Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/TPDbTArIIiV5PWrIKcdlkUXCA7E.roa
File:                     TPDbTArIIiV5PWrIKcdlkUXCA7E.roa (raw, json)
Hash identifier:          +1QPvvxo1URrjrzgcd6TA0sGZ5XP0O93qJVXIVeKPKU=
Subject key identifier:   4C:F0:DB:4C:0A:C8:22:25:79:3D:6A:C8:29:C7:65:91:45:C2:03:B1
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       018BDD7A9A842C3056AA3B32FB45BA45632E
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/TPDbTArIIiV5PWrIKcdlkUXCA7E.roa
Signing time:             Fri 17 Nov 2023 13:31:21 +0000
ROA not before:           Fri 17 Nov 2023 13:31:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        193.53.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dd:7a:9a:84:2c:30:56:aa:3b:32:fb:45:ba:45:63:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: Nov 17 13:31:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4cf0db4c0ac82225793d6ac829c7659145c203b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:47:bf:83:f6:4d:68:24:e1:83:56:9a:cf:
                    e6:10:cc:48:94:da:93:a6:95:c0:42:2f:14:56:07:
                    c9:35:7d:1f:61:b7:9d:72:5c:5e:c6:69:08:86:46:
                    d9:b6:b8:ce:f7:1b:89:fe:2a:e3:4d:f3:71:45:db:
                    68:3b:e1:1a:ee:7c:4f:b3:0a:f2:74:80:64:71:a3:
                    51:10:0d:87:14:d7:d2:0e:f8:b0:ab:0f:64:87:cc:
                    4f:06:75:c4:bf:71:56:47:56:8b:58:4c:da:dc:1a:
                    de:8e:9f:d6:17:6c:5e:9d:5a:fb:5b:4e:cf:69:6e:
                    ac:44:1a:4e:f7:6c:b3:f8:bf:34:0b:e9:35:f7:6a:
                    c0:3b:7d:5f:a1:b3:da:bc:18:7f:f1:3d:f1:d1:93:
                    db:74:7c:53:b8:69:6e:9e:d7:0a:9f:58:ce:f3:f3:
                    fd:dc:28:d2:19:96:f1:4e:2b:59:5c:a3:9d:9a:40:
                    2f:fd:9c:a3:09:77:45:6b:bf:ba:c0:06:83:44:26:
                    4e:3f:b1:19:4e:3f:0b:51:51:48:43:7b:b1:77:33:
                    41:3d:82:46:d7:75:fc:b6:2c:1c:ab:c5:76:0f:f7:
                    a1:7c:f9:4e:bc:0f:07:ae:07:fa:83:60:8d:87:f0:
                    b8:16:15:df:a9:e4:14:ae:49:19:24:06:8c:e0:bb:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F0:DB:4C:0A:C8:22:25:79:3D:6A:C8:29:C7:65:91:45:C2:03:B1
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/TPDbTArIIiV5PWrIKcdlkUXCA7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.53.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:8e:5e:0f:30:d3:12:fa:c2:bc:d7:49:01:2d:30:aa:67:94:
         d7:0e:e0:13:65:3a:a3:4d:ae:11:a8:51:b3:a9:99:92:78:85:
         2e:6a:04:e4:04:f6:11:f8:62:45:04:7e:c2:49:60:d6:72:36:
         a7:75:7a:6c:44:28:50:93:10:f2:01:a1:bf:47:3e:ee:db:0c:
         d2:82:a9:3e:08:89:e5:59:f3:a3:33:83:e9:83:cf:f3:1c:f8:
         3e:ab:57:79:51:fc:74:a8:e8:7b:ba:a6:f1:1c:6f:df:79:72:
         92:40:af:98:c9:92:bd:fc:9a:0c:d3:47:67:84:c5:a7:e7:fb:
         c4:8e:94:58:a6:2b:0a:ab:9a:42:af:c9:80:86:81:53:65:3b:
         21:20:16:a4:01:3a:b4:2b:70:67:0a:c4:dd:b2:6f:b4:1f:05:
         b4:be:54:bc:88:bc:28:e0:a8:ce:b2:01:80:a1:57:ba:a1:d8:
         52:6a:df:2b:b5:cf:8e:1a:ed:f8:55:54:c8:0d:d5:d5:cb:48:
         87:fa:2a:93:70:6b:4c:84:69:cd:47:f6:6f:b2:95:c6:01:4a:
         db:19:dc:df:a8:42:ad:c8:1d:12:93:ea:bd:0f:aa:e7:02:fd:
         6b:b3:23:98:c1:8d:3c:6c:61:d8:c6:14:ea:93:b1:8c:4c:22:
         7b:26:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:25 2025 by rpki-client