Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/C0U58VF1Z8MJMu6toB_Molwp6_M.roa
File:                     C0U58VF1Z8MJMu6toB_Molwp6_M.roa (raw, json)
Hash identifier:          dluLTN0hLsTKN6dyn/2fB6lj/AU7B5k9+g4WeatAJAw=
Subject key identifier:   0B:45:39:F1:51:75:67:C3:09:32:EE:AD:A0:1F:CC:A2:5C:29:EB:F3
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       079CB8B7
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/C0U58VF1Z8MJMu6toB_Molwp6_M.roa
Signing time:             Sat 28 May 2022 01:51:13 +0000
ROA not before:           Sat 28 May 2022 01:51:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127711415 (0x79cb8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 28 01:51:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b4539f1517567c30932eeada01fcca25c29ebf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:c2:99:2a:e5:ba:29:5f:e5:30:de:50:00:
                    da:d1:41:07:a3:a9:ed:af:d5:a2:fb:be:ad:31:47:
                    0b:9c:31:2c:29:6f:17:3e:c8:39:df:84:6a:6d:23:
                    7d:60:d5:5d:46:ee:ab:1d:2d:5e:e5:e4:05:56:b0:
                    95:4b:7c:d5:09:1d:6e:50:94:42:c2:83:29:da:85:
                    f0:65:f1:1c:08:35:cb:2a:d6:50:81:58:21:67:16:
                    a4:3b:5b:db:61:04:47:80:ec:15:f5:c2:17:32:70:
                    f8:d3:6b:20:c7:3e:a2:c6:72:7e:7e:31:c1:f5:db:
                    c8:41:cb:50:56:4a:c1:ec:9b:2a:31:27:ac:79:a9:
                    ee:84:1f:d9:bf:d4:18:a9:7d:aa:44:bb:fc:7c:fc:
                    80:72:4a:19:10:7f:66:b6:fc:68:94:12:cd:77:8e:
                    8b:d6:91:c7:5c:70:09:55:56:9b:37:f2:c5:e8:9c:
                    37:c7:b9:f3:cd:9a:ad:88:ed:56:62:c0:1b:5f:86:
                    8e:2c:a1:07:bb:34:b4:ce:2e:d3:3d:ce:d7:e7:82:
                    34:80:90:7a:72:39:5e:73:eb:ce:d3:09:9b:ad:d7:
                    35:3a:5e:a8:7b:1c:f3:d6:51:29:f9:29:3f:ea:95:
                    f3:ec:79:d1:b4:04:90:84:3f:45:02:dc:49:2b:fd:
                    4e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:45:39:F1:51:75:67:C3:09:32:EE:AD:A0:1F:CC:A2:5C:29:EB:F3
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/C0U58VF1Z8MJMu6toB_Molwp6_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:e0:10:78:68:bb:f1:3d:19:a1:32:a2:39:f0:92:10:74:
         6c:99:57:cb:d7:83:85:a3:fe:c0:e2:df:58:f7:fb:75:51:fb:
         55:94:de:26:da:dd:0e:53:fc:da:90:9a:a2:bf:b4:90:65:fc:
         42:49:97:3b:b4:29:66:2b:ee:30:d3:7b:4e:fa:c6:7c:ba:b0:
         2d:00:a8:0e:9b:97:9b:db:0f:17:8d:4e:81:0c:93:b7:00:2f:
         b0:fc:be:49:bc:d8:8f:4a:35:1c:28:ab:ef:72:ff:87:ed:8a:
         9d:f6:fc:a1:73:48:aa:97:68:39:23:71:47:9d:db:b1:8e:8d:
         87:65:ff:58:58:48:50:77:3a:93:91:f5:46:9b:d7:ed:92:7a:
         e1:04:aa:84:0e:fe:4c:2d:61:a8:4f:78:8a:5d:ec:0d:62:54:
         a2:79:f1:3c:b2:13:df:e4:d7:cf:63:45:6a:78:03:52:4f:68:
         48:fd:a8:12:bb:a9:3e:f3:15:a1:c4:aa:32:3f:7a:26:5a:d0:
         92:c2:da:4a:d0:5d:1a:d0:8a:53:a3:6b:21:1a:d7:5a:e3:21:
         3a:f5:be:5e:23:93:2d:4f:32:8d:b6:32:51:d8:3c:b1:7b:37:
         eb:e0:e5:ed:b4:06:72:72:cb:aa:fc:ca:c2:9c:4e:fc:90:b4:
         5b:79:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:40 2025 by rpki-client