Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wbco5h_oANwwSvQo5yEP9IsTDEo.roa
File:                     wbco5h_oANwwSvQo5yEP9IsTDEo.roa (raw, json)
Hash identifier:          +Tx4FPZVuUVTZZAF9sXHvcrCKIDeGXDcJ2Yc4a704Ms=
Subject key identifier:   C1:B7:28:E6:1F:E8:00:DC:30:4A:F4:28:E7:21:0F:F4:8B:13:0C:4A
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       018ACC187087B7083D3752171B662FCB9143
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wbco5h_oANwwSvQo5yEP9IsTDEo.roa
Signing time:             Mon 25 Sep 2023 11:27:48 +0000
ROA not before:           Mon 25 Sep 2023 11:27:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197960
IP address blocks:        93.171.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cc:18:70:87:b7:08:3d:37:52:17:1b:66:2f:cb:91:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Sep 25 11:27:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1b728e61fe800dc304af428e7210ff48b130c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:99:56:36:37:c2:6c:13:83:ef:78:b7:81:
                    60:a7:fd:f5:1e:cf:b8:4d:49:50:01:0b:5f:aa:08:
                    e9:d6:64:3d:35:5e:cb:49:94:e1:9a:f5:fa:b2:e2:
                    ac:19:ae:d0:94:82:6a:f6:f1:5a:81:19:a2:38:3c:
                    c8:5b:d2:b0:b2:4a:b5:bb:8c:14:9f:49:13:da:a0:
                    b2:3c:cf:87:cd:86:d1:31:d9:f0:b2:54:04:ef:3a:
                    57:0d:22:21:fb:83:4a:78:f5:ff:32:01:cc:ac:57:
                    b2:6d:cd:16:78:f8:c3:7c:7e:b4:ef:72:eb:20:e6:
                    c9:14:bd:fd:65:10:d7:b1:6c:b3:72:b6:96:c6:51:
                    8b:b1:8b:84:ce:ed:86:13:9c:8a:5a:3f:9b:e6:24:
                    19:bf:21:e0:0a:5b:84:6c:90:58:43:26:5f:4c:cd:
                    f4:c8:64:1e:c1:44:37:e0:40:d2:2f:b3:3a:b8:8d:
                    4b:d8:b1:34:b6:56:7c:bd:16:76:7e:0b:0f:ee:9c:
                    b8:fd:7c:5d:7a:4a:48:60:f2:0b:03:ec:d3:58:90:
                    ce:ae:1a:df:df:d8:c9:21:07:12:ed:98:eb:15:df:
                    a4:d5:c9:08:f2:b2:8c:ec:df:03:7e:ba:66:ba:1f:
                    0a:17:41:cd:ab:95:c1:bf:fe:79:91:06:0a:52:e3:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:28:E6:1F:E8:00:DC:30:4A:F4:28:E7:21:0F:F4:8B:13:0C:4A
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wbco5h_oANwwSvQo5yEP9IsTDEo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:1c:82:51:86:fd:f1:db:f1:0f:76:49:bb:7f:ad:8f:a9:
         ec:2d:14:9f:14:f7:b6:db:99:e3:94:01:37:c5:ae:4c:e5:ab:
         50:99:2b:82:c8:57:fb:85:e3:c4:a3:e4:5b:c0:64:d6:da:a6:
         b8:e5:4b:21:59:b7:c8:5d:cd:9a:dc:1e:28:b4:4f:a7:84:b2:
         07:a5:4c:9d:4c:b7:62:03:43:26:d5:2c:98:01:b2:38:6e:2e:
         89:f3:04:78:f8:8b:0d:eb:e6:c1:5a:5d:91:d2:7d:bd:36:f7:
         eb:54:e7:fe:b1:b5:5b:f6:75:69:8c:9e:3b:eb:2c:ba:d4:85:
         4a:06:84:87:62:22:e2:01:dd:50:f7:9e:51:bc:11:f9:44:38:
         ce:fb:6e:aa:32:54:cb:e6:a4:ae:b6:94:00:1c:77:4a:b2:d6:
         80:d0:73:12:78:4d:60:6b:6c:92:1a:57:11:8f:fd:74:36:b0:
         d5:a2:f9:73:da:88:84:e3:58:60:31:17:e9:f9:5d:c3:36:16:
         ae:82:61:78:bd:4c:4d:8b:db:0c:f6:a1:e7:cd:f2:bc:18:7e:
         23:85:32:25:6a:bb:eb:23:00:19:6d:2d:c7:af:37:14:ff:db:
         90:41:d9:5e:9a:3a:f3:e8:01:6b:a6:bb:74:d4:a7:66:3d:8c:
         c2:cd:db:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:26 2025 by rpki-client