Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/W6KxeoLPp69-NZgXYljCkgfMzmI.roa
File:                     W6KxeoLPp69-NZgXYljCkgfMzmI.roa (raw, json)
Hash identifier:          WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=
Subject key identifier:   5B:A2:B1:7A:82:CF:A7:AF:7E:35:98:17:62:58:C2:92:07:CC:CE:62
Certificate issuer:       /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial:       019423D7123838F7ED184CF646F7FC3679D5
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/W6KxeoLPp69-NZgXYljCkgfMzmI.roa
Signing time:             Wed 01 Jan 2025 21:48:04 +0000
ROA not before:           Wed 01 Jan 2025 21:48:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199263
IP address blocks:        92.118.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:12:38:38:f7:ed:18:4c:f6:46:f7:fc:36:79:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
        Validity
            Not Before: Jan  1 21:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5ba2b17a82cfa7af7e3598176258c29207ccce62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:78:1f:9c:64:75:d8:72:38:ca:37:dd:ad:
                    5a:d2:0b:6d:bd:7c:84:bf:c4:8b:b9:3f:93:2e:30:
                    0f:4f:f8:f9:3e:ec:35:6a:fe:eb:a2:5c:b1:25:6a:
                    22:a8:4d:49:9f:27:01:a0:df:17:04:bb:8d:20:ce:
                    0f:18:4d:4d:9d:2d:f6:e8:9a:4e:40:25:ef:39:bd:
                    c9:74:06:f3:07:99:a0:65:2f:a8:48:a7:29:b4:99:
                    e5:c3:09:30:f0:1c:c3:0c:8d:e1:81:55:49:87:75:
                    bc:b6:d9:b3:70:58:84:92:70:c4:6d:fa:40:3f:56:
                    53:10:95:89:ad:10:7d:d4:9c:7c:ea:b6:3d:9b:91:
                    7f:f1:1f:51:05:63:3f:2b:7f:7a:26:39:78:67:15:
                    ec:b0:89:a5:55:49:21:f8:ad:4a:00:e7:ae:e3:76:
                    7f:c9:8b:f1:31:c5:0a:3b:80:9f:2a:27:eb:16:20:
                    77:01:69:5e:ec:14:85:5a:04:f9:f3:cd:bf:2f:4a:
                    9d:c2:a4:0f:11:08:f5:eb:4a:9d:0e:72:3e:c6:35:
                    2b:2e:65:f3:57:84:76:06:55:d1:7d:84:a7:43:b9:
                    83:62:b2:4f:36:f9:73:b4:fa:67:4a:cb:43:75:29:
                    e9:60:4c:73:85:90:b3:6e:c4:75:8f:41:47:d1:c8:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A2:B1:7A:82:CF:A7:AF:7E:35:98:17:62:58:C2:92:07:CC:CE:62
            X509v3 Authority Key Identifier:
                keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/W6KxeoLPp69-NZgXYljCkgfMzmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:68:8c:8a:83:6c:4f:98:63:93:f5:38:d0:46:df:a5:d9:0e:
         b2:0d:05:d5:2f:ae:95:d2:45:b1:e7:bc:d5:e7:c0:17:cb:78:
         4f:ac:1c:86:be:a9:52:83:a7:48:53:13:cb:4f:ed:94:6c:ca:
         ea:74:ee:b7:66:b1:4e:8b:10:1e:f4:56:42:3d:89:92:63:10:
         98:50:e0:41:f1:c3:e3:44:33:92:2d:dd:c3:31:e0:19:f1:f3:
         b3:4b:e4:91:8e:86:5a:ba:6d:12:29:fe:b3:7b:aa:7b:b9:c8:
         4a:c1:19:f3:ea:2f:a9:7f:7d:bd:75:bb:27:21:65:02:37:8b:
         de:f2:7d:49:cc:20:90:89:1d:f2:d7:f7:d6:54:d0:90:4e:09:
         0c:da:c2:b4:ce:8a:ff:e3:8d:c6:cb:e1:c7:74:2d:3c:85:b1:
         81:94:7a:52:16:6c:5a:c4:f0:6e:1e:8d:d8:fc:7e:be:e2:66:
         a6:c5:8d:18:1e:a3:d4:c6:9e:42:3f:12:e9:f0:6b:59:7e:2e:
         0e:10:a0:28:6a:ff:9f:20:fc:84:4f:25:a1:d5:ea:03:49:a1:
         21:86:a1:ba:21:32:b0:3f:92:ac:e2:b4:fd:93:98:99:6c:65:
         f2:39:ff:6c:ee:e3:a6:3a:7f:7b:14:5b:90:66:b2:d1:4f:dd:
         5f:20:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:31:33 2025 by rpki-client