Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/24ed14-4e41-4ec5-b068-1747232a6890/1/0AEEmiAaEbbRqVZQobTpuxUm-eQ.roa
File:                     0AEEmiAaEbbRqVZQobTpuxUm-eQ.roa (raw, json)
Hash identifier:          1p/nE4YuvTVL2o5wW4jPftViyRckOu034q7jaa4YNNM=
Subject key identifier:   D0:01:04:9A:20:1A:11:B6:D1:A9:56:50:A1:B4:E9:BB:15:26:F9:E4
Certificate issuer:       /CN=83f55d03350064c10216c3f0119a027ec389ff7f
Certificate serial:       E85D14
Authority key identifier: 83:F5:5D:03:35:00:64:C1:02:16:C3:F0:11:9A:02:7E:C3:89:FF:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_VdAzUAZMECFsPwEZoCfsOJ_38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/24ed14-4e41-4ec5-b068-1747232a6890/1/0AEEmiAaEbbRqVZQobTpuxUm-eQ.roa
Signing time:             Sat 01 Jan 2022 05:59:38 +0000
ROA not before:           Sat 01 Jan 2022 05:59:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63473
IP address blocks:        91.190.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15228180 (0xe85d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f55d03350064c10216c3f0119a027ec389ff7f
        Validity
            Not Before: Jan  1 05:59:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d001049a201a11b6d1a95650a1b4e9bb1526f9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:4c:e7:99:c3:03:a8:f5:52:15:c6:c7:1a:
                    23:8d:9b:9f:86:3a:b8:db:ff:d6:75:e1:fa:37:c5:
                    e9:31:2e:1b:2c:ff:e3:32:ea:55:13:5d:0f:3a:2e:
                    4f:50:b2:77:1e:b7:eb:32:7f:05:a2:56:0a:fc:23:
                    f1:c2:e5:18:8f:24:e4:79:24:5a:3e:a9:e7:7b:31:
                    9c:23:42:1e:f1:cb:33:49:fe:b0:f0:f6:99:e0:b2:
                    d9:24:a9:ab:3a:9e:bd:8e:8a:38:36:30:69:3f:64:
                    7b:e7:f2:f1:8e:35:d5:9d:0b:ab:cb:48:0d:a4:8b:
                    16:49:6a:5f:88:70:35:01:82:da:cf:3a:9d:18:e1:
                    76:a2:9c:1b:fa:69:c7:6a:86:96:98:e3:7b:16:87:
                    08:f7:88:02:2b:25:9a:f3:30:fe:76:a7:21:c5:a7:
                    49:44:97:81:fc:e8:33:be:96:bc:b5:6a:04:76:d2:
                    52:32:93:31:b6:d4:59:64:e5:03:92:64:88:c7:18:
                    96:b5:20:06:99:26:0c:00:82:9e:46:80:d2:30:14:
                    d0:aa:54:75:8a:aa:fa:86:0b:80:05:57:d7:3f:2b:
                    5b:db:c1:65:33:93:d4:84:f4:37:c1:84:09:a1:de:
                    b7:01:64:85:f0:17:68:a6:57:40:18:84:df:68:a6:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:01:04:9A:20:1A:11:B6:D1:A9:56:50:A1:B4:E9:BB:15:26:F9:E4
            X509v3 Authority Key Identifier:
                keyid:83:F5:5D:03:35:00:64:C1:02:16:C3:F0:11:9A:02:7E:C3:89:FF:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_VdAzUAZMECFsPwEZoCfsOJ_38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/24ed14-4e41-4ec5-b068-1747232a6890/1/0AEEmiAaEbbRqVZQobTpuxUm-eQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/24ed14-4e41-4ec5-b068-1747232a6890/1/g_VdAzUAZMECFsPwEZoCfsOJ_38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.190.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:3e:13:12:7e:83:53:35:9b:93:7d:18:55:ed:c0:56:49:
         67:a7:36:fd:71:55:44:cb:7a:38:56:d4:2a:e0:15:3c:77:21:
         d4:40:ec:b5:58:9b:24:dc:6b:5c:86:c2:c8:89:a7:82:d3:fa:
         c9:fa:82:9a:86:9b:f6:e2:82:9b:92:75:19:58:c9:22:9f:73:
         87:81:23:e0:d3:b9:f0:e1:d8:6b:fb:3d:3b:dd:ae:df:1b:f8:
         95:8a:d7:25:49:ff:5b:fd:04:cf:72:74:c0:a0:4f:7e:c9:7f:
         73:2f:4f:71:93:07:f9:61:ec:6f:41:00:12:68:34:aa:0a:a1:
         75:9a:ef:2b:af:43:17:e7:7c:9a:68:74:8a:ad:50:9c:29:33:
         16:cc:31:bb:8f:63:12:b0:84:ca:74:7f:e7:a8:09:f4:26:e8:
         15:bd:28:08:ec:67:2b:dd:fd:90:82:5c:06:64:ea:fb:a0:6b:
         29:56:83:4c:a7:8b:db:ba:24:29:ab:41:0e:a2:ff:eb:ff:df:
         5c:5a:6c:cb:2d:81:3f:88:f3:3a:e9:f3:0e:f7:41:f0:ad:9f:
         72:52:9c:7b:06:a4:a9:2d:a5:58:c2:5c:29:08:b9:d1:c2:a8:
         96:46:e2:a2:22:f1:4c:a7:bc:63:c3:17:e6:f2:07:88:9b:f2:
         35:d6:e1:13
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOhdFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
M2Y1NWQwMzM1MDA2NGMxMDIxNmMzZjAxMTlhMDI3ZWMzODlmZjdmMB4XDTIyMDEw
MTA1NTkzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDAwMTA0OWEyMDFh
MTFiNmQxYTk1NjUwYTFiNGU5YmIxNTI2ZjllNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHtTOeZwwOo9VIVxscaI42bn4Y6uNv/1nXh+jfF6TEuGyz/
4zLqVRNdDzouT1Cydx636zJ/BaJWCvwj8cLlGI8k5HkkWj6p53sxnCNCHvHLM0n+
sPD2meCy2SSpqzqevY6KODYwaT9ke+fy8Y411Z0Lq8tIDaSLFklqX4hwNQGC2s86
nRjhdqKcG/ppx2qGlpjjexaHCPeIAislmvMw/nanIcWnSUSXgfzoM76WvLVqBHbS
UjKTMbbUWWTlA5JkiMcYlrUgBpkmDACCnkaA0jAU0KpUdYqq+oYLgAVX1z8rW9vB
ZTOT1IT0N8GECaHetwFkhfAXaKZXQBiE32imYwkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTQAQSaIBoRttGpVlChtOm7FSb55DAfBgNVHSMEGDAWgBSD9V0DNQBkwQIW
w/ARmgJ+w4n/fzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dfVmRBelVBWk1FQ0ZzUHdFWm9DZnNPSl8zOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvMjRlZDE0LTRlNDEtNGVjNS1iMDY4LTE3NDcyMzJhNjg5MC8x
LzBBRUVtaUFhRWJiUnFWWlFvYlRwdXhVbS1lUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
MjRlZDE0LTRlNDEtNGVjNS1iMDY4LTE3NDcyMzJhNjg5MC8xL2dfVmRBelVBWk1F
Q0ZzUHdFWm9DZnNPSl8zOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFu+mzANBgkqhkiG9w0BAQsFAAOC
AQEAgrY+ExJ+g1M1m5N9GFXtwFZJZ6c2/XFVRMt6OFbUKuAVPHch1EDstVibJNxr
XIbCyImngtP6yfqCmoab9uKCm5J1GVjJIp9zh4Ej4NO58OHYa/s9O92u3xv4lYrX
JUn/W/0Ez3J0wKBPfsl/cy9PcZMH+WHsb0EAEmg0qgqhdZrvK69DF+d8mmh0iq1Q
nCkzFswxu49jErCEynR/56gJ9CboFb0oCOxnK939kIJcBmTq+6BrKVaDTKeL27ok
KatBDqL/6//fXFpsyy2BP4jzOunzDvdB8K2fclKcewakqS2lWMJcKQi50cKolkbi
oiLxTKe8Y8MX5vIHiJvyNdbhEw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:08 2025 by rpki-client