Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/61EqwF-py93KVBuyk3wEXoeXAzo.roa
File:                     61EqwF-py93KVBuyk3wEXoeXAzo.roa (raw, json)
Hash identifier:          mbljpKDM1AhPcpMK0Zlo4phZwMMxF6hISW7TcvJM0M0=
Subject key identifier:   EB:51:2A:C0:5F:A9:CB:DD:CA:54:1B:B2:93:7C:04:5E:87:97:03:3A
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01942220016713C829AAB8C42FE32C6894CF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/61EqwF-py93KVBuyk3wEXoeXAzo.roa
Signing time:             Wed 01 Jan 2025 13:48:30 +0000
ROA not before:           Wed 01 Jan 2025 13:48:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49476
IP address blocks:        185.13.157.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:20:01:67:13:c8:29:aa:b8:c4:2f:e3:2c:68:94:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jan  1 13:48:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eb512ac05fa9cbddca541bb2937c045e8797033a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:87:74:53:7b:41:e1:f3:b4:07:d8:9f:30:9e:
                    8e:26:71:1f:2d:6f:38:24:3c:6b:aa:68:d0:63:d3:
                    93:42:2e:5d:0b:cc:42:74:5a:73:df:c3:20:5b:2d:
                    dd:69:57:5c:78:58:5b:99:ef:d3:cc:c2:15:5b:c5:
                    74:2a:2e:ab:48:ab:3c:31:1a:5c:11:18:fd:3e:19:
                    e1:48:8f:d7:e6:ab:2f:73:fc:60:0e:0d:89:4a:f7:
                    59:15:c6:0a:c7:e4:db:6f:98:85:aa:b9:df:13:1d:
                    8d:0d:67:9b:1e:07:0b:39:00:ba:12:24:da:be:90:
                    1a:2f:7b:3a:3d:8d:83:15:13:ac:47:d2:4a:9d:a6:
                    36:9a:a6:c3:99:57:d0:52:d0:34:6b:cd:8a:4c:46:
                    cb:d5:2b:24:0d:41:45:2a:18:9b:62:20:63:c9:57:
                    a4:8f:c4:e3:0c:e8:45:3d:a7:54:85:56:2b:bc:97:
                    7a:14:39:f9:e3:a5:e3:f5:8e:a7:bf:3b:90:90:ae:
                    6f:bb:11:30:8c:58:10:ff:77:bf:ba:8d:09:f5:f7:
                    c0:2b:48:91:39:a4:f2:c3:a9:fd:ec:c8:f6:07:40:
                    80:0a:a0:41:86:b1:54:a9:38:22:d0:01:46:0c:5f:
                    39:5d:91:10:41:ff:0f:2f:45:95:32:b0:59:8f:d1:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:2A:C0:5F:A9:CB:DD:CA:54:1B:B2:93:7C:04:5E:87:97:03:3A
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/61EqwF-py93KVBuyk3wEXoeXAzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.13.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:80:13:b5:91:d2:ad:b4:c8:37:6c:0c:2b:73:98:05:0c:f6:
         83:02:5d:b7:6a:42:60:b4:43:88:4f:26:5f:56:a7:57:55:f0:
         58:4a:c6:47:95:ee:16:44:1c:5c:b8:c5:f6:24:d1:0d:96:de:
         f1:b4:bf:82:a0:12:e6:1b:79:21:3c:d3:d2:68:ac:f4:60:67:
         33:c4:9e:02:1a:1b:05:9d:62:22:b3:cd:0c:6a:aa:eb:e0:47:
         23:a2:9e:03:12:0f:2c:d0:0d:7f:91:ea:ab:1d:37:db:8f:af:
         34:2f:59:76:e9:f7:4b:18:70:ae:30:39:64:8f:9c:6a:dd:11:
         be:28:18:aa:30:77:db:fe:5b:1f:50:a6:02:34:82:90:3d:6d:
         a3:50:4d:f1:4d:14:67:92:09:da:42:24:97:c7:65:89:18:43:
         1f:02:db:e9:bb:07:5a:d0:04:8e:9e:9c:26:e1:6a:4e:a1:f6:
         be:b3:8f:a2:92:03:32:39:ea:58:64:50:9e:48:db:27:62:d2:
         9e:20:b7:36:6f:b5:4a:a9:5c:7f:6c:4e:c4:4b:bc:72:40:0f:
         61:f1:49:6c:52:77:4a:cd:8e:c0:9c:89:5c:74:f0:db:3d:fd:
         7e:35:e5:bd:98:41:81:ea:5a:7c:75:9c:48:6d:b3:2b:87:73:
         6e:46:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:40 2025 by rpki-client