Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/54Won_xJme14dMr7OoqRLDNo6cc.roa
File:                     54Won_xJme14dMr7OoqRLDNo6cc.roa (raw, json)
Hash identifier:          dqegdeYovcPfdCxak5Tl/IITFuhFHO/9/PbLNZCoYWw=
Subject key identifier:   E7:85:A8:9F:FC:49:99:ED:78:74:CA:FB:3A:8A:91:2C:33:68:E9:C7
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       0195A42568EFC0596CB76B60C6546B82AAFF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/54Won_xJme14dMr7OoqRLDNo6cc.roa
Signing time:             Mon 17 Mar 2025 12:47:49 +0000
ROA not before:           Mon 17 Mar 2025 12:47:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     45671
IP address blocks:        81.181.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:a4:25:68:ef:c0:59:6c:b7:6b:60:c6:54:6b:82:aa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Mar 17 12:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e785a89ffc4999ed7874cafb3a8a912c3368e9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:16:29:e7:03:71:00:a2:9f:c4:4b:41:f2:0e:
                    c2:be:bf:65:04:50:3c:69:63:6b:b4:c0:e3:e9:2e:
                    37:5c:23:87:71:d2:01:e8:7f:06:72:ad:9c:03:77:
                    ca:43:fe:08:3d:a8:ed:ad:37:12:6d:3d:0e:f9:e0:
                    f6:a2:2e:eb:ec:54:94:44:aa:76:a8:bf:5c:33:11:
                    68:cf:67:b5:a6:33:68:29:54:b3:99:c3:13:bf:9b:
                    ca:71:20:fb:86:82:6f:6c:83:4f:78:7d:2f:67:56:
                    07:20:cb:59:85:82:d9:27:8e:f3:b6:7d:e3:ca:30:
                    ae:91:e1:25:ce:87:3c:ef:03:94:e2:74:de:c2:2c:
                    ea:c7:84:bf:fc:c9:63:7a:18:d5:50:c7:b8:dc:07:
                    5c:b7:04:c2:94:e4:7c:7d:5f:32:c8:93:5c:03:4c:
                    7f:4e:16:45:32:53:88:cd:b1:41:f0:28:e9:bc:f7:
                    a2:f3:0d:88:bf:65:37:cf:bf:fe:5e:ce:61:73:e7:
                    fd:68:07:1d:ab:e9:31:fd:16:e0:22:d9:28:ce:40:
                    cd:8c:9e:5d:76:26:d8:8f:79:16:15:be:a3:2b:8d:
                    18:8c:10:46:8f:a6:69:12:fe:00:a0:cd:7f:f8:b6:
                    36:f8:c3:fd:d9:8e:58:de:0a:97:46:07:ca:cb:3a:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:85:A8:9F:FC:49:99:ED:78:74:CA:FB:3A:8A:91:2C:33:68:E9:C7
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/54Won_xJme14dMr7OoqRLDNo6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e7:50:9b:df:da:ac:3a:dc:32:4c:0c:36:2e:8b:ae:d1:35:
         63:e7:39:a8:7b:a3:92:65:78:a1:3f:c9:d8:c0:47:8e:a5:62:
         04:1f:5e:17:20:7b:f1:81:94:05:65:56:18:d8:b2:e9:a5:e3:
         2a:e6:82:1f:ba:1e:5b:97:a6:6f:ec:1e:0e:7a:fe:53:e0:08:
         8f:b4:d9:06:ce:8e:51:c4:07:c7:a5:f1:a2:30:79:21:4b:2e:
         67:ca:57:40:3f:35:c2:b8:08:fc:d5:af:1b:2d:18:50:77:1d:
         9c:fa:e8:72:a8:f0:df:08:96:75:98:0d:84:cb:f2:3e:cf:69:
         bc:ca:a2:92:d2:30:f7:e5:35:46:53:cc:c6:9f:d9:7d:1b:f5:
         ce:cf:79:1d:27:bf:8b:d1:eb:45:fa:a1:9f:57:10:fe:c9:68:
         d1:63:1f:23:00:ab:fe:bb:fd:50:b5:7f:d0:87:61:98:ec:07:
         34:b8:2d:a9:7a:3c:11:30:68:09:ea:70:1d:dc:a1:5b:25:d9:
         ac:82:ad:75:80:26:42:68:e8:c5:80:28:50:3f:05:1e:f2:a0:
         ce:63:85:b6:84:cb:04:d0:a6:8f:5a:20:7b:ec:e4:8d:ca:c6:
         48:46:11:7f:e5:f5:c1:c2:ce:68:21:4a:1e:13:3f:76:b1:ed:
         b0:23:3a:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWkJWjvwFlst2tgxlRrgqr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUwMzE3MTI0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzg1YTg5ZmZjNDk5OWVkNzg3NGNhZmIzYThhOTEyYzMzNjhlOWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBYp5wNxAKKfxEtB8g7Cvr9lBFA8
aWNrtMDj6S43XCOHcdIB6H8Gcq2cA3fKQ/4IPajtrTcSbT0O+eD2oi7r7FSURKp2
qL9cMxFoz2e1pjNoKVSzmcMTv5vKcSD7hoJvbINPeH0vZ1YHIMtZhYLZJ47ztn3j
yjCukeElzoc87wOU4nTewizqx4S//MljehjVUMe43AdctwTClOR8fV8yyJNcA0x/
ThZFMlOIzbFB8CjpvPei8w2Iv2U3z7/+Xs5hc+f9aAcdq+kx/RbgItkozkDNjJ5d
dibYj3kWFb6jK40YjBBGj6ZpEv4AoM1/+LY2+MP92Y5Y3gqXRgfKyzoOuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeFqJ/8SZnteHTK+zqKkSwzaOnHMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvNTRXb25feEptZTE0ZE1yN09vcVJMRE5vNmNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbUzMA0G
CSqGSIb3DQEBCwUAA4IBAQCY51Cb39qsOtwyTAw2Louu0TVj5zmoe6OSZXihP8nY
wEeOpWIEH14XIHvxgZQFZVYY2LLppeMq5oIfuh5bl6Zv7B4Oev5T4AiPtNkGzo5R
xAfHpfGiMHkhSy5nyldAPzXCuAj81a8bLRhQdx2c+uhyqPDfCJZ1mA2Ey/I+z2m8
yqKS0jD35TVGU8zGn9l9G/XOz3kdJ7+L0etF+qGfVxD+yWjRYx8jAKv+u/1QtX/Q
h2GY7Ac0uC2pejwRMGgJ6nAd3KFbJdmsgq11gCZCaOjFgChQPwUe8qDOY4W2hMsE
0KaPWiB77OSNysZIRhF/5fXBws5oIUoeEz92se2wIzoM
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:46 2025 by rpki-client