Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa
File:                     EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa (raw, json)
Hash identifier:          pUBA00I+CQC2RPjmIddeqkkbXGoBJUyoSnMxqvr2Gas=
Subject key identifier:   10:E9:46:8C:39:66:43:7C:E3:58:B5:3C:EC:E6:13:58:35:9C:08:46
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       01941FFA860C7290CE0205ABDDB302A019ED
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa
Signing time:             Wed 01 Jan 2025 03:48:19 +0000
ROA not before:           Wed 01 Jan 2025 03:48:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200762
IP address blocks:        178.57.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:86:0c:72:90:ce:02:05:ab:dd:b3:02:a0:19:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Jan  1 03:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=10e9468c3966437ce358b53cece61358359c0846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:23:8d:22:4c:05:36:03:c7:f4:d2:ba:fa:
                    fc:2a:73:a3:72:2c:18:62:05:7e:7e:67:8f:85:35:
                    b9:47:27:1d:e4:39:ba:be:f8:2c:dd:f5:c7:74:cb:
                    bc:13:3e:91:3c:be:5b:bd:65:7e:8e:56:eb:f3:9a:
                    60:8e:9f:7e:74:49:77:1a:2e:9d:c5:48:a8:2d:59:
                    36:c7:33:56:96:f1:07:3b:f8:cc:cc:1c:11:ef:84:
                    46:28:09:e2:d1:49:40:18:73:4a:88:ab:d4:96:a7:
                    bd:f1:c6:b3:99:dd:72:02:8e:e7:6a:f7:28:e4:8d:
                    31:7a:7b:b1:b2:43:93:50:86:40:52:3c:7f:4e:0c:
                    28:78:ea:31:96:6a:01:c2:9b:15:5c:fb:46:b5:2c:
                    b8:64:df:31:f0:35:02:36:5e:c4:df:4e:96:01:76:
                    02:c0:07:a3:20:9e:e1:f7:6f:63:92:b7:d0:6c:dd:
                    4a:19:2f:b2:bf:32:66:f1:8e:b8:46:8a:0b:72:14:
                    84:e6:ba:79:98:22:93:1d:83:1c:67:ef:6c:9b:de:
                    d7:3d:5a:b2:39:56:00:ac:01:98:e7:17:b0:72:0b:
                    18:de:fd:db:64:1b:46:90:95:a9:9f:fd:9b:43:bb:
                    19:33:43:c2:97:56:ee:9b:a9:d7:91:02:22:47:34:
                    98:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E9:46:8C:39:66:43:7C:E3:58:B5:3C:EC:E6:13:58:35:9C:08:46
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.57.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:0e:c8:f4:17:f8:bd:2d:a8:6d:b4:e9:8d:82:16:b8:e4:d0:
         25:a4:74:10:d6:aa:af:48:eb:ac:40:f2:ff:48:a4:c4:ee:26:
         62:bb:7c:c9:ee:cf:0a:d7:4d:c4:a5:5d:96:82:8e:c1:70:e5:
         71:ba:55:15:68:b1:22:18:94:57:11:0d:21:bb:6d:49:46:36:
         db:d7:df:af:d2:c5:b6:54:30:f2:1b:4b:2c:97:7e:63:cc:22:
         47:03:dc:d5:9c:b6:8e:e6:98:88:c9:56:12:14:4e:85:f2:28:
         03:e9:50:1b:6a:54:d5:12:aa:f7:79:99:b0:9e:3e:86:41:b0:
         78:23:47:69:6f:19:bf:4e:64:a6:50:01:c4:0b:2c:75:fe:b7:
         47:f6:6b:fe:d4:34:8b:67:72:23:ba:da:3c:eb:59:5f:2a:1f:
         19:b8:58:22:33:73:dc:22:08:b0:77:54:d3:9b:a7:1b:2e:1f:
         8a:c4:f0:ae:d6:cd:f5:3f:6e:ad:17:cb:2e:e8:9c:8f:b5:49:
         5f:3e:a9:58:71:b6:76:13:b2:22:27:36:4b:b8:6b:e3:7c:ee:
         73:8c:f1:74:99:0d:51:36:35:e8:0d:41:27:95:5c:03:66:f7:
         39:a0:1c:8a:79:ed:d5:e8:25:03:0c:51:1c:02:d5:a7:b1:98:
         bd:14:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:46:36 2025 by rpki-client