Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/e1OHDARd5_HIQSu76_wDGm36ods.roa
File:                     e1OHDARd5_HIQSu76_wDGm36ods.roa (raw, json)
Hash identifier:          Kx0qfDVju35uRgSYfqxaLxxDjdzd+Z1Te44ogbWqAiA=
Subject key identifier:   7B:53:87:0C:04:5D:E7:F1:C8:41:2B:BB:EB:FC:03:1A:6D:FA:A1:DB
Certificate issuer:       /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial:       018217DAACDC184D756F62AB58F9ABB72138
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/e1OHDARd5_HIQSu76_wDGm36ods.roa
Signing time:             Tue 19 Jul 2022 19:06:23 +0000
ROA not before:           Tue 19 Jul 2022 19:06:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199366
IP address blocks:        185.118.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:17:da:ac:dc:18:4d:75:6f:62:ab:58:f9:ab:b7:21:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
        Validity
            Not Before: Jul 19 19:06:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b53870c045de7f1c8412bbbebfc031a6dfaa1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:1f:ef:39:10:a5:f3:7b:be:3f:6a:85:e2:
                    8c:75:4b:9a:a3:8f:6e:60:bd:45:4f:a3:9c:49:72:
                    c9:cc:b6:20:96:eb:fb:71:c5:7d:01:d9:2c:37:00:
                    dc:38:36:30:ff:04:3d:e2:79:4b:42:ce:6c:ea:1a:
                    65:5a:41:20:b6:d6:39:4e:f2:73:cf:ae:ff:d7:65:
                    fb:8f:d6:0a:dd:e2:f7:eb:ac:27:93:bc:b1:46:55:
                    6e:20:2c:06:fe:83:68:08:5c:05:cd:61:20:8d:82:
                    f4:14:ef:89:2b:63:fe:ea:65:0d:17:54:96:a7:54:
                    85:17:2f:dd:93:ea:d8:22:67:68:a9:87:c0:85:a1:
                    aa:04:d7:c1:71:4c:c1:89:62:06:b8:68:fa:00:c8:
                    de:be:40:28:97:3e:b3:9c:35:f1:d5:ce:24:58:03:
                    9e:6b:88:4e:9a:8b:d1:87:9c:ac:2e:e8:a0:d3:2d:
                    ac:78:e9:c6:15:94:4b:13:9d:33:6b:48:7f:f8:88:
                    db:3e:0d:1e:1e:78:04:ab:af:c4:79:4a:dd:d0:e7:
                    5b:af:35:19:c3:41:f6:b1:5a:4a:e8:66:35:ae:00:
                    d7:8a:13:b1:71:23:1a:b6:a7:da:3e:f3:d5:0b:a7:
                    d2:31:96:b5:6f:a4:d1:64:70:3c:8e:97:48:c6:1e:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:87:0C:04:5D:E7:F1:C8:41:2B:BB:EB:FC:03:1A:6D:FA:A1:DB
            X509v3 Authority Key Identifier:
                keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/e1OHDARd5_HIQSu76_wDGm36ods.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.118.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:22:b7:dd:a8:d1:ae:45:a6:29:82:ad:8c:f3:56:24:9c:
         5b:58:df:74:4a:15:e2:9b:e7:1d:79:09:55:ef:cd:c0:cb:73:
         65:cd:10:15:9a:ce:e4:c7:8a:57:89:0f:ee:fe:8c:3c:34:59:
         aa:18:de:99:25:10:77:c5:10:95:01:98:5a:40:8a:92:15:e9:
         9b:bc:b2:3b:bf:7a:11:47:65:8b:68:d6:41:33:cc:5b:86:75:
         87:30:42:29:f6:b6:c8:a1:e2:60:39:07:23:6e:9f:9d:d6:d1:
         ed:1a:db:3d:05:f0:91:a7:eb:77:f9:a6:2e:a9:29:86:f5:07:
         08:6e:94:d9:9c:f1:03:4d:b4:76:d4:06:61:89:c1:6c:27:d9:
         3f:61:af:73:05:f8:e9:14:e4:4d:12:cb:4e:e3:0a:81:8a:64:
         d5:19:18:3c:db:7c:c7:f0:c7:b7:7c:23:a2:d6:4f:21:f6:6e:
         9f:3f:22:18:0b:1b:c9:de:3b:b9:a4:43:26:f5:e9:35:eb:45:
         97:13:6b:02:4d:7b:b6:7a:bd:5c:92:d3:77:15:3d:56:bd:97:
         ea:b5:20:f0:ea:0c:4f:3b:ae:89:79:37:09:84:94:0f:9f:91:
         56:30:82:dc:7a:d9:2c:64:96:d8:b5:c1:c4:a8:c4:3a:98:22:
         aa:2c:e3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:36 2025 by rpki-client