Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/wsb04QAwy4vDDNSNl62uvKNdKsI.roa
File:                     wsb04QAwy4vDDNSNl62uvKNdKsI.roa (raw, json)
Hash identifier:          l0UB0ydoYPoOSycv+Ly9W5vZoXoSAOrx9xsVKjXklJk=
Subject key identifier:   C2:C6:F4:E1:00:30:CB:8B:C3:0C:D4:8D:97:AD:AE:BC:A3:5D:2A:C2
Certificate issuer:       /CN=9b4878863c615f1b03c6c80e571ec170ae348a25
Certificate serial:       018636572D156E798ACDD071799CC10E8BDD
Authority key identifier: 9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/wsb04QAwy4vDDNSNl62uvKNdKsI.roa
Signing time:             Thu 09 Feb 2023 13:22:08 +0000
ROA not before:           Thu 09 Feb 2023 13:22:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        92.119.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:57:2d:15:6e:79:8a:cd:d0:71:79:9c:c1:0e:8b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b4878863c615f1b03c6c80e571ec170ae348a25
        Validity
            Not Before: Feb  9 13:22:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2c6f4e10030cb8bc30cd48d97adaebca35d2ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:a1:7f:e4:05:7c:e4:83:60:7b:53:55:5c:
                    16:93:68:88:c3:02:43:45:76:2f:80:f8:c7:2f:1f:
                    33:2d:5c:83:b7:38:f5:66:f5:97:f2:e5:4e:85:ae:
                    33:47:d7:6c:32:22:85:f2:c7:ae:45:67:35:d7:66:
                    5b:34:03:43:33:31:81:27:c4:9d:92:94:46:44:97:
                    e6:f9:01:89:30:e9:83:16:31:b4:03:9a:b0:cc:c2:
                    61:bb:55:47:0b:b7:08:7e:6c:fd:65:0f:90:00:db:
                    bd:58:d4:03:e9:64:5c:d2:cf:3e:bd:c6:0a:8b:16:
                    e6:7b:6d:8d:4b:6e:f4:ea:54:ca:56:f5:2e:3c:2c:
                    13:08:12:fd:f6:28:44:c7:15:cd:7a:61:9d:23:c8:
                    a4:ce:a9:a3:8d:90:93:4f:49:04:f5:f6:a5:2f:5c:
                    7c:4b:39:e2:ff:44:be:b7:8f:20:75:47:fe:2e:d5:
                    65:e8:56:92:fe:e6:8b:92:7f:7b:d2:2f:86:e2:6a:
                    27:b7:16:20:30:e6:9f:e9:79:76:24:c9:f0:0a:4a:
                    91:37:7d:96:18:ce:14:ef:79:77:48:8d:b1:70:32:
                    97:de:98:58:c4:54:a1:dc:5f:65:74:a8:89:81:96:
                    1e:4c:40:90:c0:1f:f3:72:f5:5a:55:a1:8c:c3:c4:
                    21:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C6:F4:E1:00:30:CB:8B:C3:0C:D4:8D:97:AD:AE:BC:A3:5D:2A:C2
            X509v3 Authority Key Identifier:
                keyid:9B:48:78:86:3C:61:5F:1B:03:C6:C8:0E:57:1E:C1:70:AE:34:8A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0h4hjxhXxsDxsgOVx7BcK40iiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/wsb04QAwy4vDDNSNl62uvKNdKsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c747e-26a2-4c36-a242-098c13d8e86d/1/m0h4hjxhXxsDxsgOVx7BcK40iiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:39:8d:59:7e:19:30:80:07:73:19:93:3e:f4:db:09:be:5f:
         32:02:e7:0a:85:1b:4d:cc:fd:d4:f8:ce:f0:4a:be:66:90:de:
         f5:34:58:f1:a7:27:eb:46:3f:a3:63:d2:b7:76:ba:d4:01:fc:
         65:d7:2c:3b:2f:59:75:0d:30:cc:85:3c:f0:34:6a:cc:4e:6c:
         d6:56:69:cc:59:5a:56:0c:06:19:b0:f0:c0:6f:31:d6:8b:65:
         23:7b:3c:d3:ee:29:c1:7b:21:44:e7:fc:93:fc:e2:5b:f1:de:
         71:ff:20:5e:be:40:85:a5:7b:48:48:77:4f:15:04:4d:bc:64:
         24:d2:1a:b3:cd:7a:70:43:6e:3b:82:02:5c:b0:c3:5c:13:29:
         e9:13:69:de:0f:fc:9b:ba:e4:86:5e:51:50:4c:a5:e4:f7:b2:
         d5:b6:67:3c:1e:24:82:d3:34:0f:dd:4b:85:10:52:34:55:fb:
         5b:a0:f9:15:7d:a3:26:6c:aa:59:b4:81:73:8b:3a:90:94:18:
         53:35:55:ba:86:bb:a7:4d:ed:09:7b:6e:21:f3:a5:d3:33:b1:
         dc:9f:e3:fa:34:7d:c5:55:be:24:7c:73:45:1c:fc:b8:dd:2c:
         29:bf:d2:d2:66:49:bc:20:80:5e:88:9a:51:53:16:04:68:6c:
         27:57:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:07 2025 by rpki-client