Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa
File:                     Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (raw, json)
Hash identifier:          cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=
Subject key identifier:   1B:1E:A4:3D:CC:B1:A5:00:9F:8F:30:CE:AA:F4:CF:22:A7:E1:CD:2A
Certificate issuer:       /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial:       0194236A0EC787F22CE5D23B4C8AF134B2B8
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa
Signing time:             Wed 01 Jan 2025 19:49:00 +0000
ROA not before:           Wed 01 Jan 2025 19:49:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2906
IP address blocks:        37.77.184.0/21 maxlen: 24
                          185.2.220.0/22 maxlen: 24
                          2a00:86c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:0e:c7:87:f2:2c:e5:d2:3b:4c:8a:f1:34:b2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
        Validity
            Not Before: Jan  1 19:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1b1ea43dccb1a5009f8f30ceaaf4cf22a7e1cd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:bd:66:b1:86:f3:7e:43:cb:b5:57:4f:f5:
                    9b:45:34:0b:4c:04:41:3a:01:dc:5f:cb:19:65:3b:
                    29:66:d0:22:5d:5b:4a:05:21:d2:96:ca:f7:ee:b1:
                    d0:64:37:eb:5c:a1:af:04:c9:a1:24:65:7e:70:09:
                    fe:ff:0b:08:cc:73:dc:1e:66:4c:b6:db:c7:51:36:
                    0d:7b:24:e1:81:e9:7a:6a:09:44:d9:2d:cc:c6:ab:
                    db:a7:7c:d1:c9:9c:40:db:7b:c2:6a:e9:6b:29:de:
                    53:33:e1:7f:a7:08:22:6e:df:ec:2e:1c:45:25:f3:
                    e9:85:ca:cb:07:50:06:e3:a6:49:99:85:35:9d:61:
                    2f:0a:77:bd:51:8a:fd:22:8e:cd:61:24:2b:b4:f8:
                    28:22:9f:c0:c1:4d:d9:40:1e:41:95:55:9d:de:14:
                    26:c4:00:8b:41:d9:7a:03:86:3d:ac:6d:23:be:b2:
                    c1:76:89:dd:bd:e5:e8:93:b7:2c:c7:0b:4e:3d:94:
                    aa:a7:93:5f:10:6b:d5:9e:51:ee:c7:8b:79:2b:ac:
                    e2:8a:d3:8f:63:21:49:09:a5:fa:c8:9b:d4:74:e2:
                    3e:de:85:2f:7e:d9:4d:1f:ec:04:ee:70:5d:46:87:
                    7d:11:80:60:11:69:68:10:8d:87:de:ec:cd:1a:d7:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1E:A4:3D:CC:B1:A5:00:9F:8F:30:CE:AA:F4:CF:22:A7:E1:CD:2A
            X509v3 Authority Key Identifier:
                keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.184.0/21
                  185.2.220.0/22
                IPv6:
                  2a00:86c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:70:2e:a4:39:11:9b:a2:fe:7f:c4:29:89:20:c7:3e:fc:92:
         0f:af:7f:f5:a7:98:8f:d5:20:bc:9d:b8:d9:ff:c3:f2:84:9b:
         33:a2:c1:54:58:06:d2:a5:d5:47:04:e8:09:40:f0:40:1d:dc:
         78:aa:5e:c4:ee:d0:40:2c:ba:11:8a:52:3a:d2:6d:8f:1c:87:
         b1:73:1b:44:fe:33:5a:ce:1d:ad:05:f7:bd:cb:81:79:c6:1e:
         e5:d9:de:8a:f4:17:03:5d:05:1b:1f:61:63:de:66:70:00:d2:
         56:8f:58:b1:8b:ef:f7:17:39:c1:9d:14:5a:9c:0d:65:82:11:
         93:6b:29:c3:c9:8b:04:a5:d6:8c:0e:13:bd:1a:56:c0:39:aa:
         b6:e6:23:7f:33:ad:a9:03:6c:d2:31:94:cb:00:08:7d:e9:ff:
         99:16:d0:fa:1c:a4:8d:6f:4f:e4:96:49:28:9f:ba:a9:15:74:
         05:bc:75:7f:2e:9a:1f:5b:67:ec:f7:48:34:97:b0:e5:c0:d6:
         22:d6:b3:0c:c0:42:f5:f5:20:b4:e1:19:d2:fd:1f:ed:bb:5d:
         cc:bb:26:42:16:72:ae:ef:96:18:af:5a:cf:5a:38:46:aa:3c:
         5f:bc:0c:e7:34:61:96:0c:89:42:10:f8:91:6a:7a:3a:01:3e:
         84:1b:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:16:57 2025 by rpki-client