Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/g-jIWTGusT1Pd0EzYCYJPlo_V10.roa
File:                     g-jIWTGusT1Pd0EzYCYJPlo_V10.roa (raw, json)
Hash identifier:          rU4QB22UKJ/f6i1fM6bnIKFFo0DzgyOmLtH9gDvBjBM=
Subject key identifier:   83:E8:C8:59:31:AE:B1:3D:4F:77:41:33:60:26:09:3E:5A:3F:57:5D
Certificate issuer:       /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial:       01942067DD6EF5965CF0FDAC2842454E8617
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/g-jIWTGusT1Pd0EzYCYJPlo_V10.roa
Signing time:             Wed 01 Jan 2025 05:47:45 +0000
ROA not before:           Wed 01 Jan 2025 05:47:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204784
IP address blocks:        185.184.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:dd:6e:f5:96:5c:f0:fd:ac:28:42:45:4e:86:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
        Validity
            Not Before: Jan  1 05:47:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=83e8c85931aeb13d4f7741336026093e5a3f575d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:75:25:95:0f:5f:99:f5:7b:ce:7c:0e:e0:
                    c2:dd:3c:6c:99:35:97:bd:eb:4c:28:07:18:2b:1b:
                    c7:68:81:72:be:c9:37:1c:4a:ac:95:99:02:55:15:
                    58:7a:36:b9:ec:64:6d:45:fd:15:2a:60:91:8e:24:
                    21:c8:5e:b6:f5:45:6c:32:8a:a1:df:e9:8c:9c:ee:
                    be:9c:9d:65:ca:ec:fa:55:20:ce:0c:3c:71:48:8d:
                    80:97:2a:67:b3:36:0d:12:9b:bd:b8:02:10:b8:01:
                    9d:68:32:ee:11:b3:72:0e:40:9f:a1:16:3b:9d:c5:
                    34:22:23:4a:64:03:45:3f:e5:ef:d3:28:34:92:73:
                    7e:c7:5d:2e:0a:a9:6d:17:61:94:4d:1c:39:ab:b8:
                    dd:40:69:1f:c5:87:e2:ac:eb:23:f5:f9:70:fa:b3:
                    6d:58:c3:8b:b8:fd:c7:d4:09:7a:9c:95:5c:6f:f9:
                    32:b1:e7:ca:cd:95:09:8e:5f:66:76:08:0f:92:48:
                    53:37:fa:a3:04:bf:56:d7:32:7b:41:6e:55:b1:a2:
                    77:40:e6:bf:8f:1e:d3:a5:d3:1a:c6:f1:08:18:a0:
                    96:21:c5:8a:73:c6:42:3b:4c:07:4a:51:19:bb:35:
                    e3:bc:69:68:5f:22:8b:bd:be:2d:05:00:5e:75:d3:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:C8:59:31:AE:B1:3D:4F:77:41:33:60:26:09:3E:5A:3F:57:5D
            X509v3 Authority Key Identifier:
                keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/g-jIWTGusT1Pd0EzYCYJPlo_V10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:62:30:c6:03:38:72:a3:de:6d:50:5a:36:07:39:13:24:7e:
         2f:47:97:03:85:f6:3f:0d:d5:90:24:32:68:74:e6:cd:b8:6b:
         cd:70:e0:37:8f:53:8d:41:35:c6:83:83:73:b5:95:5f:7c:d2:
         ca:c2:ad:d0:5a:99:fc:8e:d1:4d:0b:c2:7e:db:ac:22:f3:b1:
         14:6f:3e:1b:fa:db:c2:6e:5f:4a:48:22:71:f4:e7:ae:d0:cc:
         00:4b:e9:e8:2b:21:6a:a7:99:25:94:e5:46:24:38:1f:da:44:
         ad:db:53:c2:eb:ef:3d:d1:59:30:a6:49:55:e7:50:4d:f3:20:
         28:d9:44:f6:cb:23:bc:42:75:68:d1:75:2c:86:d8:8e:94:c3:
         ef:7a:bf:59:76:58:48:9a:71:ad:33:98:bb:20:38:4f:7f:2b:
         69:8f:c1:dd:1c:a7:ff:ab:4c:e2:6e:34:12:30:ce:54:c6:a4:
         ac:62:ef:0c:8f:79:20:2b:d6:a4:65:bc:15:6b:8f:48:b5:a9:
         f4:48:cf:c9:ac:63:7b:ad:7c:a9:c0:c0:59:6b:64:48:dd:a9:
         90:8e:e3:0c:91:cb:c1:57:34:a7:89:34:9c:8f:6c:10:8f:57:
         a3:04:61:4a:1d:f3:6a:aa:3a:5f:ae:09:0a:e9:69:e1:a6:ae:
         88:85:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:27 2025 by rpki-client