Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/6JyLUIA_3_F6lFc7OjrgVvilXiM.roa
File:                     6JyLUIA_3_F6lFc7OjrgVvilXiM.roa (raw, json)
Hash identifier:          Uy0b+c0tNGh5Lnfz6gBjiWLD/+3F2702TS3OgZODmXc=
Subject key identifier:   E8:9C:8B:50:80:3F:DF:F1:7A:94:57:3B:3A:3A:E0:56:F8:A5:5E:23
Certificate issuer:       /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial:       01942068242CF56F7ED64E74D754D2A50733
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/6JyLUIA_3_F6lFc7OjrgVvilXiM.roa
Signing time:             Wed 01 Jan 2025 05:48:03 +0000
ROA not before:           Wed 01 Jan 2025 05:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205325
IP address blocks:        178.216.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:24:2c:f5:6f:7e:d6:4e:74:d7:54:d2:a5:07:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
        Validity
            Not Before: Jan  1 05:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e89c8b50803fdff17a94573b3a3ae056f8a55e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6a:52:a6:fa:cc:82:b5:3d:df:fd:92:bf:2b:
                    2c:fc:a9:14:82:04:2a:5e:26:0d:9f:8d:84:9d:6a:
                    db:63:85:7e:78:fd:93:ca:af:94:79:2e:c2:8f:fc:
                    5a:9f:e9:d3:12:16:41:ee:a7:b4:fa:32:99:39:8f:
                    22:3c:9e:c3:3e:97:28:cc:c9:cc:55:91:b1:00:f0:
                    a4:d9:93:35:be:c6:d1:01:96:42:8a:31:d7:8e:2d:
                    b0:a8:4d:af:da:41:7f:03:5c:ed:06:c3:26:db:d6:
                    00:8f:27:eb:fc:4b:c3:3d:8d:21:fc:8e:8f:1a:b8:
                    a1:50:e1:24:91:39:8f:35:d6:65:d8:dd:93:ad:16:
                    da:d6:69:1d:70:21:04:f0:87:38:94:d3:e4:f6:ae:
                    4c:56:b8:76:b3:ea:10:5f:f8:b1:37:fe:70:67:c8:
                    26:9d:d0:a3:b2:1d:f6:c6:72:f5:77:00:63:e6:fe:
                    33:85:2c:1f:66:c5:56:99:fa:94:89:75:f9:f1:eb:
                    20:f3:10:de:81:75:f6:cc:4e:db:26:83:c9:b3:10:
                    40:10:f4:ac:ed:50:74:f9:f1:68:44:c8:67:05:80:
                    3e:b8:0a:15:ec:ce:37:c0:9a:12:24:92:c8:d3:09:
                    73:ef:8e:ab:00:e7:0d:d7:b0:7a:20:53:df:38:f9:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9C:8B:50:80:3F:DF:F1:7A:94:57:3B:3A:3A:E0:56:F8:A5:5E:23
            X509v3 Authority Key Identifier:
                keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/6JyLUIA_3_F6lFc7OjrgVvilXiM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.216.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:4b:6f:0d:ba:76:2d:06:bd:a4:dd:4b:29:c5:cd:2c:d9:92:
         37:a1:e3:f6:f2:a5:cf:b8:22:a9:7c:7a:87:ad:90:7c:f6:ca:
         d8:d2:f5:23:de:ba:89:e8:ed:36:7f:95:5f:5a:32:8c:7e:ce:
         58:28:5f:e2:3e:a3:90:e6:87:03:21:11:11:8a:94:56:34:97:
         74:c7:94:27:cb:40:5a:8d:4b:31:53:b2:56:18:fc:02:a9:3e:
         eb:94:e6:59:db:09:25:58:c8:a1:55:54:50:f1:30:60:27:aa:
         1c:c4:18:4a:14:f1:9b:16:6f:c2:a4:1e:23:95:b1:59:f0:34:
         d4:b2:35:b8:47:5d:54:40:d3:fb:de:00:5d:1c:2d:a5:76:9b:
         6c:e8:ab:1d:c1:7b:9f:c8:c9:d2:a0:fb:eb:ed:0d:5c:a4:35:
         51:1e:b9:17:d8:e5:e5:c8:5b:11:26:40:7e:d3:46:f3:95:56:
         cf:3c:10:1e:2a:57:a8:3c:1c:ea:47:e1:46:69:4a:e7:c3:10:
         7d:a8:2b:a1:0a:fb:ec:6b:c0:6b:43:8f:e9:11:6a:5f:c9:9b:
         72:cb:4b:6c:50:a2:eb:f9:a5:17:8f:a0:ba:c9:54:44:72:1e:
         0c:f7:06:6d:a6:e2:7a:12:e6:0e:4f:66:04:d7:b4:7c:44:26:
         d4:00:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:41 2025 by rpki-client