Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/P5YYv06nemp3PtZBDuiXKbo0kxU.roa
File:                     P5YYv06nemp3PtZBDuiXKbo0kxU.roa (raw, json)
Hash identifier:          ZhLzz9CAe+L0gMj29tbRjdI3IjVKIYkxp4Ib5bJFQfE=
Subject key identifier:   3F:96:18:BF:4E:A7:7A:6A:77:3E:D6:41:0E:E8:97:29:BA:34:93:15
Certificate issuer:       /CN=22582c47b01e06d883694841e3c980382c559406
Certificate serial:       F4DA10
Authority key identifier: 22:58:2C:47:B0:1E:06:D8:83:69:48:41:E3:C9:80:38:2C:55:94:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IlgsR7AeBtiDaUhB48mAOCxVlAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/P5YYv06nemp3PtZBDuiXKbo0kxU.roa
Signing time:             Tue 22 Feb 2022 10:15:07 +0000
ROA not before:           Tue 22 Feb 2022 10:15:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        212.52.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16046608 (0xf4da10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22582c47b01e06d883694841e3c980382c559406
        Validity
            Not Before: Feb 22 10:15:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3f9618bf4ea77a6a773ed6410ee89729ba349315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:4a:e9:bb:57:3b:88:2a:e2:8e:87:a6:38:
                    f6:c7:8c:e9:a4:bd:8c:a5:74:3e:f5:cc:30:ac:d7:
                    af:70:13:62:78:b0:06:e7:3a:ff:49:bc:13:65:10:
                    8b:40:20:23:e8:84:c7:2d:f0:91:36:3e:f5:d2:dd:
                    f1:cc:b9:6e:97:cc:5c:1d:58:79:5e:05:73:f5:5f:
                    85:e5:71:3f:52:68:96:2e:e3:c3:7a:e1:4a:5b:63:
                    c7:fa:38:37:b3:e5:23:f4:48:9b:5f:bb:51:84:00:
                    73:58:bc:e7:1f:f7:73:a4:79:64:d2:e6:cc:5a:c7:
                    79:26:53:78:d5:4b:6e:a1:c4:65:45:58:39:d3:ff:
                    7a:13:99:91:9c:f2:e3:cc:cb:25:6d:9e:2b:fe:2f:
                    7a:63:25:e7:7c:b2:a4:7e:9a:a3:05:74:96:49:40:
                    db:85:da:31:da:fe:0e:a1:f2:27:04:f6:1a:33:b2:
                    6c:67:80:67:f9:ff:08:ef:8d:48:3d:ce:29:bd:ea:
                    02:82:40:0d:ab:83:98:ec:93:f6:90:6f:ef:4d:9d:
                    f8:a9:17:1b:5d:33:9f:88:f9:fc:97:26:95:54:eb:
                    fd:15:34:27:c3:aa:df:15:09:af:2f:ae:05:14:bc:
                    78:53:59:70:17:19:1b:85:a8:b7:15:ba:a8:ea:c5:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:96:18:BF:4E:A7:7A:6A:77:3E:D6:41:0E:E8:97:29:BA:34:93:15
            X509v3 Authority Key Identifier:
                keyid:22:58:2C:47:B0:1E:06:D8:83:69:48:41:E3:C9:80:38:2C:55:94:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlgsR7AeBtiDaUhB48mAOCxVlAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/P5YYv06nemp3PtZBDuiXKbo0kxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/367a0f-0510-4366-aa15-49ed29a9e0af/1/IlgsR7AeBtiDaUhB48mAOCxVlAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:ab:0f:40:b1:6e:0e:cd:15:bd:c2:10:93:f8:a1:e1:47:
         41:1a:f3:ea:3d:0d:4f:59:1a:04:d5:d1:50:51:66:19:88:15:
         2f:10:a7:ae:fb:0c:2d:e1:c6:d2:eb:e4:8c:b5:f6:1a:3c:f2:
         86:e5:8d:45:a8:7d:2d:1a:91:a4:51:c7:1b:17:ca:13:39:8b:
         51:9f:28:7e:fb:34:a0:af:32:b2:0e:29:18:fb:24:45:e4:be:
         97:51:0a:11:8a:dd:06:12:e2:74:49:fa:58:bc:5f:d4:a2:04:
         29:d8:9c:c8:7c:98:65:f8:0d:5a:e0:d2:82:56:9b:1b:c8:63:
         75:4a:aa:6a:0a:47:d0:24:b3:98:a0:4b:11:fb:b7:a3:34:6f:
         f6:0a:61:cb:0a:ab:90:55:05:da:c9:39:9d:32:85:96:6f:8f:
         29:e4:95:1a:0d:6b:2b:48:36:89:da:2a:56:cd:c2:89:28:33:
         03:e0:fc:9f:46:19:e2:1c:3b:d3:fa:86:98:60:09:77:2d:f1:
         a8:c1:ac:ea:17:b6:92:46:57:26:73:71:23:8b:21:96:1d:f3:
         9d:64:70:15:7d:2a:38:ca:fd:cb:9f:51:fc:e6:53:e0:25:e2:
         0e:99:be:54:af:55:8a:74:58:20:67:72:7f:04:b1:68:95:c7:
         56:cf:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:28:03 2025 by rpki-client