Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/TN1J07MTVpIvGimR4uPy9wrG_Ns.roa
File:                     TN1J07MTVpIvGimR4uPy9wrG_Ns.roa (raw, json)
Hash identifier:          gAUPzC6UJ/GdPwNg6/pJY9bteN2Ky/YENlXadeYLgoI=
Subject key identifier:   4C:DD:49:D3:B3:13:56:92:2F:1A:29:91:E2:E3:F2:F7:0A:C6:FC:DB
Certificate issuer:       /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial:       032ADE85
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/TN1J07MTVpIvGimR4uPy9wrG_Ns.roa
Signing time:             Sat 01 Jan 2022 11:04:28 +0000
ROA not before:           Sat 01 Jan 2022 11:04:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62579
IP address blocks:        185.139.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53141125 (0x32ade85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
        Validity
            Not Before: Jan  1 11:04:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4cdd49d3b31356922f1a2991e2e3f2f70ac6fcdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:2c:83:df:74:eb:1a:a8:d7:66:50:b0:29:
                    50:2f:d1:de:c3:f7:a9:83:e1:f2:a5:b7:06:85:22:
                    0d:61:bd:03:1c:72:0e:af:74:fe:6a:21:85:27:fd:
                    25:ac:c3:c0:0d:bb:d3:25:f1:e9:fa:64:97:5d:fa:
                    2d:24:60:04:03:3e:c8:7d:6d:bc:3d:d5:f5:59:78:
                    3f:5f:b2:42:c2:f6:63:e6:52:38:ad:ba:eb:39:6f:
                    c3:54:80:72:74:f9:f1:6a:e4:05:b4:5e:a6:d3:68:
                    5d:a1:d7:08:dc:8d:d5:b3:7b:30:ed:3c:b1:cb:c4:
                    a0:89:ae:09:e3:ca:8c:64:84:99:fd:8e:19:6e:80:
                    05:90:7e:5f:98:d1:74:e8:af:13:7d:6c:d6:ad:a1:
                    3d:9b:02:14:4a:d8:80:1f:3f:af:7d:53:54:26:cf:
                    5b:5f:8b:a2:a0:96:6b:79:b0:cd:fb:fe:79:95:cd:
                    28:8c:0f:b3:3f:47:f3:2a:5f:e4:c4:82:b8:ec:36:
                    40:49:50:05:bf:cc:02:0c:4f:03:c6:31:c1:74:84:
                    18:79:95:e3:a2:ab:f6:c2:57:59:c0:9d:aa:88:2d:
                    d1:07:ec:c8:5f:5a:a6:e2:e2:f9:f7:f4:e4:a3:c6:
                    a5:d1:bd:fe:f8:ba:fb:e7:7e:9f:ce:8f:25:e7:08:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DD:49:D3:B3:13:56:92:2F:1A:29:91:E2:E3:F2:F7:0A:C6:FC:DB
            X509v3 Authority Key Identifier:
                keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/TN1J07MTVpIvGimR4uPy9wrG_Ns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:86:d5:3f:db:3f:bd:db:81:21:01:a1:17:e7:50:2d:99:1b:
         d1:64:13:91:82:65:bb:c4:3e:49:62:ee:a1:6a:60:c1:23:43:
         de:2f:bb:95:74:b3:1d:92:b0:d3:4c:47:40:06:7b:8a:bf:7c:
         6e:f2:7c:d7:48:29:f7:36:b8:8a:d7:0a:2a:01:3e:cd:b4:4c:
         36:39:89:61:40:7f:3b:3f:e8:fd:b3:29:b5:40:20:af:1e:3d:
         2d:6f:d5:b2:77:2f:be:f1:bf:e2:2b:a9:f9:06:aa:a2:7c:a1:
         a7:3c:0a:16:dd:04:ca:40:da:d7:a3:53:6c:6d:74:5c:46:d2:
         26:41:a6:7d:b3:ef:59:64:b0:3d:93:bb:f9:f9:f8:fe:c7:b2:
         a8:cc:ff:b8:f1:70:e6:a7:fc:80:e0:f5:9f:89:fa:5b:6d:cc:
         86:0b:61:18:99:a1:39:ae:65:eb:cd:87:f8:54:17:9b:1d:bc:
         57:37:cc:a2:00:22:df:8c:63:c7:af:d9:98:ab:4f:8e:27:ca:
         23:6d:88:72:a5:5d:77:e0:b6:4e:12:4b:e3:7d:65:e0:aa:9b:
         03:42:ad:4d:c9:ef:ac:3b:9e:51:9a:66:54:dc:e6:cd:1b:46:
         90:05:a8:64:b2:d0:f3:cd:98:96:7f:1a:57:f3:f3:d9:de:56:
         87:e9:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:15 2025 by rpki-client