Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/i2Dp8thgxb3BY-jGBY_kvAm47ao.roa
File:                     i2Dp8thgxb3BY-jGBY_kvAm47ao.roa (raw, json)
Hash identifier:          fmJSNGLH11Fp/HAD8Yqs9varKSt64mSu6qB+o2wxTKA=
Subject key identifier:   8B:60:E9:F2:D8:60:C5:BD:C1:63:E8:C6:05:8F:E4:BC:09:B8:ED:AA
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01938B3E840B34706B38910E573D634EDED0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/i2Dp8thgxb3BY-jGBY_kvAm47ao.roa
Signing time:             Tue 03 Dec 2024 06:39:10 +0000
ROA not before:           Tue 03 Dec 2024 06:39:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39203
IP address blocks:        81.181.234.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:3e:84:0b:34:70:6b:38:91:0e:57:3d:63:4e:de:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Dec  3 06:39:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8b60e9f2d860c5bdc163e8c6058fe4bc09b8edaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:c5:7c:34:db:f4:ce:1c:31:38:86:68:a7:
                    15:f6:26:61:b0:0f:dc:5e:44:8f:e0:c5:c5:93:f7:
                    37:8e:83:92:e8:fc:3e:68:f8:71:e9:bc:ee:22:99:
                    4a:cf:b5:04:30:5f:3d:6e:e7:0a:1d:5f:e8:08:38:
                    39:55:4a:01:a5:c5:a4:93:d9:e5:60:bb:6b:24:7e:
                    37:24:05:9b:c5:67:01:b6:e4:44:e8:52:99:16:5a:
                    06:09:77:82:79:52:cf:64:77:3b:35:e7:19:53:c7:
                    6f:a5:c2:1b:c8:17:e3:f1:35:dc:36:ac:dc:f3:56:
                    67:57:a0:62:1c:05:72:c0:70:f7:79:18:95:02:53:
                    96:34:98:ce:fa:ce:f6:68:fa:f4:3a:b9:0f:46:01:
                    51:ce:49:e4:e8:df:4b:22:5b:4a:bb:81:3b:7f:71:
                    58:ff:da:8f:c0:a5:ec:36:9e:1a:45:cd:93:80:a8:
                    4f:85:93:01:52:fa:41:e9:c9:05:21:ba:fe:63:85:
                    aa:d6:d8:e6:b8:4d:f8:b9:4a:cd:9b:b0:e2:35:86:
                    36:60:3c:a2:04:f8:d1:2a:e3:cb:2d:5e:12:3d:4b:
                    f7:4c:31:8d:4d:16:1f:5b:48:6a:0a:57:54:5c:63:
                    71:71:4b:21:3b:db:4b:0b:1e:64:af:fe:2b:f5:6d:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:60:E9:F2:D8:60:C5:BD:C1:63:E8:C6:05:8F:E4:BC:09:B8:ED:AA
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/i2Dp8thgxb3BY-jGBY_kvAm47ao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:71:84:30:91:db:e9:17:f8:1b:6f:a4:34:fe:46:4a:5e:90:
         11:60:ef:6f:87:31:2a:4b:ef:d5:7c:21:f0:bb:1a:c4:cf:9d:
         60:b5:19:f8:6a:36:5c:95:d6:38:63:2f:3c:1f:4f:73:d3:44:
         2a:14:db:9c:64:a4:41:43:fc:43:52:3d:76:e5:ad:64:5f:67:
         1d:b9:58:5e:7f:f9:78:fa:ad:ec:d7:f6:40:fa:f5:24:59:63:
         d8:ec:ab:9b:38:d0:1f:18:72:c9:77:eb:89:6e:a2:05:16:9e:
         e2:6e:93:f1:f2:17:27:ad:7b:df:a4:1b:52:26:80:db:ba:cc:
         be:e3:04:f0:38:95:19:de:0f:21:ab:90:2c:7d:5b:bb:df:47:
         b9:61:ec:0b:9e:d8:ca:fa:e3:7c:13:a5:02:df:e6:a3:a7:29:
         32:34:8e:db:6f:60:01:20:36:e5:af:97:0f:5b:9b:d4:cd:1f:
         c1:1f:69:bc:1a:14:e1:0f:6f:bb:05:30:82:1a:a1:b3:5f:12:
         18:3d:f7:e4:79:7b:f7:f9:9b:37:cb:c1:1c:bc:47:7a:17:0e:
         3c:a9:89:a4:af:0e:0a:f6:c5:65:3f:64:d3:25:67:00:65:de:
         7a:1f:8d:da:e1:b0:7f:2d:5d:3d:17:6b:cb:5a:00:86:f7:b6:
         84:3c:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:05:59 2025 by rpki-client