Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/WL_1YlaltFxqeOkO3LhH6jidgvY.roa
File:                     WL_1YlaltFxqeOkO3LhH6jidgvY.roa (raw, json)
Hash identifier:          ravoVEO2Iu7I94ZAcobkLsQmNuT8BQqWCaeE8lkeD6M=
Subject key identifier:   58:BF:F5:62:56:A5:B4:5C:6A:78:E9:0E:DC:B8:47:EA:38:9D:82:F6
Certificate issuer:       /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial:       019547D6B653AE34E23BC0675C3C513CD848
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/WL_1YlaltFxqeOkO3LhH6jidgvY.roa
Signing time:             Thu 27 Feb 2025 14:36:48 +0000
ROA not before:           Thu 27 Feb 2025 14:36:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207137
IP address blocks:        2a13:240::/48 maxlen: 48
                          2a13:240:1::/48 maxlen: 48
                          2a13:240:2::/48 maxlen: 48
                          2a13:240:3::/48 maxlen: 48
                          2a13:240:4::/48 maxlen: 48
                          2a13:240:5::/48 maxlen: 48
                          2a13:240:6::/48 maxlen: 48
                          2a13:240:7::/48 maxlen: 48
                          2a13:240:8::/48 maxlen: 48
                          2a13:240:9::/48 maxlen: 48
                          2a13:240:b::/48 maxlen: 48
                          2a13:240:4200::/40 maxlen: 40
                          2a13:240:4300::/40 maxlen: 40
                          2a13:240:4400::/40 maxlen: 40
                          2a13:240:4500::/40 maxlen: 40
                          2a13:240:4600::/40 maxlen: 40
                          2a13:240:4700::/40 maxlen: 40
                          2a13:240:4800::/40 maxlen: 40
                          2a13:240:4900::/40 maxlen: 40
                          2a13:240:4a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:47:d6:b6:53:ae:34:e2:3b:c0:67:5c:3c:51:3c:d8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
        Validity
            Not Before: Feb 27 14:36:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=58bff56256a5b45c6a78e90edcb847ea389d82f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:33:e3:94:20:25:9f:91:90:73:2c:f0:fd:
                    61:05:69:da:c2:58:85:80:59:e9:c1:26:c4:03:87:
                    f9:3f:98:b2:4f:18:ba:4d:8e:e4:8b:a0:7e:09:26:
                    aa:87:49:28:4a:40:2d:09:d2:cc:d0:1f:a4:87:30:
                    d8:91:86:f1:af:b9:2b:43:1b:8d:96:60:61:cd:52:
                    a1:e8:bb:ab:fa:4e:d2:24:e6:53:4d:6a:87:28:6c:
                    6d:a5:c9:19:bf:9f:96:11:f3:0c:b3:00:73:0c:8f:
                    e9:c0:37:ce:ba:5b:73:0b:44:e4:6e:d4:21:d7:e8:
                    44:f7:52:78:b1:68:f7:61:95:59:f4:37:fd:b2:5c:
                    b5:8e:d8:fa:40:5d:0b:e1:f7:4c:28:c5:35:86:b9:
                    74:cb:18:e9:fd:6f:aa:bc:88:a6:3b:b0:3b:8f:4c:
                    bc:95:95:c5:86:64:58:0b:6f:18:45:30:d5:37:03:
                    ba:38:a4:b2:85:7b:ad:04:c6:70:a3:39:43:ec:6b:
                    4e:a7:40:0f:ae:7e:d9:a9:d6:ee:d3:66:1f:97:3b:
                    da:42:ca:7a:00:05:77:e8:f7:76:d2:bc:a0:e3:be:
                    2b:47:c3:d4:8a:34:56:12:c9:33:a5:82:e3:8e:01:
                    9a:f6:01:ba:38:39:6d:42:cb:da:73:3a:e5:a3:b9:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BF:F5:62:56:A5:B4:5C:6A:78:E9:0E:DC:B8:47:EA:38:9D:82:F6
            X509v3 Authority Key Identifier:
                keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/WL_1YlaltFxqeOkO3LhH6jidgvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:240::-2a13:240:9:ffff:ffff:ffff:ffff:ffff
                  2a13:240:b::/48
                  2a13:240:4200::-2a13:240:4aff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         29:24:06:f5:ba:33:57:3c:95:bc:a4:d4:28:32:18:30:69:62:
         f6:bf:56:f7:dc:12:8a:d1:17:34:90:5b:09:2d:99:f8:04:0f:
         19:f7:6e:62:91:d4:53:fe:27:9f:fa:f7:11:7e:8e:ff:0b:a8:
         17:71:c0:55:10:3a:b0:62:42:60:a5:ea:87:9d:5a:d1:a5:9f:
         2e:32:04:87:dc:89:2f:61:8e:38:30:5a:fb:9a:49:6c:7f:38:
         9d:d8:e8:33:c4:9d:00:e6:00:25:1e:4f:99:80:d4:ca:18:4f:
         c6:65:5e:78:9a:08:1e:c6:1c:a6:f7:53:7e:a1:59:45:e8:fc:
         d2:2c:e3:a7:c5:cd:71:03:fa:9a:e4:34:76:ce:8e:ef:7b:fa:
         b8:09:fc:2e:50:78:13:97:c9:d5:b7:43:9e:a2:26:0a:ae:e5:
         42:ca:c0:c1:8f:6d:11:18:e2:77:80:e2:4c:e7:09:41:7c:6b:
         eb:d3:0c:aa:52:77:62:2d:b2:84:a0:27:36:b6:ba:a9:4b:3f:
         ce:8a:05:d1:1f:ce:c3:a2:8b:75:ee:b6:08:0d:ba:e5:d4:0a:
         76:10:ab:51:71:39:44:84:56:e0:9a:c9:a8:4c:09:f1:f3:8b:
         9c:41:90:46:29:b0:79:18:0d:50:aa:34:60:ae:54:4b:c8:e0:
         7f:f5:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----