Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/E4Nbs3MZE75ZtvsxKyLV95vrFhA.roa
File:                     E4Nbs3MZE75ZtvsxKyLV95vrFhA.roa (raw, json)
Hash identifier:          dizc03dPRlOCVSY4DFmrciFidfiSSpnguE/uEQE8rzc=
Subject key identifier:   13:83:5B:B3:73:19:13:BE:59:B6:FB:31:2B:22:D5:F7:9B:EB:16:10
Certificate issuer:       /CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Certificate serial:       02771B51
Authority key identifier: B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/E4Nbs3MZE75ZtvsxKyLV95vrFhA.roa
Signing time:             Sat 18 Jun 2022 00:02:44 +0000
ROA not before:           Sat 18 Jun 2022 00:02:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        185.251.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41360209 (0x2771b51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
        Validity
            Not Before: Jun 18 00:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13835bb3731913be59b6fb312b22d5f79beb1610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:25:2d:ca:66:7a:87:bc:d5:77:f2:5c:ca:
                    2a:8a:f4:ee:23:c6:54:78:ad:10:d5:ab:e0:26:44:
                    a3:c1:49:00:68:07:7a:7a:6b:82:0a:6b:a1:76:3c:
                    56:0a:3d:d2:55:1f:ad:fc:85:38:49:cf:51:05:f7:
                    f1:85:66:27:e5:23:18:ef:49:fe:13:a3:a3:8e:48:
                    f8:57:02:d8:59:5e:ce:cd:3b:4c:67:1f:e6:cf:b9:
                    78:2c:10:e7:e7:ac:dd:10:de:42:7a:57:af:54:4a:
                    8a:89:ce:67:ee:5c:c4:61:07:39:cb:fd:a9:8d:3c:
                    75:f1:c7:70:6b:4f:7e:9a:de:2c:fa:2f:05:e1:34:
                    9f:cb:e3:e4:70:4b:4d:98:01:b3:f1:5e:cf:40:76:
                    20:89:2c:b7:85:fd:ee:58:bc:03:8f:c8:41:2b:77:
                    35:bd:bd:b2:ba:6a:06:bf:55:fd:32:74:cb:78:a4:
                    17:40:ee:30:4b:75:67:c5:e3:01:fd:6d:47:78:2b:
                    59:ed:8d:ed:72:af:74:de:8f:5b:86:d5:fd:f2:76:
                    2a:24:69:bb:05:3e:a1:0f:b3:34:1a:7b:5f:da:f8:
                    2e:b9:ce:a6:e7:32:ca:64:76:48:bf:15:c8:d3:3e:
                    86:c4:db:82:67:39:85:fb:29:40:36:35:16:ac:ac:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:83:5B:B3:73:19:13:BE:59:B6:FB:31:2B:22:D5:F7:9B:EB:16:10
            X509v3 Authority Key Identifier:
                keyid:B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/E4Nbs3MZE75ZtvsxKyLV95vrFhA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:82:ba:f6:16:85:cb:99:a2:ff:47:ac:ce:42:82:07:49:
         57:21:28:d7:fa:57:1a:37:0f:1b:37:0b:a5:8f:47:cf:cf:f8:
         06:92:89:94:aa:59:c5:1f:59:43:90:42:03:66:aa:c1:7b:d0:
         be:48:c5:c9:26:64:14:45:92:ac:61:f5:12:2f:2a:45:6c:1b:
         8c:f9:bc:3b:81:cf:85:77:da:cf:84:e0:a3:92:13:cf:fd:2a:
         57:01:af:68:7c:58:f6:e2:59:9e:66:d4:5c:b7:6a:c6:e6:62:
         d0:98:f3:b4:62:20:e3:45:10:fe:b3:18:5f:aa:ae:64:15:c8:
         bb:72:4e:90:78:79:fd:fb:04:8c:01:ed:19:f6:65:7d:5f:ce:
         a8:09:cc:65:3f:81:12:5a:ee:37:37:43:45:b9:db:4e:62:c6:
         e1:75:97:b5:3c:d8:a8:89:d2:fc:68:ae:6b:5f:d5:6f:69:c2:
         35:63:16:0f:ea:71:8d:27:ef:9e:88:bd:c7:90:9e:48:92:bb:
         35:fd:66:bc:2c:d3:e6:ef:0b:d8:95:22:a4:16:c1:37:30:0b:
         98:a5:34:78:21:82:a2:69:13:32:d4:e9:2f:27:53:17:1d:a4:
         f0:61:41:3f:89:05:43:00:04:9f:70:b0:bd:82:68:76:f9:01:
         5a:67:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:30 2025 by rpki-client