Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa
File:                     sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa (raw, json)
Hash identifier:          Sxfegd8dDdgBw/BGcRFtl+Zhhz8tR0R0fRjO1Pzn9hA=
Subject key identifier:   B0:93:91:94:32:18:84:9F:9E:A1:55:8F:9C:EA:4C:95:30:54:2D:9D
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       0194252198F96D78C356DDC628C08A1123E7
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa
Signing time:             Thu 02 Jan 2025 03:49:06 +0000
ROA not before:           Thu 02 Jan 2025 03:49:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198121
IP address blocks:        193.224.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:98:f9:6d:78:c3:56:dd:c6:28:c0:8a:11:23:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Jan  2 03:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b09391943218849f9ea1558f9cea4c9530542d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e7:53:cf:f8:9d:3e:12:6d:bf:d0:3b:47:ca:
                    15:0a:c9:39:da:c7:08:13:82:b1:c8:34:0a:af:72:
                    de:81:04:3e:43:c9:ab:4f:6d:cb:8c:bb:32:17:e2:
                    f1:96:bc:19:8a:32:dc:05:f9:52:b5:b8:4d:7c:6b:
                    94:5d:8e:15:96:96:0b:bd:8e:1e:75:f5:84:83:2b:
                    46:f0:84:77:74:e7:14:95:cd:ec:c8:be:93:1a:13:
                    71:0d:a1:b3:09:14:04:d5:7d:6d:b5:b0:2c:c8:09:
                    84:0f:de:33:55:b3:35:a7:2a:ac:a2:1f:28:1b:5b:
                    60:fd:a4:7f:b6:74:54:5e:26:e5:eb:70:f1:fe:0f:
                    b1:ed:af:2c:50:15:38:62:d5:8e:c4:0b:e6:34:6f:
                    0f:e4:1b:22:8d:bb:ae:ba:5e:29:10:9b:42:5f:ac:
                    d9:4b:a9:8f:ef:06:f8:c6:f3:ef:fe:c2:cf:2f:30:
                    4d:cf:16:77:d9:97:8d:d7:48:b4:9e:3f:e7:0c:8f:
                    ba:bc:d0:ce:b1:0d:7a:70:a3:eb:29:6b:8f:b9:13:
                    38:17:16:8e:0a:19:32:26:c4:1c:ce:3e:43:aa:07:
                    08:3b:89:55:49:ff:39:19:63:89:bf:7d:eb:09:67:
                    a9:dd:ae:32:8e:c2:e1:1a:6e:03:82:ec:20:6e:9c:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:93:91:94:32:18:84:9F:9E:A1:55:8F:9C:EA:4C:95:30:54:2D:9D
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/sJORlDIYhJ-eoVWPnOpMlTBULZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.224.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:48:aa:ff:de:17:ff:e5:c1:d1:ab:2a:0c:b4:14:b5:a7:8b:
         7d:33:3e:84:56:38:05:f5:9c:5d:0c:50:bf:19:13:86:1b:ce:
         f6:e3:56:b3:9b:1b:23:d4:cc:4d:f2:01:1b:fa:71:3a:b3:dc:
         3c:36:70:1c:31:1d:27:09:fb:54:4c:d3:68:e1:e2:8c:0f:c5:
         6c:e0:8b:18:c6:b0:dd:2c:59:7e:21:65:f2:a9:c6:1d:2d:c0:
         7c:0a:6e:09:50:fd:d8:1f:f7:92:8a:08:6d:8f:47:2a:a7:44:
         94:e0:80:5a:67:c4:47:ef:57:54:16:34:09:e6:c9:90:f4:26:
         ee:8d:d7:c9:16:b9:e2:d4:6c:c2:d4:87:8a:84:33:9c:2b:43:
         3a:87:fa:25:46:e8:2d:5d:cf:84:54:e7:0a:25:80:ab:61:70:
         20:7e:86:98:e9:cd:63:17:5f:c5:b4:dd:7c:93:89:b2:cd:2b:
         fe:de:60:70:eb:04:5c:ed:7e:24:2e:ec:00:b9:a1:58:60:5d:
         1b:21:f7:e0:29:bd:0d:dd:75:c2:a3:11:70:e3:3e:c0:91:89:
         51:c2:aa:13:e2:4b:01:2f:29:88:59:4c:10:2b:7a:c7:f5:ed:
         64:12:84:28:cc:e9:c4:e8:3e:31:74:ae:88:bb:12:8e:6f:67:
         3e:c7:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:44 2025 by rpki-client