Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/1sNNq8mgwiO0fTzxAga3UoLkp0A.roa
File:                     1sNNq8mgwiO0fTzxAga3UoLkp0A.roa (raw, json)
Hash identifier:          aSWsxD1tvTs8/fELq1Ih2DYp0RIltIAp+wV8l33godA=
Subject key identifier:   D6:C3:4D:AB:C9:A0:C2:23:B4:7D:3C:F1:02:06:B7:52:82:E4:A7:40
Certificate issuer:       /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial:       03280490
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/1sNNq8mgwiO0fTzxAga3UoLkp0A.roa
Signing time:             Sat 01 Jan 2022 11:04:25 +0000
ROA not before:           Sat 01 Jan 2022 11:04:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19437
IP address blocks:        185.139.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52954256 (0x3280490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
        Validity
            Not Before: Jan  1 11:04:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6c34dabc9a0c223b47d3cf10206b75282e4a740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:7b:20:b3:00:3b:3d:85:e7:6e:29:30:c1:
                    45:0b:fe:b6:c8:39:33:65:78:2f:42:d3:a8:3f:e9:
                    bc:68:4d:39:d8:0c:ec:78:3e:7a:11:ee:e9:21:55:
                    0a:87:b9:6a:2e:7f:41:40:1d:49:43:06:d7:22:f4:
                    30:be:18:9d:66:32:12:fb:de:84:7d:15:60:84:82:
                    97:24:24:53:07:d9:dc:a6:fc:e7:93:3c:c4:4e:bb:
                    79:6f:d2:c6:05:51:66:c1:b3:92:54:cd:38:69:29:
                    77:9b:ff:f0:7f:3f:40:67:2d:fb:a0:34:46:63:50:
                    ca:21:38:7b:f5:24:b4:e2:9b:3e:8d:48:62:3e:5c:
                    49:93:49:18:11:1c:76:0e:c8:3c:ca:fb:71:16:12:
                    5f:28:54:c7:56:f2:94:2a:dd:2e:33:d1:60:0c:8b:
                    10:8f:59:a8:ac:20:47:65:32:c1:a3:61:23:d6:6c:
                    e9:74:77:06:2b:58:56:3f:03:33:5f:71:f6:e7:78:
                    ce:4e:4e:4e:17:8a:6d:b6:fd:8b:ba:57:ac:44:84:
                    9f:19:6f:50:c0:7c:4f:d1:f6:1f:5b:29:22:d6:32:
                    e2:09:3e:51:52:02:ad:45:50:58:86:f7:28:6d:c6:
                    0f:dc:5d:da:27:86:93:c8:bb:04:3d:22:2f:6d:92:
                    a1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:4D:AB:C9:A0:C2:23:B4:7D:3C:F1:02:06:B7:52:82:E4:A7:40
            X509v3 Authority Key Identifier:
                keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/1sNNq8mgwiO0fTzxAga3UoLkp0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:e3:d6:0e:ad:6a:ab:ee:9a:4f:9b:a3:17:63:d1:1a:27:
         a5:f5:88:f3:ec:48:72:0f:42:48:4d:25:22:df:62:d7:7a:ca:
         90:87:ba:c6:3b:88:46:14:95:ab:7f:0a:32:eb:e1:a3:a5:d4:
         90:99:44:65:93:27:9e:c0:8d:8c:be:36:4e:dc:7b:09:23:d6:
         db:eb:86:37:5e:1a:20:9e:a5:07:96:72:19:f5:69:f4:2b:42:
         a3:eb:58:e2:4d:69:38:c5:4a:b6:ad:4c:2d:42:c3:44:8c:ed:
         e5:c5:6d:4a:d0:b7:c6:ce:16:d0:e1:8a:fa:35:10:c7:f4:33:
         e5:d0:95:b5:8e:a8:17:58:3b:9a:d8:58:56:3c:40:cf:05:70:
         67:0e:9a:60:ea:bd:00:5e:9c:cd:35:c6:2c:60:4e:0a:b3:5f:
         6c:fb:69:f2:b0:a7:6a:d9:d5:44:7b:bc:4c:da:27:54:42:eb:
         85:2d:0a:3f:02:23:c5:8d:9b:49:53:2d:d1:e0:5e:3c:f5:c3:
         00:8e:cb:f3:fb:bf:59:82:ea:2d:01:25:ab:38:70:3b:b3:e9:
         b9:43:fa:bb:e3:a8:b5:c1:7c:da:3c:3f:8c:94:d1:ae:6e:01:
         76:ae:40:b4:53:1e:7a:cb:d4:3d:e1:65:e9:be:86:23:38:2f:
         84:d6:aa:8e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAygEkDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OGJmN2YzYWQ1M2YyOWEzYzQzZjBhZDgyMDE3YTA1MzY4YzAxMDRhMB4XDTIyMDEw
MTExMDQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDZjMzRkYWJjOWEw
YzIyM2I0N2QzY2YxMDIwNmI3NTI4MmU0YTc0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANbGeyCzADs9heduKTDBRQv+tsg5M2V4L0LTqD/pvGhNOdgM
7Hg+ehHu6SFVCoe5ai5/QUAdSUMG1yL0ML4YnWYyEvvehH0VYISClyQkUwfZ3Kb8
55M8xE67eW/SxgVRZsGzklTNOGkpd5v/8H8/QGct+6A0RmNQyiE4e/UktOKbPo1I
Yj5cSZNJGBEcdg7IPMr7cRYSXyhUx1bylCrdLjPRYAyLEI9ZqKwgR2UywaNhI9Zs
6XR3BitYVj8DM19x9ud4zk5OTheKbbb9i7pXrESEnxlvUMB8T9H2H1spItYy4gk+
UVICrUVQWIb3KG3GD9xd2ieGk8i7BD0iL22SodUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTWw02ryaDCI7R9PPECBrdSguSnQDAfBgNVHSMEGDAWgBRYv3861T8po8Q/
CtggF6BTaMAQSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dMOV9PdFVfS2FQRVB3cllJQmVnVTJqQUVFby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGYvMzY0Yjk0LTZjYTQtNGY5YS04OGE1LThiM2Q1MjdjNDllNC8x
LzFzTk5xOG1nd2lPMGZUenhBZ2EzVW9Ma3AwQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYv
MzY0Yjk0LTZjYTQtNGY5YS04OGE1LThiM2Q1MjdjNDllNC8xL1dMOV9PdFVfS2FQ
RVB3cllJQmVnVTJqQUVFby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmLGjANBgkqhkiG9w0BAQsFAAOC
AQEATyzj1g6taqvumk+boxdj0RonpfWI8+xIcg9CSE0lIt9i13rKkIe6xjuIRhSV
q38KMuvho6XUkJlEZZMnnsCNjL42Ttx7CSPW2+uGN14aIJ6lB5ZyGfVp9CtCo+tY
4k1pOMVKtq1MLULDRIzt5cVtStC3xs4W0OGK+jUQx/Qz5dCVtY6oF1g7mthYVjxA
zwVwZw6aYOq9AF6czTXGLGBOCrNfbPtp8rCnatnVRHu8TNonVELrhS0KPwIjxY2b
SVMt0eBePPXDAI7L8/u/WYLqLQElqzhwO7PpuUP6u+OotcF82jw/jJTRrm4Bdq5A
tFMeesvUPeFl6b6GIzgvhNaqjg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:58 2025 by rpki-client