Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/5JubVGtyANj9Z77FzgYic3eRlGk.roa
File:                     5JubVGtyANj9Z77FzgYic3eRlGk.roa (raw, json)
Hash identifier:          SCx4cG4B3vhvLW9t5sTyR8bV0dY8VLac4CEwxtOvDa4=
Subject key identifier:   E4:9B:9B:54:6B:72:00:D8:FD:67:BE:C5:CE:06:22:73:77:91:94:69
Certificate issuer:       /CN=c82f486a7d9de0af491a878ad3b3dd4491c24b28
Certificate serial:       01877BF89BA93224CB7675243FC982337597
Authority key identifier: C8:2F:48:6A:7D:9D:E0:AF:49:1A:87:8A:D3:B3:DD:44:91:C2:4B:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yC9Ian2d4K9JGoeK07PdRJHCSyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/5JubVGtyANj9Z77FzgYic3eRlGk.roa
Signing time:             Thu 13 Apr 2023 18:55:02 +0000
ROA not before:           Thu 13 Apr 2023 18:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     135752
IP address blocks:        193.9.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7b:f8:9b:a9:32:24:cb:76:75:24:3f:c9:82:33:75:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c82f486a7d9de0af491a878ad3b3dd4491c24b28
        Validity
            Not Before: Apr 13 18:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e49b9b546b7200d8fd67bec5ce06227377919469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:38:2e:81:c9:1f:af:de:38:2a:91:7b:bc:
                    1e:2e:a2:5d:42:26:9a:a1:98:20:48:d5:70:1d:47:
                    94:78:47:67:33:dd:ea:8d:f6:87:93:e7:e3:9e:35:
                    96:eb:3b:fe:ec:0c:49:64:c3:88:d5:a6:03:7f:fb:
                    c4:69:9c:77:3b:b1:44:49:68:88:dc:32:6f:d8:16:
                    bf:c9:55:67:84:04:05:62:90:1d:de:24:66:83:b4:
                    21:b9:73:78:3b:e3:7e:43:24:37:34:2c:1e:32:fb:
                    f2:40:c8:ae:57:02:19:99:1d:c4:c3:95:e7:0f:7e:
                    33:c8:23:fd:eb:c8:09:b2:be:39:77:41:e9:40:25:
                    83:1c:2d:7f:e1:08:77:d8:d2:c8:12:61:0b:ee:6e:
                    92:9b:1b:cf:bf:df:99:4a:a3:47:ee:26:c7:b0:16:
                    89:f3:b7:a5:96:bc:dc:b6:67:5f:71:fb:60:b5:25:
                    c0:2e:1f:15:56:e8:28:9a:cc:6f:a9:95:4b:88:2c:
                    ea:28:0b:e0:78:3c:17:19:63:aa:1c:39:e5:27:b1:
                    df:45:b1:39:3a:2e:81:47:67:dc:a4:2a:50:da:20:
                    08:d9:f5:e6:49:3d:9a:1a:5d:91:5b:ef:9c:53:a3:
                    06:54:12:a7:31:4a:53:d0:68:3a:40:fc:d9:85:47:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9B:9B:54:6B:72:00:D8:FD:67:BE:C5:CE:06:22:73:77:91:94:69
            X509v3 Authority Key Identifier:
                keyid:C8:2F:48:6A:7D:9D:E0:AF:49:1A:87:8A:D3:B3:DD:44:91:C2:4B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yC9Ian2d4K9JGoeK07PdRJHCSyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/5JubVGtyANj9Z77FzgYic3eRlGk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2ae6a0-0d6b-4843-a48e-7cd80135cc72/1/yC9Ian2d4K9JGoeK07PdRJHCSyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d7:2a:37:13:72:2a:fd:59:10:4f:49:f8:07:8e:04:b5:f1:
         62:75:11:da:ff:c1:50:82:25:40:f1:45:13:ab:e2:3f:8d:1e:
         aa:15:45:cd:af:4b:d7:da:d0:ed:ae:db:a5:38:56:84:29:31:
         e8:12:62:04:91:c1:f5:24:fa:48:53:df:50:33:c0:50:fa:b6:
         60:1f:9c:1d:58:ff:23:ac:3a:db:57:09:f0:7e:ec:9e:9e:28:
         62:99:64:7f:c6:40:ab:5a:0f:5e:d2:09:7c:62:d3:ad:ae:76:
         ae:7d:5f:7b:a8:e9:5d:7c:39:3a:1f:4b:38:e2:18:6f:6c:93:
         2c:7a:a2:58:ea:30:0b:23:9e:4d:b2:2f:f6:07:4c:25:86:24:
         fa:f5:09:cd:a4:9c:a5:c9:45:99:71:92:31:fa:37:08:dd:a7:
         2b:e5:0f:3b:6b:12:e9:2a:a8:26:b6:73:60:60:81:dc:0d:01:
         33:84:12:c0:27:bf:51:e1:5f:12:9f:3e:51:f4:59:87:7a:97:
         e6:94:d5:ea:27:8f:21:72:b1:3a:2a:ab:97:22:e0:06:77:d2:
         c3:39:2e:d6:91:82:b8:21:7e:80:2a:24:2f:ce:47:f9:f1:56:
         67:37:d9:84:50:21:46:ad:54:c1:8c:90:49:8a:34:8b:b3:96:
         12:73:06:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd7+JupMiTLdnUkP8mCM3WXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MmY0ODZhN2Q5ZGUwYWY0OTFhODc4YWQzYjNkZDQ0OTFj
MjRiMjgwHhcNMjMwNDEzMTg1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDliOWI1NDZiNzIwMGQ4ZmQ2N2JlYzVjZTA2MjI3Mzc3OTE5NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdc4LoHJH6/eOCqRe7weLqJdQiaa
oZggSNVwHUeUeEdnM93qjfaHk+fjnjWW6zv+7AxJZMOI1aYDf/vEaZx3O7FESWiI
3DJv2Ba/yVVnhAQFYpAd3iRmg7QhuXN4O+N+QyQ3NCweMvvyQMiuVwIZmR3Ew5Xn
D34zyCP968gJsr45d0HpQCWDHC1/4Qh32NLIEmEL7m6SmxvPv9+ZSqNH7ibHsBaJ
87ellrzctmdfcftgtSXALh8VVugomsxvqZVLiCzqKAvgeDwXGWOqHDnlJ7HfRbE5
Oi6BR2fcpCpQ2iAI2fXmST2aGl2RW++cU6MGVBKnMUpT0Gg6QPzZhUfcqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOSbm1RrcgDY/We+xc4GInN3kZRpMB8GA1UdIwQY
MBaAFMgvSGp9neCvSRqHitOz3USRwksoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUM5SWFuMmQ0SzlKR29lSzA3UGRSSkhDU3lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYWU2YTAtMGQ2Yi00ODQzLWE0OGUt
N2NkODAxMzVjYzcyLzEvNUp1YlZHdHlBTmo5Wjc3RnpnWWljM2VSbEdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYWU2YTAtMGQ2Yi00ODQzLWE0OGUtN2NkODAxMzVjYzcy
LzEveUM5SWFuMmQ0SzlKR29lSzA3UGRSSkhDU3lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQl8MA0G
CSqGSIb3DQEBCwUAA4IBAQBJ1yo3E3Iq/VkQT0n4B44EtfFidRHa/8FQgiVA8UUT
q+I/jR6qFUXNr0vX2tDtrtulOFaEKTHoEmIEkcH1JPpIU99QM8BQ+rZgH5wdWP8j
rDrbVwnwfuyenihimWR/xkCrWg9e0gl8YtOtrnaufV97qOldfDk6H0s44hhvbJMs
eqJY6jALI55Nsi/2B0wlhiT69QnNpJylyUWZcZIx+jcI3acr5Q87axLpKqgmtnNg
YIHcDQEzhBLAJ79R4V8Snz5R9FmHepfmlNXqJ48hcrE6KquXIuAGd9LDOS7WkYK4
IX6AKiQvzkf58VZnN9mEUCFGrVTBjJBJijSLs5YScwa/
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:12 2025 by rpki-client