Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/sDlmuruC9rbJP_Qv1SsPy07WLqM.roa
File:                     sDlmuruC9rbJP_Qv1SsPy07WLqM.roa (raw, json)
Hash identifier:          3K3vdRxo/XfmDu68QWEYlppr9ITOb5EuW3VBT63YRoM=
Subject key identifier:   B0:39:66:BA:BB:82:F6:B6:C9:3F:F4:2F:D5:2B:0F:CB:4E:D6:2E:A3
Certificate issuer:       /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial:       018D8430040034FD16E7FBD3FEEF68657613
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/sDlmuruC9rbJP_Qv1SsPy07WLqM.roa
Signing time:             Wed 07 Feb 2024 15:29:15 +0000
ROA not before:           Wed 07 Feb 2024 15:29:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49505
IP address blocks:        93.190.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:84:30:04:00:34:fd:16:e7:fb:d3:fe:ef:68:65:76:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
        Validity
            Not Before: Feb  7 15:29:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b03966babb82f6b6c93ff42fd52b0fcb4ed62ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:1a:0e:fd:f8:df:ef:8c:f7:47:16:bc:23:
                    30:3b:99:93:44:ce:ba:31:1b:d5:40:02:53:46:fb:
                    e6:3a:47:83:62:96:c0:56:c4:82:cb:2d:7d:f5:86:
                    2c:89:d7:e5:74:72:3c:6f:a0:2c:02:b9:26:cf:1a:
                    39:cc:34:17:7f:e0:71:95:d2:1e:b8:cf:72:97:9c:
                    50:3d:a9:2e:45:0f:59:4b:4f:d2:10:fa:a5:38:9d:
                    0d:51:4c:1d:3c:a5:d2:be:bd:3f:a9:cf:b3:d5:5a:
                    77:43:4f:f1:d7:0b:3c:cb:56:a8:78:dc:9d:44:6c:
                    97:2d:fc:b9:b7:94:2e:93:05:58:59:43:47:ca:ae:
                    87:ea:07:32:e8:29:2d:3d:4d:47:ed:19:c5:00:b0:
                    32:2a:b5:ec:43:34:ad:a7:a5:9a:79:f2:c9:16:ba:
                    35:7c:92:3e:52:e1:ee:a1:da:4e:81:01:50:a7:59:
                    cd:1a:98:55:77:e3:6c:c0:96:70:03:5a:38:7b:06:
                    0a:68:b1:ba:b7:48:44:b2:60:1e:e6:1f:e5:06:67:
                    03:2b:b1:0a:f3:f6:2c:0e:a1:22:0b:51:4c:32:4a:
                    63:6f:08:1e:02:40:02:08:d1:44:4c:e2:cf:56:13:
                    fd:00:7a:11:43:d3:cd:76:ee:59:21:d2:be:4c:fd:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:39:66:BA:BB:82:F6:B6:C9:3F:F4:2F:D5:2B:0F:CB:4E:D6:2E:A3
            X509v3 Authority Key Identifier:
                keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/sDlmuruC9rbJP_Qv1SsPy07WLqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:ff:cb:37:3e:e9:54:f5:ef:35:2e:a9:84:cf:5f:46:b2:
         2d:f5:54:35:ff:ea:1a:d6:da:e6:9a:6b:d9:55:bb:c3:5d:2e:
         e1:e9:19:e2:a5:95:cc:5c:30:2a:43:c9:7c:39:4e:21:d3:33:
         bd:05:54:58:6c:5b:41:3b:cd:cf:3f:1d:32:53:48:4d:5c:c2:
         ba:79:5a:f1:e8:a3:5a:45:cf:38:50:24:b0:09:09:bd:07:9c:
         6b:f8:5e:0b:c5:e4:16:b4:4b:b4:11:f9:34:e5:78:2f:94:0a:
         f1:3e:a5:12:5e:b9:ea:4f:6f:9e:24:e3:62:3e:45:08:ee:97:
         f9:b6:b6:c6:c3:9e:ba:bc:4f:ad:d6:fa:f2:7a:6c:21:de:aa:
         ac:c3:44:0d:f2:85:c7:50:c5:62:7c:c0:db:fd:3d:11:33:84:
         ba:fc:b8:53:4b:9a:70:aa:15:fb:dc:bb:ed:29:4a:65:30:e8:
         6a:27:3b:a7:23:f5:c8:cb:80:0b:a5:8b:d5:9c:98:50:1b:c3:
         ff:ad:1e:b2:37:87:4e:9d:cf:21:6d:67:8f:84:14:c7:8b:1a:
         aa:07:6c:a8:1b:cc:ba:70:e8:fb:27:4f:d2:39:99:26:97:89:
         b3:80:3e:17:05:86:06:97:e6:b8:d4:da:06:11:3a:0e:66:aa:
         62:c2:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:03 2025 by rpki-client