Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/q5jMBlWE5fV0Joag7aFGrFAl7mM.roa
File:                     q5jMBlWE5fV0Joag7aFGrFAl7mM.roa (raw, json)
Hash identifier:          +KjUt/1NMSqukWwpgSDevJtXTXThXS56Q4x630gnnSM=
Subject key identifier:   AB:98:CC:06:55:84:E5:F5:74:26:86:A0:ED:A1:46:AC:50:25:EE:63
Certificate issuer:       /CN=fdb941f2f7c534080e0f777a7ae997992e11e1af
Certificate serial:       0383057A
Authority key identifier: FD:B9:41:F2:F7:C5:34:08:0E:0F:77:7A:7A:E9:97:99:2E:11:E1:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_blB8vfFNAgOD3d6eumXmS4R4a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/q5jMBlWE5fV0Joag7aFGrFAl7mM.roa
Signing time:             Sat 01 Jan 2022 00:56:49 +0000
ROA not before:           Sat 01 Jan 2022 00:56:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51747
IP address blocks:        193.247.126.0/23 maxlen: 24
                          193.247.74.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58918266 (0x383057a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdb941f2f7c534080e0f777a7ae997992e11e1af
        Validity
            Not Before: Jan  1 00:56:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab98cc065584e5f5742686a0eda146ac5025ee63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:0a:e0:72:72:4b:31:f6:5f:d7:99:3e:5a:
                    21:f3:9a:86:a9:74:69:c7:ca:ad:5a:dc:dc:a4:6f:
                    82:3a:e7:ae:a6:da:73:01:73:7e:a2:3d:7e:fa:50:
                    aa:9f:3c:fa:39:6d:d7:e4:70:56:89:ef:e9:7c:4b:
                    07:df:88:87:39:94:5e:cb:ce:3e:b5:12:b8:7c:70:
                    73:7c:94:35:8a:32:d4:46:5e:33:8c:06:3e:0f:53:
                    8c:c6:58:ef:44:ec:87:eb:4d:63:72:ff:07:fd:ea:
                    1a:41:d1:32:53:49:38:f6:49:64:73:31:3e:79:c3:
                    b2:5e:8c:ae:9e:53:33:ea:a1:64:5e:75:eb:d6:5e:
                    ff:af:87:9b:0d:48:37:b0:9e:e2:85:7c:8c:bf:bc:
                    55:aa:35:ac:c8:9d:67:12:ae:02:76:b1:00:b3:85:
                    9e:17:c8:d0:d8:9d:0c:7a:33:32:10:0a:37:25:64:
                    26:15:27:f0:92:f8:27:90:95:95:e0:98:f2:de:a9:
                    ba:72:9c:3a:46:44:13:81:d0:1c:82:dd:d4:f2:8f:
                    7f:14:44:54:85:bb:d9:cf:7c:a7:79:a3:cb:81:11:
                    cd:36:4a:8e:e4:25:c3:b7:ce:bb:e7:35:93:25:2f:
                    ea:b2:8e:a0:23:d3:a8:04:93:fb:af:17:11:cd:3a:
                    33:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:98:CC:06:55:84:E5:F5:74:26:86:A0:ED:A1:46:AC:50:25:EE:63
            X509v3 Authority Key Identifier:
                keyid:FD:B9:41:F2:F7:C5:34:08:0E:0F:77:7A:7A:E9:97:99:2E:11:E1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_blB8vfFNAgOD3d6eumXmS4R4a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/q5jMBlWE5fV0Joag7aFGrFAl7mM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/178025-c7d9-423f-a53b-e23f408d189b/1/_blB8vfFNAgOD3d6eumXmS4R4a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.74.0/23
                  193.247.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:c2:0b:4c:7b:04:8c:95:cb:5f:fc:fd:f3:93:40:29:63:
         62:4a:eb:46:66:d6:5f:23:f5:7e:d9:31:f6:28:5c:a3:23:2d:
         e0:91:1c:e8:ea:74:5e:87:5e:3a:89:4e:44:9c:9a:1f:bc:63:
         85:92:08:5b:bf:44:6a:f3:a3:32:39:71:04:78:d0:75:77:75:
         bf:11:fd:a6:47:7a:5e:97:9c:00:fd:34:5e:34:58:83:22:86:
         47:03:26:46:49:64:72:48:ae:19:c9:3d:c9:40:c9:83:8d:bf:
         f8:9c:1f:f4:91:3f:aa:c0:d6:40:6d:60:ad:11:0a:c7:36:09:
         72:1f:bc:d8:57:ba:39:4b:14:f7:b2:cf:cd:6e:3b:7f:8b:7b:
         be:98:94:78:08:20:4e:30:98:e1:91:6c:09:ba:db:40:02:b8:
         39:19:80:13:42:a6:ef:16:cd:4c:bb:8d:b5:38:af:25:5d:49:
         a1:b2:d4:29:d0:25:25:06:59:1a:8d:1d:51:e1:6b:f8:e3:9e:
         ce:27:28:1a:c8:2a:c6:df:ff:93:1f:f0:3d:ca:0b:b7:70:a5:
         8a:4e:30:6d:a4:8d:0c:fa:fb:ef:18:c2:06:07:84:45:f0:f4:
         a8:4d:21:dd:9c:08:93:98:39:76:ea:50:a6:13:c6:64:4e:82:
         0c:a8:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:21 2025 by rpki-client