Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/eACO2yCjoUrbvQ0JX-Nn8dYuPTk.roa
File:                     eACO2yCjoUrbvQ0JX-Nn8dYuPTk.roa (raw, json)
Hash identifier:          Wd2jDAAyhumbAmYMvyrhZDJmp4gnAqsr/TiV6fYbZEY=
Subject key identifier:   78:00:8E:DB:20:A3:A1:4A:DB:BD:0D:09:5F:E3:67:F1:D6:2E:3D:39
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       01A190633F4969A23CE68AAD604C0176D490
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/eACO2yCjoUrbvQ0JX-Nn8dYuPTk.roa
Signing time:             Sat 31 Oct 2026 05:16:25 +0000
ROA not before:           Sat 31 Oct 2026 05:16:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8796
IP address blocks:        45.81.128.0/24 maxlen: 24
                          45.91.80.0/24 maxlen: 24
                          45.91.82.0/24 maxlen: 24
                          45.91.83.0/24 maxlen: 24
                          45.135.116.0/24 maxlen: 24
                          45.135.117.0/24 maxlen: 24
                          45.140.89.0/24 maxlen: 24
                          45.153.8.0/24 maxlen: 24
                          45.153.9.0/24 maxlen: 24
                          45.155.222.0/24 maxlen: 24
                          45.155.223.0/24 maxlen: 24
                          193.227.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:90:63:3f:49:69:a2:3c:e6:8a:ad:60:4c:01:76:d4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Oct 31 05:16:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78008edb20a3a14adbbd0d095fe367f1d62e3d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:a7:4f:ac:c5:df:26:f3:10:4b:71:eb:4d:
                    94:53:06:ac:29:f5:b4:8a:e0:8f:6d:04:10:e9:c5:
                    a7:88:c8:2d:18:a2:5a:4f:c4:25:09:b6:a7:45:93:
                    ca:a6:ac:53:83:cd:8c:89:2f:5f:5b:eb:fe:0c:b1:
                    f6:f1:01:0b:00:23:f2:a4:ad:28:73:0c:d2:4d:20:
                    0a:a6:75:51:11:e7:08:cd:ce:3c:5a:a3:e4:6b:53:
                    cb:38:97:7a:ac:34:b4:43:1f:92:69:a8:6a:4b:3d:
                    f9:d0:63:76:66:16:66:7d:d3:8f:2f:50:1a:82:fa:
                    e0:d9:16:da:5d:17:83:de:0f:53:be:da:c3:af:20:
                    46:7c:93:c9:db:a6:f2:6a:6d:0c:0e:41:8a:11:2f:
                    0e:f5:55:d7:53:e4:7c:04:09:97:27:8c:75:48:1f:
                    66:9c:78:fe:b6:02:70:fd:59:d1:ef:fd:c5:cc:b7:
                    7b:00:e6:c0:ae:22:41:60:bb:93:f3:ed:72:9b:2e:
                    d8:f8:40:da:99:73:f8:c8:40:cf:bd:77:13:7e:0b:
                    54:39:20:e0:8e:da:99:a5:35:33:c5:c0:5f:e0:e6:
                    24:77:ea:f5:0c:5c:49:0b:59:f5:76:5b:ec:8e:14:
                    99:1e:d5:bc:6a:da:ba:39:b9:c9:15:a8:7e:dd:29:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:00:8E:DB:20:A3:A1:4A:DB:BD:0D:09:5F:E3:67:F1:D6:2E:3D:39
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/eACO2yCjoUrbvQ0JX-Nn8dYuPTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.128.0/24
                  45.91.80.0/24
                  45.91.82.0/23
                  45.135.116.0/23
                  45.140.89.0/24
                  45.153.8.0/23
                  45.155.222.0/23
                  193.227.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:30:ca:86:8f:65:4c:bf:82:01:23:46:83:d4:53:aa:f9:a8:
         ea:e9:ed:c7:63:e0:fe:22:21:55:05:71:2c:90:4c:c9:58:67:
         a6:06:8f:d1:78:20:02:41:0f:5e:b3:e0:53:55:66:35:28:6e:
         12:83:a9:85:98:a1:ed:23:2b:8d:98:0d:56:ce:d0:ac:35:57:
         96:55:b5:34:54:99:06:51:da:d8:d3:34:52:74:06:fc:75:b9:
         c6:53:f5:ed:b3:16:28:5b:7d:3c:6f:43:8d:6d:b4:fe:1a:85:
         39:28:62:42:cf:f2:71:b8:a3:00:f2:21:8f:9e:d8:26:ee:35:
         7d:66:ba:87:a5:fd:54:0c:83:50:9b:ea:3b:55:96:ec:37:d0:
         46:20:2b:d6:14:00:1d:cf:25:e7:79:a6:b3:a1:4d:6a:6d:8f:
         90:23:e0:e6:02:de:49:4d:ff:7a:f5:de:df:ae:b1:af:5c:d4:
         fe:ae:a3:0d:85:b0:9a:22:fe:21:89:c6:0f:e9:90:1d:91:19:
         06:1e:84:fb:6f:6c:1d:8e:db:44:91:d6:22:bd:9d:f2:ac:74:
         20:36:28:1d:a0:8b:d6:74:1b:5b:0b:42:46:1e:57:6f:f5:1d:
         6c:d7:17:7d:e3:a2:75:06:18:c9:e9:5d:8b:dd:1f:4f:0d:73:
         c9:4d:e4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----