Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/EparyaA3j7f_O1Qy1thUsIhG1-M.roa
File:                     EparyaA3j7f_O1Qy1thUsIhG1-M.roa (raw, json)
Hash identifier:          96Kf3f6tgGVK/3maDpGaajZxebXT0gugWJvL9pY9fv0=
Subject key identifier:   12:96:AB:C9:A0:37:8F:B7:FF:3B:54:32:D6:D8:54:B0:88:46:D7:E3
Certificate issuer:       /CN=39b463372b9ddf448b3fc3eaed58441194782d06
Certificate serial:       05675310
Authority key identifier: 39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/EparyaA3j7f_O1Qy1thUsIhG1-M.roa
Signing time:             Sat 01 Jan 2022 12:01:49 +0000
ROA not before:           Sat 01 Jan 2022 12:01:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203614
IP address blocks:        185.253.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90657552 (0x5675310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b463372b9ddf448b3fc3eaed58441194782d06
        Validity
            Not Before: Jan  1 12:01:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1296abc9a0378fb7ff3b5432d6d854b08846d7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:e1:94:6e:5e:da:31:b0:1a:5e:35:e4:8f:
                    d3:9a:54:00:e1:0e:22:23:88:bc:2a:84:e4:80:5a:
                    66:fd:b0:5d:df:9a:a9:d8:79:3b:55:79:91:71:2a:
                    30:8b:67:bf:a7:55:f7:71:b7:da:e3:44:c7:8d:8f:
                    7a:5f:fb:05:00:ff:47:f2:ea:24:50:e9:2c:8c:15:
                    5a:fd:c7:9d:6a:c6:dd:25:5b:b4:9f:53:4b:f0:54:
                    e5:7a:7b:46:4d:20:6e:6f:63:96:05:a1:f6:2d:b2:
                    bc:27:31:92:24:71:92:f6:bc:20:b4:0b:00:46:91:
                    24:c1:54:9b:7d:ed:12:38:af:e1:64:7f:ad:fe:53:
                    b7:c5:42:b2:41:da:6a:b1:d0:c2:b9:53:08:47:c8:
                    18:01:b9:c9:5f:b0:31:a8:c1:23:e4:8e:e7:41:91:
                    f4:37:f1:f9:ac:13:78:87:a9:b9:77:c8:5c:75:8d:
                    ca:f6:2b:70:b5:01:d0:9c:b8:18:d3:b6:0b:ed:a4:
                    98:2b:8b:ed:60:55:21:ad:d0:54:71:65:da:e3:32:
                    b9:8d:d1:a8:67:c2:bd:b9:9d:6b:1a:b0:33:98:12:
                    fe:6a:03:0d:07:5e:fc:85:4e:7a:b6:90:1a:4a:76:
                    fc:1a:a0:d9:8c:ce:d3:aa:e5:45:d4:bf:1d:4c:ee:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:AB:C9:A0:37:8F:B7:FF:3B:54:32:D6:D8:54:B0:88:46:D7:E3
            X509v3 Authority Key Identifier:
                keyid:39:B4:63:37:2B:9D:DF:44:8B:3F:C3:EA:ED:58:44:11:94:78:2D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObRjNyud30SLP8Pq7VhEEZR4LQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/EparyaA3j7f_O1Qy1thUsIhG1-M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/450138-f4b3-4689-b4c9-4f74dbe1b766/1/ObRjNyud30SLP8Pq7VhEEZR4LQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.253.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:2e:99:93:2c:0f:07:18:1c:ef:a4:b9:aa:57:a9:3e:c6:05:
         50:14:54:ca:31:2e:a9:0d:14:5a:10:1f:11:6a:13:a6:e8:31:
         cc:61:84:ef:7f:dd:8f:c7:ce:dd:ae:fa:ee:1c:b3:c8:e5:e2:
         77:6c:b7:dd:7a:28:63:e4:c3:1a:79:15:c9:65:14:34:40:22:
         87:67:d5:f7:70:c4:e1:c3:8f:15:36:0f:b8:36:29:8d:23:73:
         08:07:ad:ce:d4:0e:dc:b0:ca:47:17:23:50:f2:b0:ef:37:a3:
         ab:ce:70:ca:1f:1e:8b:c0:3e:6f:a7:67:46:fe:43:04:52:6c:
         82:44:7a:a8:94:f0:ce:ab:9b:71:6e:c8:1b:f1:91:d2:63:8f:
         9f:41:6b:58:72:37:de:94:2c:5c:29:d4:02:be:18:30:93:5b:
         d3:70:64:7a:b9:50:af:13:44:9f:8d:ab:c7:49:22:6b:d9:95:
         df:74:5f:1d:07:6e:de:45:b4:b3:91:67:27:2d:0a:97:c2:3b:
         7d:fc:cf:20:97:e1:61:47:96:1b:6b:46:07:03:15:58:3a:97:
         30:92:b4:88:43:95:e9:46:b3:73:54:d3:82:1c:50:06:34:c4:
         3a:c2:55:49:c3:16:ac:a0:5a:6b:2d:bb:e1:65:0f:af:48:d5:
         5c:6a:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:39 2025 by rpki-client