Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/RiWp8cXOVw6fQ2HiGlbeaYXWCmA.roa
File:                     RiWp8cXOVw6fQ2HiGlbeaYXWCmA.roa (raw, json)
Hash identifier:          uER0do+pJcAzpwLOOvLNuY2qy1gAMosfhvUi735ttC4=
Subject key identifier:   46:25:A9:F1:C5:CE:57:0E:9F:43:61:E2:1A:56:DE:69:85:D6:0A:60
Certificate issuer:       /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial:       01856FF021422B3FE6E3EA50BD380ABF41B4
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/RiWp8cXOVw6fQ2HiGlbeaYXWCmA.roa
Signing time:             Mon 02 Jan 2023 00:44:46 +0000
ROA not before:           Mon 02 Jan 2023 00:44:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51088
IP address blocks:        193.110.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f0:21:42:2b:3f:e6:e3:ea:50:bd:38:0a:bf:41:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
        Validity
            Not Before: Jan  2 00:44:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4625a9f1c5ce570e9f4361e21a56de6985d60a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7f:12:85:c3:67:3f:58:6e:54:13:43:99:3e:
                    d5:e6:27:6b:1e:5f:d7:36:53:83:27:24:72:51:48:
                    2c:cd:d1:a3:20:fa:2e:87:fd:fa:e2:cb:11:40:ee:
                    96:96:5f:22:b1:d8:17:32:19:d3:f5:3a:c6:35:4b:
                    8e:0d:44:a2:f4:13:86:54:34:5e:fe:b2:e0:55:f1:
                    ac:0d:58:49:2b:1d:f4:15:0d:46:b8:ba:fb:8a:f6:
                    20:36:90:9d:c9:b7:39:c2:2c:00:0d:9b:0c:e3:6f:
                    d6:01:0b:e3:0a:d2:68:e7:7b:ce:3c:68:ff:e9:9c:
                    23:01:93:46:63:6d:d9:07:2b:75:2d:75:1e:e8:02:
                    b7:86:0a:01:43:99:75:12:71:f2:1e:8d:e3:93:db:
                    d7:63:98:23:11:63:9a:2d:b5:cb:a2:fa:e9:6d:4d:
                    aa:58:ee:d3:07:b1:7c:ef:5a:43:86:fe:43:35:ad:
                    b9:8c:43:2f:c3:d6:ba:f1:7b:e9:da:c4:79:60:96:
                    a6:74:af:4e:e4:e6:4f:87:87:d4:2f:b4:a0:01:dc:
                    d2:d5:ca:69:56:c4:be:5d:c9:fd:34:d5:3d:a0:cd:
                    00:ae:d8:be:20:4d:b0:9a:29:bf:07:b1:d6:11:1b:
                    04:db:37:3c:d4:d7:1a:1e:47:c1:17:33:2d:be:d7:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:25:A9:F1:C5:CE:57:0E:9F:43:61:E2:1A:56:DE:69:85:D6:0A:60
            X509v3 Authority Key Identifier:
                keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/RiWp8cXOVw6fQ2HiGlbeaYXWCmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:8e:b3:84:1c:84:ea:90:df:da:a2:c6:d8:0a:56:32:3b:0c:
         c1:05:4d:2a:c3:c9:80:cf:3f:9b:d5:bf:ff:3c:42:ab:dc:66:
         2e:dd:86:e4:31:6d:9d:dc:55:73:f9:ec:ba:6a:11:e9:8e:4e:
         69:3f:b7:83:53:47:40:0c:c1:0e:55:f5:b6:ce:7e:3a:2d:42:
         bb:d0:e7:d2:f4:00:e8:bd:c2:57:08:2c:1f:ed:ca:5a:f8:6c:
         d0:4e:6c:58:64:7b:d8:82:a0:d2:37:56:10:46:46:e9:0c:fc:
         be:29:f0:23:23:b2:f6:35:7e:47:ad:64:32:f6:77:aa:14:06:
         a1:d1:45:16:af:e1:d6:90:03:1d:68:cc:be:24:7d:47:1b:d8:
         5a:a6:fd:47:7f:31:17:6b:9a:f8:cf:61:c6:78:a9:bb:6c:dc:
         18:d2:a4:dc:aa:6b:fa:e3:d4:ae:90:25:f4:b6:ad:8c:78:31:
         46:8c:2e:52:2b:76:5c:07:92:a0:c1:77:3f:b8:48:75:7e:0e:
         14:24:91:3a:e3:fc:9b:c2:38:b5:09:72:82:07:08:69:23:11:
         de:ad:a8:8e:3b:1b:bc:23:74:91:25:06:54:86:53:82:cd:c8:
         d6:1f:dc:3e:0b:15:c2:b8:d3:e0:f1:f4:e3:03:18:e9:9b:c7:
         4a:fe:e5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:07 2025 by rpki-client