Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/0/39312e3139332e3131342e302f32342d3234203d3e203437363839.roa
File:                     39312e3139332e3131342e302f32342d3234203d3e203437363839.roa (raw, json)
Hash identifier:          sND/nLOXh0EI7KvNcZnw72UQIQxZ1zDBEYk65ZMw99g=
Subject key identifier:   33:70:07:E9:60:73:BF:0C:28:0A:B4:DC:28:32:E7:BA:DD:E1:F0:EA
Certificate issuer:       /CN=73a83c810157e3e8511eebe39cfcad16fa329700
Certificate serial:       447F06C47CD867C856D4801564690342D7890561
Authority key identifier: 73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/0/39312e3139332e3131342e302f32342d3234203d3e203437363839.roa
Signing time:             Sun 12 Jan 2025 07:12:29 +0000
ROA not before:           Sun 12 Jan 2025 07:07:29 +0000
ROA not after:            Sun 11 Jan 2026 07:12:29 +0000
asID:                     47689
IP address blocks:        91.193.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7f:06:c4:7c:d8:67:c8:56:d4:80:15:64:69:03:42:d7:89:05:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73a83c810157e3e8511eebe39cfcad16fa329700
        Validity
            Not Before: Jan 12 07:07:29 2025 GMT
            Not After : Jan 11 07:12:29 2026 GMT
        Subject: CN=337007E96073BF0C280AB4DC2832E7BADDE1F0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:11:c5:3c:90:11:1c:42:2f:7f:ce:9a:0f:fc:
                    bb:ac:6f:51:78:d1:02:3f:89:9f:8e:0f:ef:84:31:
                    79:97:34:55:ae:17:55:aa:b1:9a:19:80:e2:c0:36:
                    d7:f4:dd:9b:83:bf:b3:ec:4b:79:48:62:32:2e:e5:
                    1f:26:80:bb:a9:9d:c3:ee:13:c2:70:38:6f:66:d5:
                    87:5e:62:41:a2:38:d3:0d:40:38:d5:48:0c:db:03:
                    81:15:f2:cf:79:a6:75:47:61:94:a8:ca:37:1d:e0:
                    a1:b5:c5:fb:f8:30:26:41:c7:4f:aa:cb:c4:6d:17:
                    34:7f:86:2d:d4:2e:19:86:73:4a:f1:31:14:8e:ab:
                    ad:7b:cf:ee:2b:b1:0b:40:bb:b0:09:60:28:45:4a:
                    b5:35:34:68:b9:7b:ed:f5:59:61:6b:55:d9:bf:e9:
                    3e:8a:7f:1f:d5:2e:16:1e:cf:5d:65:67:3d:6e:73:
                    fd:55:73:51:ae:ca:ff:5d:fb:f3:74:f5:35:ca:e1:
                    36:12:10:5e:32:ba:7e:3a:a8:25:7b:ad:28:10:cb:
                    af:17:67:5d:ba:2a:b7:64:9a:19:56:72:3b:45:53:
                    57:af:2b:03:a9:30:fd:11:76:d6:dc:1a:0e:6f:ac:
                    cf:e4:bd:83:64:ab:c8:a3:17:5d:78:81:ac:9a:45:
                    69:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:70:07:E9:60:73:BF:0C:28:0A:B4:DC:28:32:E7:BA:DD:E1:F0:EA
            X509v3 Authority Key Identifier:
                keyid:73:A8:3C:81:01:57:E3:E8:51:1E:EB:E3:9C:FC:AD:16:FA:32:97:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/0/73A83C810157E3E8511EEBE39CFCAD16FA329700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6g8gQFX4-hRHuvjnPytFvoylwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/0/39312e3139332e3131342e302f32342d3234203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.193.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:ac:d5:5a:a1:0d:05:0e:99:69:19:85:03:37:7c:68:c2:
         a0:e6:69:77:72:e9:bc:69:df:80:e0:f9:84:25:7f:e4:ac:4b:
         0e:79:c9:2e:ad:38:0b:13:12:90:58:09:bd:3a:f9:6e:e1:75:
         c7:b6:96:e8:b6:e6:94:61:f5:b4:ed:74:39:94:f0:ba:a2:ae:
         41:38:10:75:92:33:3e:f7:03:49:6d:db:5f:8c:15:94:1d:0a:
         7e:f6:c9:ed:74:58:80:5f:c9:ad:5f:9f:09:ad:e4:62:62:15:
         2f:f8:20:bc:b7:5e:45:ac:2a:11:8d:c2:56:25:ec:db:e9:8c:
         e2:ac:2e:e9:e2:30:5b:20:b3:14:b2:f2:de:d6:bc:fa:8f:60:
         28:ce:be:69:a9:54:61:fa:99:c9:cf:c1:74:07:96:81:f6:55:
         20:e8:e3:41:fd:d9:e4:b6:00:ff:c9:7a:8e:9d:d8:ac:3c:84:
         dd:1c:6f:05:83:db:fe:2b:1c:40:39:bd:32:5b:b3:ed:f6:2a:
         be:70:dc:63:33:26:a4:c3:40:0d:7f:6c:4e:99:58:5a:e4:8a:
         27:90:c0:1b:0b:b8:d6:64:a3:09:2e:91:98:3d:ae:d5:74:96:
         91:d4:6c:17:59:d7:0f:8f:a6:43:6d:23:b5:12:36:1e:70:e3:
         e7:67:c6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:29:43 2025 by rpki-client