:9b:b8:02:7d:6b:3b:
                    b8:ba:f1:70:58:92:41:fe:d6:6c:d4:f4:40:20:cd:
                    94:d1:7a:77:5d:7b:93:6b:de:5a:e0:13:af:4e:bb:
                    63:76:e8:8e:c7:6f:45:40:b0:d5:e2:f0:61:9a:3c:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:79:53:FA:04:EE:1A:70:D9:78:0F:7A:68:46:50:18:51:4E:AB:FA
            X509v3 Authority Key Identifier:
                keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/R3lT-gTuGnDZeA96aEZQGFFOq_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.7.9.0-195.7.11.255

    Signature Algorithm: sha256WithRSAEncryption
         56:ee:4a:83:f0:22:ff:d1:b5:05:fd:c5:10:40:8c:49:e3:19:
         68:4c:d7:e2:d2:bd:93:c2:98:77:66:2f:fd:55:82:d5:d6:ef:
         0d:f1:92:65:c6:fa:7b:57:38:db:f5:76:71:af:aa:f8:3a:3f:
         9f:88:41:2f:83:22:5f:14:e1:db:59:f1:3d:0c:ac:91:43:f5:
         0c:d7:a5:06:c9:a7:3d:26:54:85:f5:6f:9e:1e:e7:e8:b9:ac:
         9c:fd:3e:75:a3:2d:07:2b:38:5e:8c:e6:87:2e:25:35:78:ea:
         63:15:cc:0f:20:90:f8:a0:c7:fe:33:e0:b7:80:54:6a:6a:78:
         36:72:22:a9:48:cc:8d:a8:0b:a1:49:46:26:16:7c:1d:53:89:
         51:64:8e:a3:5a:01:10:06:4e:ee:78:dd:6a:65:9f:ac:10:90:
         00:8f:40:6d:96:69:66:19:7a:53:d5:51:5b:e8:af:ed:d6:98:
         f1:a6:de:e0:4e:ee:f9:3e:4d:f7:4e:40:dd:36:76:9e:54:4f:
         48:7c:d9:bb:13:a1:85:f9:71:0a:b9:c7:d5:64:95:f1:a4:10:
         3d:64:41:05:50:bc:f6:9f:69:6d:63:87:d1:99:6c:38:4e:e6:
         c4:e0:c8:c4:2e:be:ca:f0:b4:0e:32:a8:8b:cd:cc:b7:34:b0:
         87:38:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:21 2025 by rpki-client