Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7axUBsMnUCU06pIWlAgh-wbDMTE.roa
File:                     7axUBsMnUCU06pIWlAgh-wbDMTE.roa (raw, json)
Hash identifier:          Y/pSLPd/5eM6lgiV/u6KD1ZwqLtuTSP/xUYG4H0XSKQ=
Subject key identifier:   ED:AC:54:06:C3:27:50:25:34:EA:92:16:94:08:21:FB:06:C3:31:31
Certificate issuer:       /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial:       01856FCBA4F06219793AB073271B4A9BF26D
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7axUBsMnUCU06pIWlAgh-wbDMTE.roa
Signing time:             Mon 02 Jan 2023 00:04:55 +0000
ROA not before:           Mon 02 Jan 2023 00:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207459
IP address blocks:        185.100.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:a4:f0:62:19:79:3a:b0:73:27:1b:4a:9b:f2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
        Validity
            Not Before: Jan  2 00:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edac5406c327502534ea9216940821fb06c33131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:87:9a:7d:b8:27:79:34:d0:d9:08:1a:93:
                    da:a6:da:4f:74:98:74:9c:04:e4:4a:44:34:bc:cb:
                    ac:36:5c:31:2e:da:44:06:f7:36:9d:43:c8:1e:4c:
                    86:b6:85:48:7b:d5:61:1a:40:7d:89:23:92:94:cf:
                    ca:39:e2:d3:9e:40:7b:cc:6d:cd:7d:53:ec:58:36:
                    22:38:bf:7e:9f:d7:02:1a:97:d6:21:b4:f7:be:cd:
                    ca:3c:07:42:f7:b6:b5:8a:91:3c:27:d7:82:87:aa:
                    c1:d9:42:73:3f:d0:81:e3:aa:58:bb:bc:42:79:1c:
                    b4:d5:3a:da:7c:9e:fa:06:2a:ef:bf:1d:6e:28:ef:
                    ea:0f:7c:38:9b:4f:c1:7c:ca:73:31:96:5e:d5:a5:
                    1d:c6:ea:04:98:33:7c:c5:03:37:46:cd:46:12:44:
                    82:42:7a:a6:78:92:4a:72:bf:e9:7b:b6:a6:02:c7:
                    2c:d0:7c:66:c5:89:2e:4c:6d:db:2f:96:5d:9d:f6:
                    c4:eb:3f:77:b2:15:67:56:e7:b4:80:91:26:94:8f:
                    a9:0d:42:f2:dd:15:80:cc:9f:94:82:b8:59:68:f9:
                    dd:06:b4:bc:6a:3d:47:8a:93:64:0d:50:84:94:87:
                    eb:7b:50:72:f8:b1:c6:94:a3:ba:10:11:a7:c8:0a:
                    6d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:54:06:C3:27:50:25:34:EA:92:16:94:08:21:FB:06:C3:31:31
            X509v3 Authority Key Identifier:
                keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7axUBsMnUCU06pIWlAgh-wbDMTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.100.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:bc:6f:5a:16:a9:d9:3a:21:ce:e7:d9:cd:28:0a:4e:76:78:
         0b:e0:5c:1c:90:ef:f7:eb:54:bb:98:d4:6c:7c:3b:f5:f6:48:
         a9:a4:5a:86:23:16:9c:40:42:9a:d0:e6:5d:7c:c3:53:93:ac:
         a1:06:35:80:f3:a6:bb:88:a6:ab:0e:9e:43:32:b6:fa:28:d6:
         a5:5c:af:d1:3f:7c:a1:9a:8e:b4:93:fa:97:08:40:7c:dc:31:
         92:93:17:5c:1e:aa:07:92:ed:69:af:07:81:01:33:72:c9:4d:
         62:af:0c:26:55:6f:f2:0b:36:8b:5a:be:4f:f6:e4:eb:90:74:
         cf:fc:0b:fb:2b:5b:8c:f9:79:56:c5:8d:e3:04:a5:40:3c:cd:
         0f:5c:38:11:f8:2e:1c:89:b7:13:d5:c9:45:f4:2d:c7:50:b7:
         9e:f3:d6:24:e7:09:93:55:53:06:c9:f7:f3:53:18:a7:2b:ea:
         40:04:d2:4a:6c:88:42:02:97:71:a7:b9:bf:72:e5:6a:4c:49:
         de:2c:13:ca:cd:54:94:bc:c8:9d:a4:56:92:70:ac:db:b9:cf:
         15:73:a4:23:4d:eb:ee:d2:79:43:5b:51:d9:b7:9f:b5:de:c6:
         66:e7:d7:fd:ee:56:b4:29:e9:42:63:7c:4d:3f:a9:13:a6:fb:
         e8:9d:d1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:01 2025 by rpki-client