Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UIM3u2RrxxGFQf4gHU5tF3LVVos.roa
File:                     UIM3u2RrxxGFQf4gHU5tF3LVVos.roa (raw, json)
Hash identifier:          W4aw3r4CW+y7K3dZjabgGtG4lzWdZtrhj6PL666sgjg=
Subject key identifier:   50:83:37:BB:64:6B:C7:11:85:41:FE:20:1D:4E:6D:17:72:D5:56:8B
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018B01330A0E465378FBB26445A8192DD3F2
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UIM3u2RrxxGFQf4gHU5tF3LVVos.roa
Signing time:             Thu 05 Oct 2023 18:56:44 +0000
ROA not before:           Thu 05 Oct 2023 18:56:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        176.105.231.0/24 maxlen: 24
                          45.150.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:01:33:0a:0e:46:53:78:fb:b2:64:45:a8:19:2d:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Oct  5 18:56:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=508337bb646bc7118541fe201d4e6d1772d5568b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:e1:5c:88:d0:a7:0a:0e:6d:c2:f7:8f:a6:
                    22:1f:ff:0b:f3:16:b9:53:1c:6c:54:db:f9:d5:31:
                    4b:e8:d2:17:78:9c:5a:f1:88:22:e6:04:17:b7:62:
                    2f:58:0a:df:2f:cb:ca:4e:1e:a4:8b:8c:d7:a2:9c:
                    c6:25:fa:73:19:ee:c6:dd:d3:8b:7f:7e:dc:8c:0c:
                    12:5c:36:d8:0e:81:81:50:83:4d:35:44:83:df:17:
                    d2:cb:a1:27:9a:ac:bb:ff:ea:0a:53:cd:d3:6f:24:
                    b2:c3:14:b6:0b:c6:5d:de:df:b9:eb:e3:e6:0d:7a:
                    5a:84:3e:b8:dc:4d:ea:75:80:c5:c2:08:c0:f6:4f:
                    43:ed:bd:3c:65:ce:e4:58:b8:4c:34:29:9f:09:ae:
                    1b:0f:a4:56:f1:64:c1:96:db:bd:02:ff:7a:f2:52:
                    ae:b2:5f:9f:9c:44:5b:91:9b:5a:7d:4f:1d:18:ec:
                    05:15:c3:96:89:cb:11:9b:bb:d9:60:02:ff:8c:00:
                    86:e0:c2:cf:66:67:76:ad:de:98:1e:64:8d:5c:25:
                    59:18:e4:7b:8d:c0:4d:48:dd:df:1d:72:5e:75:b2:
                    76:8e:5e:3e:69:e7:8c:4b:08:61:32:9c:a5:85:43:
                    5c:85:e6:ff:23:65:69:70:fc:4e:e9:69:cf:ac:45:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:83:37:BB:64:6B:C7:11:85:41:FE:20:1D:4E:6D:17:72:D5:56:8B
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/UIM3u2RrxxGFQf4gHU5tF3LVVos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24
                  176.105.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:01:6a:91:62:be:00:58:32:fa:02:c5:f6:0b:74:7b:49:65:
         ff:71:41:56:37:c7:c5:d6:91:c9:dd:a7:61:e8:40:6b:9a:4e:
         39:a2:2a:a0:51:d8:2f:83:bd:d4:c7:45:76:f7:6f:36:b1:79:
         84:30:7c:23:ec:4c:95:e4:23:58:4c:2a:f5:ba:c0:0a:75:75:
         d1:0e:59:b4:75:ce:cd:7c:5d:11:bd:8b:05:16:e9:e3:32:f3:
         70:d5:39:7f:e2:b7:5e:e0:47:a6:4e:8b:b8:b3:04:ab:af:26:
         d8:f2:7d:65:6c:24:e6:56:01:3b:4e:a1:10:44:ba:69:52:2b:
         ba:0b:d6:b3:b6:39:48:a7:ba:fd:e4:76:3e:4a:b5:12:d2:62:
         5d:14:7d:fb:8d:28:68:ea:c6:45:6f:99:4a:43:cc:91:6f:69:
         c8:90:29:09:e5:22:bd:93:0c:44:22:81:90:47:d1:7d:7e:d6:
         63:12:e0:72:2c:27:9e:51:33:fc:06:33:d2:8e:25:dc:2a:13:
         23:85:a3:87:95:25:b5:26:12:24:49:97:1f:48:af:c4:e2:6f:
         cd:9b:15:36:2b:f3:3d:65:58:ca:c6:3d:9d:72:25:f6:8c:a9:
         0f:2c:e2:b9:0f:03:ff:47:a9:6d:b1:14:ca:61:53:4f:43:ee:
         76:6a:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:14:38 2025 by rpki-client