Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fFwaSB6oPpGfSiByWez2SFa_rGY.roa
File:                     fFwaSB6oPpGfSiByWez2SFa_rGY.roa (raw, json)
Hash identifier:          LxzMdlP4zFTqq2EX+aWV6UOOUnVsfJ25pC1EWBPnUmk=
Subject key identifier:   7C:5C:1A:48:1E:A8:3E:91:9F:4A:20:72:59:EC:F6:48:56:BF:AC:66
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07460277
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fFwaSB6oPpGfSiByWez2SFa_rGY.roa
Signing time:             Sat 21 May 2022 03:40:29 +0000
ROA not before:           Sat 21 May 2022 03:40:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122028663 (0x7460277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 21 03:40:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c5c1a481ea83e919f4a207259ecf64856bfac66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:4f:ee:1d:d2:4d:1d:59:e0:71:6a:e3:d0:
                    32:7b:54:0f:d4:b7:95:18:5e:3c:26:c6:dc:25:f6:
                    99:00:06:6a:56:22:f8:99:b2:75:2c:fc:60:87:d3:
                    64:72:32:45:e8:ba:bd:bf:43:f1:a4:90:80:27:0f:
                    6d:35:52:ff:d6:c9:11:9a:4c:70:57:7f:4c:ce:3c:
                    15:5e:c2:bf:a0:a3:68:d3:85:9b:0b:6e:e0:6e:d1:
                    1f:de:e1:65:7e:80:eb:24:e6:e9:63:97:f1:7d:d6:
                    0d:e7:b4:c9:97:32:4a:00:4b:8f:13:0b:09:63:e0:
                    25:9d:29:48:b4:ef:e8:88:50:76:f7:41:84:d4:b3:
                    fe:a1:95:7b:fd:ca:b8:02:a1:4f:7e:28:16:0b:79:
                    e9:05:f4:2d:59:e0:58:d0:28:6c:60:bc:08:61:ba:
                    81:65:7f:27:57:87:f3:95:17:e3:77:ae:2a:7e:9c:
                    62:82:1a:1c:ca:36:6a:54:22:eb:8f:69:f6:3e:ec:
                    fb:7f:4a:e8:61:62:67:94:e2:bf:53:25:ed:43:7e:
                    59:05:c0:ae:54:b7:42:f6:20:e2:39:10:dc:30:13:
                    b5:ed:a8:49:99:25:cc:de:fc:56:03:d1:ba:d9:dd:
                    68:75:6b:8f:e0:9b:e7:3a:5a:19:98:99:4f:f7:84:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5C:1A:48:1E:A8:3E:91:9F:4A:20:72:59:EC:F6:48:56:BF:AC:66
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fFwaSB6oPpGfSiByWez2SFa_rGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:88:e9:de:bf:dd:79:12:8b:bd:c0:cd:4a:e3:49:c3:7a:d7:
         7b:c6:ec:30:98:80:99:2c:17:12:1d:dc:64:af:6e:b5:fc:cb:
         f3:03:34:09:32:34:a7:13:79:14:2e:b4:e8:e5:01:aa:5b:0a:
         4f:a9:d6:33:12:d5:ed:e4:2a:13:16:dd:3c:c9:cf:d4:74:c9:
         93:ce:a7:1c:79:0f:eb:d8:29:90:1e:cd:6a:ea:46:e2:43:25:
         83:aa:26:1f:9c:5c:81:0d:6c:8f:73:27:e7:80:63:30:d8:eb:
         cd:97:2b:dd:4c:1c:a3:85:31:7a:77:b0:9d:83:f8:f7:91:78:
         fd:8c:c7:33:3f:27:83:61:39:44:2b:a8:72:8c:67:3c:6f:87:
         a5:51:62:14:3c:d1:2b:d4:e4:1c:74:49:34:07:e3:07:93:0b:
         a1:82:eb:1c:5f:5c:84:87:4d:69:a0:e1:f2:ab:a6:24:94:7d:
         e8:32:2a:1b:f2:05:cd:90:d8:1a:5c:ab:0d:f6:d2:69:09:75:
         c0:11:e5:87:2e:d1:ce:59:bc:39:23:44:30:44:fb:6f:87:b1:
         ed:e6:75:b3:4f:a7:da:0b:35:80:16:ba:fc:0d:63:da:bc:ea:
         e1:b5:f6:aa:24:84:d8:cb:19:05:42:02:9d:ec:5f:b4:12:a3:
         9a:98:5d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:43 2025 by rpki-client