Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/RUbC7Anwng13DAmADxwjexI1dI4.roa
File:                     RUbC7Anwng13DAmADxwjexI1dI4.roa (raw, json)
Hash identifier:          z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=
Subject key identifier:   45:46:C2:EC:09:F0:9E:0D:77:0C:09:80:0F:1C:23:7B:12:35:74:8E
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       019425FDB5F0B4CC49623393A983EA4C2CC8
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/RUbC7Anwng13DAmADxwjexI1dI4.roa
Signing time:             Thu 02 Jan 2025 07:49:31 +0000
ROA not before:           Thu 02 Jan 2025 07:49:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212833
IP address blocks:        188.215.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:b5:f0:b4:cc:49:62:33:93:a9:83:ea:4c:2c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: Jan  2 07:49:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4546c2ec09f09e0d770c09800f1c237b1235748e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:e9:a5:0e:9a:eb:4a:4d:71:ff:31:9a:28:
                    a6:b3:11:4d:8d:04:aa:41:d0:6c:42:ae:4b:43:b9:
                    61:2b:26:15:fa:72:ec:d6:c3:42:9e:f6:d1:be:f8:
                    fe:c7:cf:09:38:09:7d:81:c2:76:9d:de:58:c7:fe:
                    e4:29:08:8e:0b:26:c7:03:cd:23:a1:a1:3c:6a:d2:
                    f8:83:88:03:16:fa:e7:93:d6:7c:c6:11:c3:cd:e0:
                    e0:45:6a:0d:fe:40:f0:b9:57:2b:75:0c:d5:6c:ce:
                    86:0c:2e:3f:21:00:bc:ca:b1:c8:fb:1b:68:af:c4:
                    db:06:ab:d4:d8:d7:d1:4e:c3:b9:22:2b:81:fb:74:
                    ad:4f:f1:d6:54:8e:b5:65:98:96:08:f1:92:24:59:
                    d3:71:ef:8b:31:17:1e:19:2b:ed:c3:b1:53:78:30:
                    0b:87:b0:d5:f0:e9:1a:81:48:dc:5f:68:ae:b2:39:
                    bf:b7:d0:a5:ac:a1:db:5c:20:19:12:df:2c:fb:84:
                    27:c1:2f:42:d5:ad:99:ec:e9:d2:bc:8a:30:14:1f:
                    09:ae:9b:b2:9e:04:e5:64:29:5f:c6:6f:3c:a9:d4:
                    7d:12:21:8b:f7:ab:f3:1c:0a:03:17:07:96:41:0b:
                    39:d9:f8:e5:36:88:ab:6c:0e:b1:c8:65:c5:e4:6d:
                    d3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:C2:EC:09:F0:9E:0D:77:0C:09:80:0F:1C:23:7B:12:35:74:8E
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/RUbC7Anwng13DAmADxwjexI1dI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:2a:94:66:dd:32:85:0d:75:da:5d:b8:86:9a:8e:4c:38:
         6e:b8:ac:23:cd:71:d4:02:a3:f5:7c:ad:18:55:cc:71:0b:24:
         68:a2:25:06:3c:26:38:89:03:55:c8:6f:2c:db:d1:68:5a:a3:
         47:cb:d8:40:c4:8a:12:eb:83:7e:89:b6:2c:34:28:6c:ef:bc:
         8c:1e:f9:09:38:02:61:12:1e:6e:3c:b7:7a:32:a5:4a:d2:1f:
         6b:c7:2c:46:b2:8d:d6:74:4c:77:ac:0c:73:a2:10:80:83:8f:
         8e:1c:ea:1a:ff:2f:4d:a4:95:56:76:eb:c6:21:ee:90:ac:9e:
         10:34:df:21:fb:3d:fe:01:e2:7c:4e:9a:47:64:2e:48:c7:48:
         ee:d7:70:6a:93:40:b8:fe:92:a8:5c:ed:b1:67:c3:1c:93:ca:
         4c:c1:0f:0c:bf:65:f9:80:b3:60:fe:de:bf:58:a6:36:6f:58:
         e1:5c:d0:08:50:4c:a1:be:32:3a:b5:fe:31:92:1a:3f:d4:ac:
         4c:78:73:68:74:a4:41:62:7e:10:b1:32:ab:50:74:9e:ab:83:
         2e:92:a3:72:2c:2b:49:6e:0d:5a:08:35:01:db:6b:54:cb:c9:
         b9:d0:64:49:08:ba:3a:36:5f:f3:8c:94:2c:74:79:ec:52:03:
         26:6b:f2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:26:58 2025 by rpki-client