Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/bOXl3G76mmOLMyxrrDNNValagS4.roa
File:                     bOXl3G76mmOLMyxrrDNNValagS4.roa (raw, json)
Hash identifier:          DegvdD1w41EhGYZuzkZgUqteV3sCXsaJCanbfY2DTwg=
Subject key identifier:   6C:E5:E5:DC:6E:FA:9A:63:8B:33:2C:6B:AC:33:4D:55:A9:5A:81:2E
Certificate issuer:       /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial:       06D43642
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/bOXl3G76mmOLMyxrrDNNValagS4.roa
Signing time:             Sat 01 Jan 2022 14:07:45 +0000
ROA not before:           Sat 01 Jan 2022 14:07:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42397
IP address blocks:        193.32.161.0/24 maxlen: 24
                          193.32.160.0/24 maxlen: 24
                          185.232.65.0/24 maxlen: 24
                          193.29.13.0/24 maxlen: 24
                          193.29.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114570818 (0x6d43642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
        Validity
            Not Before: Jan  1 14:07:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ce5e5dc6efa9a638b332c6bac334d55a95a812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:05:d1:c1:8f:55:a0:11:d6:ba:59:30:de:
                    ff:94:ef:aa:70:eb:e3:22:11:c5:cb:55:59:4d:08:
                    77:85:c7:23:c6:1f:ae:b8:4f:22:86:bc:0f:9c:76:
                    4b:52:20:62:16:f0:bf:a4:71:10:d7:3f:fd:dc:b2:
                    07:34:1b:e2:71:4b:bb:d6:55:6c:30:8d:09:bc:10:
                    fe:41:57:49:e1:e8:4c:22:b1:3b:36:7b:6f:d0:cc:
                    6b:61:2f:02:4f:e1:dc:f8:69:90:45:d7:8d:9d:b3:
                    23:5c:23:47:62:35:6f:9f:78:25:75:ab:aa:af:57:
                    ad:9b:2c:cd:90:87:26:d3:45:73:fa:2a:be:0f:3c:
                    c4:b2:f8:d7:85:b8:21:e2:f0:15:79:0e:8c:9b:bd:
                    cb:9a:f3:4a:85:ff:dc:44:c8:69:20:3e:c1:4d:9d:
                    60:8d:5c:41:4c:ad:b7:48:79:ee:c8:e0:87:af:0e:
                    1e:4a:43:6f:e7:d6:c1:8b:5f:5a:bd:9c:16:96:06:
                    b1:ff:11:ed:38:d7:95:ec:d9:a8:4a:4a:56:a6:8b:
                    59:ce:50:25:cd:88:66:7f:3c:1a:1d:e6:21:69:67:
                    38:70:02:b1:32:3b:b5:81:9d:7d:06:d3:80:f9:36:
                    de:d2:20:ea:66:0b:60:1f:04:27:ce:39:3b:9d:16:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:E5:DC:6E:FA:9A:63:8B:33:2C:6B:AC:33:4D:55:A9:5A:81:2E
            X509v3 Authority Key Identifier:
                keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/bOXl3G76mmOLMyxrrDNNValagS4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.65.0/24
                  193.29.13.0/24
                  193.29.15.0/24
                  193.32.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:db:8c:a8:02:d2:6d:3f:d6:22:61:23:ef:ea:5d:20:f2:
         92:ff:8e:b8:a3:36:52:55:b6:30:39:91:48:b3:38:55:a8:00:
         32:1e:17:9b:6e:e5:0d:25:a7:7b:bf:67:6f:82:a7:3a:48:37:
         60:46:05:6e:fa:2c:2a:cb:03:0b:57:e1:b9:0d:a4:38:9d:e7:
         d6:a3:1e:40:78:db:4b:87:a4:3b:90:b7:a0:d7:c9:53:b7:98:
         9d:61:0d:7f:98:29:5f:82:02:1e:9d:ce:83:e8:7c:17:f4:81:
         00:8f:07:a4:90:12:d3:22:54:b8:25:68:eb:7a:46:7f:db:59:
         26:e9:70:ad:8d:9c:61:fe:54:91:0b:15:9e:4f:52:8d:08:58:
         f3:df:7f:78:ea:9d:4b:e7:da:e9:73:04:d3:e5:ed:df:5c:b5:
         a9:b2:ca:30:95:f8:93:d7:e2:95:d5:eb:e0:c5:3e:aa:01:bb:
         2c:b4:3a:60:ca:cb:9e:f6:9d:f8:a7:f6:85:03:3e:c7:8c:af:
         5f:b7:46:28:1d:1b:4c:d1:5c:60:2e:0f:63:4b:37:02:34:9c:
         55:16:cc:e7:86:b0:0d:8b:29:10:84:c2:64:2e:e5:fd:0c:03:
         ce:02:ee:5e:a7:db:27:2a:c5:ee:7f:19:a3:d8:b3:45:93:e2:
         fd:b8:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:39 2025 by rpki-client