Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B0bLpVaFBvYvbIaJJvSma2eqVuU.roa
File:                     B0bLpVaFBvYvbIaJJvSma2eqVuU.roa (raw, json)
Hash identifier:          zox37n1M6ZGi2OlTvxjvDZgHEiwkQb+J8FQMB5nabrQ=
Subject key identifier:   07:46:CB:A5:56:85:06:F6:2F:6C:86:89:26:F4:A6:6B:67:AA:56:E5
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       0187480009CC765B9B6954560AC795F636C7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B0bLpVaFBvYvbIaJJvSma2eqVuU.roa
Signing time:             Mon 03 Apr 2023 16:42:54 +0000
ROA not before:           Mon 03 Apr 2023 16:42:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        103.47.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:48:00:09:cc:76:5b:9b:69:54:56:0a:c7:95:f6:36:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Apr  3 16:42:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0746cba5568506f62f6c868926f4a66b67aa56e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:f5:83:d7:7c:88:82:1d:ff:0b:20:0a:75:
                    66:2f:f0:8c:84:75:f3:50:aa:ba:e0:1f:a7:c2:89:
                    ff:a4:4b:f6:06:b6:c8:a9:a2:7d:c9:96:fe:c8:c3:
                    15:01:fb:9a:05:17:d3:59:21:d2:1a:1c:53:ca:f6:
                    b8:12:05:9b:38:a9:9a:67:cb:30:24:d5:99:12:21:
                    83:10:b8:c8:3c:aa:83:6e:47:bf:7c:6e:45:38:44:
                    d8:fc:e7:6f:ef:b2:df:bc:68:e4:08:a5:29:61:2a:
                    04:7b:27:5f:ef:96:5f:01:07:7e:07:27:3c:27:2e:
                    d6:68:12:d8:39:f9:dd:ac:91:57:f6:13:cf:25:e9:
                    6f:84:ef:ef:ff:38:a6:fa:bc:c6:e0:08:51:f1:eb:
                    5f:13:a8:6c:7b:4c:a6:c5:5f:fc:e5:1d:f0:cc:7f:
                    39:3a:af:ed:86:6f:5e:f5:77:fe:a0:71:d8:ae:75:
                    2a:82:4b:85:35:e1:1b:1b:8e:54:0b:8d:7b:a5:e0:
                    46:01:ce:39:a0:dc:9d:29:6a:ac:63:eb:75:4b:f9:
                    b5:83:85:5b:f3:34:43:b8:af:88:b8:40:89:e9:03:
                    a3:18:91:d5:86:8b:9b:d4:5f:3d:7c:e7:d3:c3:4b:
                    13:4a:85:10:1a:bd:3c:16:62:e0:8b:bb:3f:30:90:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:46:CB:A5:56:85:06:F6:2F:6C:86:89:26:F4:A6:6B:67:AA:56:E5
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/B0bLpVaFBvYvbIaJJvSma2eqVuU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:6c:91:d8:e7:60:a0:24:c0:cb:9c:5f:56:fa:39:07:bc:d8:
         5c:23:f8:94:f3:f3:34:10:3f:68:ee:58:43:bc:cf:3c:b6:97:
         c8:38:a5:4f:41:18:c3:ac:36:a4:b1:9a:98:cb:63:84:1a:bd:
         5a:7c:90:8f:c3:59:8f:87:28:38:98:8d:4d:ce:9c:d1:0c:9c:
         ce:c5:dd:a1:18:69:f6:11:3e:a2:67:5b:47:f1:3c:af:d5:f7:
         82:c4:10:b3:f2:23:cc:f1:7f:a4:e9:03:f0:e0:45:21:b6:1d:
         94:83:fe:e1:b3:48:9e:ac:c3:c6:ae:26:9d:f5:00:2e:df:9b:
         fb:38:11:4a:e8:41:54:7e:78:e6:9c:69:8d:69:e1:e5:13:f9:
         1f:4e:27:a9:89:c4:d4:0c:63:e9:01:56:ac:92:1e:84:53:6e:
         46:cb:17:52:e9:48:c8:44:08:09:22:96:5f:b4:ee:dc:e8:d1:
         dc:5a:2c:10:28:d5:6e:00:b3:84:80:e1:24:e5:38:df:5b:7f:
         d9:41:e7:09:03:b9:55:1b:dc:3c:ea:7a:76:b4:3c:be:db:ac:
         af:a0:12:b2:ad:20:97:fe:d5:4d:a9:1d:03:c1:c3:29:3f:aa:
         ad:38:f8:d5:e8:73:2e:42:b5:ea:61:ac:14:6e:f7:00:d6:b4:
         a7:f4:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:32 2025 by rpki-client