Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa
File:                     mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa (raw, json)
Hash identifier:          TDdHBznqahlM2G/uYpWqUbZhEc1cWd8WZRhR6dBzKDk=
Subject key identifier:   98:4D:0F:EA:82:B9:63:8F:8D:EE:EF:68:05:D1:8A:95:3F:BF:10:9E
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       01941FFA66EE042E268EB376131A5D34B44D
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa
Signing time:             Wed 01 Jan 2025 03:48:11 +0000
ROA not before:           Wed 01 Jan 2025 03:48:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48391
IP address blocks:        93.126.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:66:ee:04:2e:26:8e:b3:76:13:1a:5d:34:b4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jan  1 03:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=984d0fea82b9638f8deeef6805d18a953fbf109e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:dd:d1:5e:3a:3f:79:00:e0:35:85:0d:6b:
                    5d:0a:80:9d:4d:46:d0:c6:63:f5:18:4c:3e:bd:cf:
                    fb:4c:c4:49:7b:2e:cc:95:5f:96:7f:9b:b8:41:e0:
                    13:ef:a7:d3:7f:c0:70:b5:6e:b3:a9:a1:95:a7:01:
                    38:a5:bb:d6:22:ef:d2:7a:6d:78:99:be:90:3c:c8:
                    a5:a2:8f:f6:63:a7:73:2b:71:a3:b6:b0:12:4f:19:
                    e3:31:cd:54:77:11:84:e5:3e:a4:de:40:67:a1:6f:
                    54:2c:aa:18:7c:33:6a:0f:4f:2a:92:6e:99:14:64:
                    10:ac:dc:dc:0a:e1:83:0d:3f:12:e8:3d:9f:82:8c:
                    73:57:f9:cb:75:2a:e7:c7:5c:fe:b9:5d:da:5b:fb:
                    97:13:2b:fd:63:dc:9b:67:58:d1:de:75:0b:e3:48:
                    df:d7:09:53:70:dc:8a:62:74:c5:75:f3:59:e9:03:
                    c5:69:58:0d:ab:61:88:4d:99:00:56:49:95:6a:1a:
                    c7:80:a0:b3:02:ec:24:2e:a9:4a:47:e3:98:97:d6:
                    d6:60:ac:ea:d6:f9:d1:b6:bd:a2:af:61:59:68:36:
                    01:d0:61:86:b8:5b:18:25:51:ab:0e:ee:45:9a:60:
                    61:75:f7:e2:94:1f:9c:d9:6b:7b:15:e6:33:78:f1:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4D:0F:EA:82:B9:63:8F:8D:EE:EF:68:05:D1:8A:95:3F:BF:10:9E
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/mE0P6oK5Y4-N7u9oBdGKlT-_EJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:91:4a:84:16:ef:c2:5d:1d:7b:a2:62:d7:88:87:a3:19:94:
         c9:04:39:14:34:16:e5:a8:f4:79:f4:46:ad:37:59:67:5e:ac:
         55:04:ca:d8:75:7d:90:73:e7:7c:7a:5c:30:d2:3e:86:bf:e6:
         6e:dd:cd:fe:4e:06:0a:40:3c:0e:12:ed:63:a5:4e:e5:62:10:
         1e:1b:b1:17:0e:f2:fd:64:b4:cc:b0:32:56:40:94:aa:ec:ef:
         51:6b:f0:ca:d6:65:ae:5b:ca:da:5b:c7:af:5f:a4:d7:12:1a:
         f1:ab:c1:45:e8:09:93:cf:02:df:8a:3c:ae:c4:7f:79:61:a8:
         23:d9:24:00:21:04:2b:d0:55:52:0c:f1:2e:b3:21:8f:ed:13:
         20:26:42:a2:7b:df:84:90:6e:bd:ac:80:39:62:df:7c:3e:e4:
         79:3c:1c:05:54:42:97:16:34:85:81:f0:5f:e6:eb:d7:22:ce:
         bc:8a:88:ee:92:dd:61:ab:1c:1a:b2:ba:f7:aa:d5:38:ee:84:
         b8:2f:4d:32:00:3a:67:3c:c0:d0:ac:5b:10:df:d8:cc:db:5f:
         83:0e:76:87:ca:d1:a6:99:aa:5f:57:80:7f:ce:83:ab:03:6d:
         54:03:3a:83:0f:e8:28:d3:01:0b:a7:05:16:1a:85:b3:6b:fa:
         5d:9f:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:05:59 2025 by rpki-client