Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3tudA2LiykyzZBhd4T_AiBTkU3M.roa
File:                     3tudA2LiykyzZBhd4T_AiBTkU3M.roa (raw, json)
Hash identifier:          +fQ03+DKnJski/Kh8raT+wFz8LfBxoz1CNG9Q5b1QtE=
Subject key identifier:   DE:DB:9D:03:62:E2:CA:4C:B3:64:18:5D:E1:3F:C0:88:14:E4:53:73
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A6C644A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3tudA2LiykyzZBhd4T_AiBTkU3M.roa
Signing time:             Sat 01 Jan 2022 04:51:50 +0000
ROA not before:           Sat 01 Jan 2022 04:51:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35253
IP address blocks:        195.136.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980182090 (0x3a6c644a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:51:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dedb9d0362e2ca4cb364185de13fc08814e45373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:f3:1c:d5:42:e2:40:f9:2b:5d:71:4a:e6:
                    3b:0a:58:08:e1:ad:6f:09:d4:44:36:5d:96:37:d0:
                    14:af:14:af:53:5f:ca:33:50:71:11:70:88:6a:1a:
                    74:b3:f9:2c:f6:b2:0c:c9:c3:c0:8c:fd:8d:42:a4:
                    04:46:6c:ce:a5:8f:39:fb:a5:80:df:7b:a9:d2:6e:
                    b1:e9:fa:f7:21:77:14:77:f4:be:af:83:e9:95:11:
                    81:f9:3d:6e:b0:1a:a3:23:0d:9b:87:f9:f0:a2:47:
                    80:ee:96:5c:32:3d:80:9e:33:f4:f9:68:b8:92:ed:
                    7b:ef:42:c1:cf:19:41:ac:eb:02:ec:18:36:e6:8d:
                    79:c5:c9:70:32:e9:66:1c:0c:ec:6e:ae:5d:bc:f8:
                    31:cb:85:44:86:5a:ad:b5:38:cb:c2:64:06:7a:7a:
                    ab:0c:48:44:ff:8d:c6:9a:fe:9e:e0:ab:e7:10:36:
                    10:eb:4b:58:9a:48:80:98:54:9c:7f:99:16:df:05:
                    03:33:89:1c:79:17:21:92:4e:ce:e1:30:48:76:f2:
                    4d:64:02:8a:fb:82:f2:f0:3d:cb:1c:3f:01:68:a2:
                    d4:7f:28:92:fa:05:52:2a:c1:1b:c7:45:d5:27:7a:
                    ae:79:11:20:d8:7a:b3:54:19:a9:5b:ec:df:da:bf:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:DB:9D:03:62:E2:CA:4C:B3:64:18:5D:E1:3F:C0:88:14:E4:53:73
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/3tudA2LiykyzZBhd4T_AiBTkU3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.136.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:ce:93:74:ca:e4:69:51:22:49:ac:7b:98:5c:17:42:eb:72:
         10:9d:f2:37:e3:78:c6:b0:51:dd:70:ca:aa:b5:ac:d1:4b:98:
         3a:8e:7a:0f:7e:62:c1:1e:21:10:8a:e3:7b:a9:02:1c:2b:5b:
         d3:b7:6b:e1:11:5b:a7:ba:da:8b:de:87:2c:a5:63:fd:a2:4c:
         90:c3:35:9a:dc:c4:d5:dc:34:56:c4:49:cd:1b:15:6f:df:bb:
         a4:aa:30:8c:d9:7a:a7:9d:e3:c5:e0:8d:7f:23:9f:1d:08:04:
         6d:d9:f3:16:5b:1f:27:bb:5d:1f:56:99:f7:0a:01:e2:81:11:
         98:0a:47:3b:94:9b:d0:0b:fd:e7:ba:cf:47:db:4d:b5:cb:3e:
         14:ad:19:92:bb:dd:f2:c1:81:2c:e3:11:44:6b:58:2b:f7:ab:
         d1:12:a7:60:c1:97:7e:5b:e6:67:68:51:28:85:8b:6e:e9:e3:
         b9:57:13:1e:7c:4e:54:d9:c6:08:10:96:c5:4c:a8:9c:9c:be:
         da:d5:25:4e:bb:40:90:37:6c:c0:95:b5:74:45:dd:a0:98:b0:
         b9:02:5b:34:66:ef:13:c1:16:86:c3:c8:e8:00:35:91:da:2d:
         05:08:96:fe:03:86:b8:e4:fa:b8:12:2c:26:23:70:1e:af:5e:
         a9:79:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:35 2025 by rpki-client