Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa
File:                     34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa (raw, json)
Hash identifier:          sUinX0KFZ77mLTkdgIWNOruhf2qp/PO5ma6cKtLlO/w=
Subject key identifier:   6C:C1:DD:C7:8D:DF:2B:DE:87:F1:E8:C3:B2:35:53:2B:FA:E6:7E:2F
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       7CF02762E281145CFE5D65EC3A54864BD30AEF30
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa
Signing time:             Fri 27 Dec 2024 11:47:46 +0000
ROA not before:           Fri 27 Dec 2024 11:42:46 +0000
ROA not after:            Fri 26 Dec 2025 11:47:46 +0000
asID:                     203020
IP address blocks:        45.134.116.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f0:27:62:e2:81:14:5c:fe:5d:65:ec:3a:54:86:4b:d3:0a:ef:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Dec 27 11:42:46 2024 GMT
            Not After : Dec 26 11:47:46 2025 GMT
        Subject: CN=6CC1DDC78DDF2BDE87F1E8C3B235532BFAE67E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e4:43:dc:00:86:b0:6c:98:14:0e:0a:0f:84:
                    10:f2:68:34:e3:0f:2a:94:6b:7c:d5:33:46:4c:49:
                    25:11:02:62:35:dc:d0:69:ab:46:e3:b5:a7:e7:48:
                    e2:71:aa:2e:88:bc:bf:c6:e5:05:69:9a:d6:22:59:
                    10:c8:26:9e:40:c9:45:f0:80:7e:21:39:50:b7:21:
                    c2:8a:64:2e:a9:2d:d7:2a:d7:29:3c:dd:e6:99:a3:
                    56:cb:69:f1:1f:fd:ba:52:f5:d5:7e:b1:eb:bd:e8:
                    1f:b1:b7:eb:27:65:9c:b1:b3:29:97:d6:9f:e2:e1:
                    af:a3:b7:eb:1e:cf:ea:ef:8e:54:17:05:f3:dd:44:
                    11:3a:8b:14:29:10:a5:ae:bf:a0:d5:32:fc:8d:ca:
                    32:89:ca:bb:bc:1c:54:89:24:c0:51:82:1f:21:f9:
                    e4:72:0d:30:df:4b:89:9e:58:3a:e0:2c:1b:7f:a1:
                    89:19:ad:82:61:2c:b2:4d:56:89:1b:34:96:d8:3e:
                    39:af:7b:34:75:3a:e9:c5:d0:ba:9e:10:44:b5:b2:
                    25:9d:79:c0:3f:e9:ea:15:ad:47:f4:f6:24:d9:e6:
                    22:d2:c1:24:39:16:c9:19:c9:08:9d:71:64:e5:e7:
                    23:4e:27:c7:66:55:41:6b:fb:a7:d9:bf:0b:24:27:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C1:DD:C7:8D:DF:2B:DE:87:F1:E8:C3:B2:35:53:2B:FA:E6:7E:2F
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:08:a0:36:fb:e7:8c:c0:60:55:f7:ed:9f:99:e0:cd:21:
         8d:22:f3:b9:5b:e0:c8:21:3e:96:bc:9f:cc:b7:83:e5:c1:ce:
         6f:af:9a:47:45:61:44:87:4d:0a:46:6b:3c:d4:b4:a3:8c:d7:
         4c:6e:72:e9:8f:13:a8:8e:30:e7:43:a9:ea:75:01:74:d6:f3:
         77:d9:7d:04:21:55:17:b4:04:e5:2e:e2:13:7e:c0:84:34:45:
         12:92:6a:43:d5:c1:b9:08:51:55:e8:44:b6:64:65:c4:ed:21:
         0a:af:83:66:d9:38:06:ba:9a:34:30:61:f7:a2:7a:2b:8f:40:
         ef:04:48:51:22:ce:79:5d:76:27:46:3b:e1:17:65:4d:11:fa:
         a3:14:49:74:92:18:ed:3d:84:43:1a:a6:90:b0:96:2d:f1:3e:
         35:46:13:e6:51:47:a0:a7:4c:89:41:7f:ec:66:d6:86:e3:0d:
         25:a6:af:3e:b9:66:f7:47:67:5d:1c:97:ff:01:b1:f8:80:f0:
         1e:d3:52:9e:95:e0:1f:c5:e6:2a:79:8d:3a:c9:ba:c1:9d:ff:
         5b:ff:7f:2a:45:c5:c2:bb:8a:82:a0:cf:98:98:00:1c:f8:bd:
         2d:1f:b2:95:5a:e5:e2:c0:df:43:00:bc:8a:7f:ac:4c:dd:83:
         6b:e7:cc:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:51 2025 by rpki-client