Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/EB-ovjBJy9YLtI0G9naYyw1VZyM.roa
File:                     EB-ovjBJy9YLtI0G9naYyw1VZyM.roa (raw, json)
Hash identifier:          FMArSaljz9hHBEie2vPt0x+mtXqFvVb7EB55kMnZbMA=
Subject key identifier:   10:1F:A8:BE:30:49:CB:D6:0B:B4:8D:06:F6:76:98:CB:0D:55:67:23
Certificate issuer:       /CN=48ad86cff11670ab3c69a8b6e050403733aa30ef
Certificate serial:       02260E
Authority key identifier: 48:AD:86:CF:F1:16:70:AB:3C:69:A8:B6:E0:50:40:37:33:AA:30:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SK2Gz_EWcKs8aai24FBANzOqMO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/EB-ovjBJy9YLtI0G9naYyw1VZyM.roa
Signing time:             Tue 08 Feb 2022 18:37:39 +0000
ROA not before:           Tue 08 Feb 2022 18:37:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        194.26.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140814 (0x2260e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ad86cff11670ab3c69a8b6e050403733aa30ef
        Validity
            Not Before: Feb  8 18:37:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=101fa8be3049cbd60bb48d06f67698cb0d556723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:02:48:a4:c0:98:90:93:c1:aa:e3:b5:60:
                    1b:a5:85:30:ce:16:3a:b8:1a:34:43:98:60:fd:28:
                    66:56:3b:5d:2b:c9:05:a7:2f:f3:6b:33:38:d9:c7:
                    f8:3c:fe:fb:24:91:9e:75:48:66:e2:d1:af:d2:0f:
                    ff:7c:38:29:29:8a:a6:1b:93:c0:45:ca:71:1f:ff:
                    43:d8:d9:55:a6:a7:c4:6b:3d:71:f1:16:47:72:ca:
                    b7:65:d2:de:98:e1:1e:17:09:c8:79:4b:11:f7:36:
                    bf:f6:22:0f:be:e5:5d:ea:64:1f:3d:14:f1:3f:40:
                    a6:24:4d:c6:5e:2f:dd:e7:a6:2a:67:be:ce:04:a1:
                    74:a3:71:8b:b5:78:2e:8f:d9:91:92:8c:89:48:8f:
                    bf:5f:64:84:d5:47:de:0b:40:e3:6c:f4:16:5f:dd:
                    15:38:16:a4:dc:2d:d8:b3:c0:1a:ef:a3:b9:94:c2:
                    73:f9:ea:80:da:2a:f7:0c:b6:1a:36:28:cb:16:3c:
                    ac:56:ad:c7:61:b9:94:16:3f:44:c7:94:0c:18:39:
                    b1:10:9f:53:b7:f9:27:02:60:96:17:eb:ae:55:28:
                    08:da:d0:11:de:c9:e6:fd:44:50:cd:53:c9:a8:5b:
                    09:18:99:36:3c:b9:98:dc:6d:bc:25:1a:38:bb:25:
                    05:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:A8:BE:30:49:CB:D6:0B:B4:8D:06:F6:76:98:CB:0D:55:67:23
            X509v3 Authority Key Identifier:
                keyid:48:AD:86:CF:F1:16:70:AB:3C:69:A8:B6:E0:50:40:37:33:AA:30:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK2Gz_EWcKs8aai24FBANzOqMO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/EB-ovjBJy9YLtI0G9naYyw1VZyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/SK2Gz_EWcKs8aai24FBANzOqMO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:32:44:35:07:15:c0:2c:99:5f:24:e2:8d:92:d4:6d:58:
         56:41:35:23:0a:a3:e8:09:0a:98:57:05:81:c8:ff:4a:f9:be:
         1f:65:6e:ac:57:82:d2:4a:17:da:20:74:ec:6f:89:aa:34:03:
         17:84:63:b4:b0:3c:b3:6a:64:3a:7f:e2:02:65:02:92:f2:59:
         75:b6:50:5c:25:67:ca:21:39:c8:71:f1:ed:56:91:86:0d:0b:
         22:5a:81:07:8b:2a:90:b5:95:c0:9b:2e:ec:97:78:0b:06:53:
         ab:3c:da:72:fb:b8:1d:a4:d5:63:34:64:35:b0:4b:48:44:09:
         6c:79:b2:f7:f8:a2:16:55:e2:2d:47:cf:8a:90:99:0d:23:52:
         6b:50:55:9f:2f:ab:72:98:cc:ad:e4:eb:70:d9:03:35:c1:0b:
         ee:e1:ad:d7:8f:ef:1f:ef:d4:5b:2a:4f:90:16:9d:91:d0:46:
         57:2c:b6:7b:c5:1c:34:84:39:0c:79:a2:60:03:03:85:c5:d2:
         c7:67:e1:95:f0:2e:cd:ef:81:70:9c:0c:bb:49:99:4f:c4:39:
         b9:ac:26:63:7f:3d:e4:8c:22:fc:59:4b:1c:8b:23:70:cf:9d:
         91:80:41:3a:55:66:53:eb:b4:4b:ce:ee:8b:b4:3d:85:55:65:
         e6:c5:ed:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:48:15 2025 by rpki-client