Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PaZckJ79bYHRDIcg6j2wfehvPHM.roa
File:                     PaZckJ79bYHRDIcg6j2wfehvPHM.roa (raw, json)
Hash identifier:          kVVhIKfAHByw3/DLlPcL7d133eP7EBJNSZqTFz2ueVY=
Subject key identifier:   3D:A6:5C:90:9E:FD:6D:81:D1:0C:87:20:EA:3D:B0:7D:E8:6F:3C:73
Certificate issuer:       /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial:       01935F9C2A314F93AFB8F16A1F6189354F01
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PaZckJ79bYHRDIcg6j2wfehvPHM.roa
Signing time:             Sun 24 Nov 2024 19:18:10 +0000
ROA not before:           Sun 24 Nov 2024 19:18:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209737
IP address blocks:        85.235.72.0/24 maxlen: 24
                          85.235.73.0/24 maxlen: 24
                          85.235.74.0/24 maxlen: 24
                          93.190.8.0/24 maxlen: 24
                          193.17.5.0/24 maxlen: 24
                          193.111.76.0/24 maxlen: 24
                          193.111.78.0/24 maxlen: 24
                          217.18.208.0/24 maxlen: 24
                          217.18.209.0/24 maxlen: 24
                          217.18.210.0/24 maxlen: 24
                          217.18.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5f:9c:2a:31:4f:93:af:b8:f1:6a:1f:61:89:35:4f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
        Validity
            Not Before: Nov 24 19:18:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3da65c909efd6d81d10c8720ea3db07de86f3c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:bd:60:26:fc:21:10:86:35:bf:15:c4:32:
                    d3:b3:51:da:59:bd:3e:c6:de:af:e8:4c:03:e9:46:
                    71:66:27:42:47:8e:39:da:c6:b2:53:75:7a:a9:fe:
                    f0:e3:a7:d4:ff:38:f3:c4:2d:d2:d9:4b:1c:37:ee:
                    01:02:11:1d:a1:4b:e3:db:82:45:dd:1d:74:bd:25:
                    90:9e:e4:9f:ed:4a:66:a5:f9:f6:e5:a5:9f:6d:6a:
                    1e:46:5a:c5:f8:cc:55:34:21:94:4d:fa:8f:14:76:
                    76:96:19:56:a0:09:8c:e9:19:3f:cd:39:78:7f:11:
                    f1:67:2f:8d:47:d5:0a:96:67:8a:b5:a1:0d:a5:3d:
                    62:eb:61:2c:76:1f:ec:0c:59:11:33:23:a3:d2:78:
                    ca:da:10:81:21:50:11:de:97:2a:1e:fe:c9:e7:f5:
                    5c:10:6f:65:d1:b5:e2:08:3b:cb:82:65:41:04:19:
                    7e:db:09:bd:b3:0f:a5:31:74:3c:ae:30:c7:52:ab:
                    5d:92:bd:bc:9a:be:1d:b6:80:ea:b7:69:7d:a2:75:
                    e0:54:f9:a6:b2:bc:1e:9d:fe:ab:1e:bf:ad:fc:30:
                    00:8e:56:f7:7d:1f:d2:f2:0e:12:de:98:63:82:5c:
                    42:45:40:86:1c:51:70:75:52:6b:74:91:a0:28:8f:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:5C:90:9E:FD:6D:81:D1:0C:87:20:EA:3D:B0:7D:E8:6F:3C:73
            X509v3 Authority Key Identifier:
                keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/PaZckJ79bYHRDIcg6j2wfehvPHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.235.72.0-85.235.74.255
                  93.190.8.0/24
                  193.17.5.0/24
                  193.111.76.0/24
                  193.111.78.0/24
                  217.18.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:3d:9b:f9:64:81:bc:86:b7:ce:d7:d7:7c:85:f6:ed:a9:88:
         32:07:38:32:30:32:04:74:d0:c5:9c:25:5f:95:68:bf:47:04:
         1a:47:e8:38:5c:1c:49:5f:92:4a:42:fc:84:fa:31:0f:6e:61:
         a8:9b:3c:03:5f:1e:1f:3c:18:55:41:0e:13:34:e2:7a:93:3e:
         83:59:85:14:4b:da:56:52:68:ee:3d:ba:7b:73:00:6a:5d:0a:
         8f:ae:ec:a2:bb:c2:94:80:e6:58:24:ef:16:a5:13:f6:01:2b:
         82:ce:d1:76:3c:65:c5:bb:a3:a5:d4:03:bb:4c:2a:87:bb:fb:
         4d:e3:84:75:8e:b7:88:61:b6:7e:a5:54:d9:97:5b:b4:fb:86:
         5a:ec:3b:5c:99:95:04:33:d0:34:1f:0d:06:2c:00:08:8a:76:
         b5:b5:df:b6:32:22:fc:15:28:73:36:a5:07:75:15:3e:5a:f1:
         7c:1e:4c:77:20:17:8a:41:e2:e8:fe:78:04:48:03:61:28:8b:
         90:d1:e9:7e:86:62:05:fd:ea:e4:61:5b:80:6a:2d:18:2e:76:
         28:f3:ca:ef:d4:f4:96:ee:18:ca:55:f3:5b:56:20:32:6a:61:
         d6:73:01:ae:0e:c4:81:21:44:d5:60:de:e3:f6:e8:87:75:4a:
         7c:14:7a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:10 2025 by rpki-client