Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/6CEtivK74NJgBMIuPj5XmdDpJiw.roa
File:                     6CEtivK74NJgBMIuPj5XmdDpJiw.roa (raw, json)
Hash identifier:          0R6+jGSxrCSPR99SvTSz643X+yvdQgHOmi6ojYrcSnM=
Subject key identifier:   E8:21:2D:8A:F2:BB:E0:D2:60:04:C2:2E:3E:3E:57:99:D0:E9:26:2C
Certificate issuer:       /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial:       032A0FBA
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/6CEtivK74NJgBMIuPj5XmdDpJiw.roa
Signing time:             Sat 01 Jan 2022 11:04:26 +0000
ROA not before:           Sat 01 Jan 2022 11:04:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25098
IP address blocks:        185.139.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53088186 (0x32a0fba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
        Validity
            Not Before: Jan  1 11:04:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8212d8af2bbe0d26004c22e3e3e5799d0e9262c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:7e:2b:ba:13:be:9e:20:00:97:c1:ef:14:
                    d6:79:f3:f4:cc:34:60:b6:ea:ac:e8:06:ed:a4:07:
                    47:7b:f2:58:06:c7:a0:94:c1:7a:6d:c9:4d:be:b8:
                    a7:db:c2:e9:6b:25:95:48:43:57:96:33:fc:76:91:
                    fb:ff:34:b5:7d:38:65:da:0d:61:65:37:e1:14:21:
                    08:40:0a:e3:de:7c:93:41:6c:7d:58:7c:c4:8c:3a:
                    85:68:11:aa:5f:b9:20:83:fe:87:8f:33:3e:97:c6:
                    9d:47:b1:da:29:0e:78:19:06:a2:5c:5e:c1:3c:ad:
                    18:22:0c:52:4f:30:bd:95:22:1c:a6:32:1f:5b:28:
                    b0:56:54:5b:0e:40:94:42:1d:bd:de:94:17:26:62:
                    7b:80:94:99:cc:1a:e8:9e:72:a4:1f:35:45:85:45:
                    a0:38:55:46:20:0d:c5:75:b8:af:0e:10:7e:35:1a:
                    ab:22:0c:9b:31:4b:c9:65:91:66:f2:43:7d:d5:fc:
                    71:7d:c2:c3:4a:62:6d:4c:98:74:2f:d6:a7:e3:64:
                    45:79:b7:cd:f5:8f:90:65:94:c6:f0:68:6b:f8:80:
                    72:36:40:f7:72:16:b3:30:a8:f6:a5:9d:c0:1d:99:
                    62:6f:fd:59:a2:46:c7:eb:f1:d6:82:55:86:2f:bf:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:21:2D:8A:F2:BB:E0:D2:60:04:C2:2E:3E:3E:57:99:D0:E9:26:2C
            X509v3 Authority Key Identifier:
                keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/6CEtivK74NJgBMIuPj5XmdDpJiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:e2:68:a9:d0:90:d3:f4:2b:c6:80:a8:16:c5:61:11:4e:
         79:5f:04:8d:6b:c9:79:1c:68:68:d9:68:b3:3c:0c:21:f0:ae:
         0b:b7:58:4e:b5:89:88:f3:eb:aa:04:14:35:53:14:75:d2:7b:
         cb:57:0a:50:46:3c:86:72:15:bd:d1:7e:a8:c9:78:3f:e5:3c:
         79:eb:f2:30:b8:89:b6:e6:3b:45:56:85:82:c8:2a:0b:08:3f:
         f7:d5:c8:c6:ea:d8:55:bc:1f:06:04:c6:96:97:60:dc:bf:7b:
         ae:d1:ca:64:60:31:2b:fd:9c:e0:2a:1c:62:e3:57:08:61:43:
         b6:78:f5:3f:a0:20:2d:11:c3:95:a6:2f:36:f5:d8:d4:28:5b:
         e4:a9:eb:3d:df:22:65:78:62:08:7d:3d:e1:c0:ef:bc:1a:9f:
         27:72:e6:26:93:26:19:94:7b:c9:bc:c7:05:14:28:21:47:9e:
         43:63:be:27:87:98:a9:38:b9:36:35:45:f5:88:bf:81:24:69:
         bd:87:a0:11:a5:89:c2:c0:20:9a:1e:da:74:2e:5e:22:64:25:
         0b:57:37:36:82:8b:67:22:a8:d8:7d:bf:3e:a5:38:cf:55:19:
         39:a7:1d:80:e5:b0:4d:c2:3c:69:08:24:95:6f:fb:7d:c1:61:
         c8:f0:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:10:20 2025 by rpki-client