Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2e28f5-8268-41e9-8bc7-146641f208bc/1/vsWVau_PKeeKbo2Gj-2jKqxBqSI.roa
File:                     vsWVau_PKeeKbo2Gj-2jKqxBqSI.roa (raw, json)
Hash identifier:          zUwTQJqHjbdiO812lF6TMsBk4aDi5IQESHm9GmYLwag=
Subject key identifier:   BE:C5:95:6A:EF:CF:29:E7:8A:6E:8D:86:8F:ED:A3:2A:AC:41:A9:22
Certificate issuer:       /CN=a4b668d23467f2c8f67426c9e68be49c4247ee79
Certificate serial:       01856C78141CBE6DE9E7AF3EF2B3E5A4E486
Authority key identifier: A4:B6:68:D2:34:67:F2:C8:F6:74:26:C9:E6:8B:E4:9C:42:47:EE:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZo0jRn8sj2dCbJ5ovknEJH7nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/2e28f5-8268-41e9-8bc7-146641f208bc/1/vsWVau_PKeeKbo2Gj-2jKqxBqSI.roa
Signing time:             Sun 01 Jan 2023 08:34:46 +0000
ROA not before:           Sun 01 Jan 2023 08:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201814
IP address blocks:        178.211.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:14:1c:be:6d:e9:e7:af:3e:f2:b3:e5:a4:e4:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b668d23467f2c8f67426c9e68be49c4247ee79
        Validity
            Not Before: Jan  1 08:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bec5956aefcf29e78a6e8d868feda32aac41a922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:06:43:24:84:f4:f9:9d:0e:09:43:9b:15:
                    b5:4d:42:47:81:20:b1:39:79:08:25:06:d9:0e:84:
                    3c:58:21:d3:0c:5d:20:03:6a:b2:14:a5:e8:8a:a4:
                    19:07:ab:36:7f:33:95:b4:70:de:27:03:d5:fb:55:
                    cd:02:39:eb:df:9e:20:b8:4e:52:2a:3f:be:71:da:
                    0f:a7:ac:5e:c2:87:e4:84:4b:64:9f:26:11:e6:a7:
                    fb:d0:74:0e:c8:a8:83:f1:aa:fe:9e:17:8d:5b:9a:
                    a0:5d:c3:08:cd:7d:8e:e6:40:be:f4:b7:cd:93:21:
                    c2:9f:36:33:ff:4c:77:09:39:47:35:f0:1b:fe:82:
                    51:18:c1:a9:35:04:77:f0:ff:e1:07:d0:9b:7a:56:
                    86:5c:60:0e:4b:e4:c5:57:d8:b0:f9:f8:ad:2d:10:
                    ea:c7:6d:90:0e:d6:63:a0:09:9b:2b:91:f0:18:44:
                    1f:6e:c2:08:4d:f4:a9:3b:a1:ec:0b:50:1c:b8:89:
                    00:ae:1f:06:89:15:ff:6a:80:3d:17:6e:06:54:72:
                    3f:ff:3c:87:82:28:fe:bd:c1:2d:1a:82:f0:49:07:
                    94:46:ca:44:0f:2a:96:82:56:10:29:39:c3:75:87:
                    ee:56:e8:08:b4:a3:43:f3:2c:e5:b0:74:2d:ec:a1:
                    a5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C5:95:6A:EF:CF:29:E7:8A:6E:8D:86:8F:ED:A3:2A:AC:41:A9:22
            X509v3 Authority Key Identifier:
                keyid:A4:B6:68:D2:34:67:F2:C8:F6:74:26:C9:E6:8B:E4:9C:42:47:EE:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZo0jRn8sj2dCbJ5ovknEJH7nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2e28f5-8268-41e9-8bc7-146641f208bc/1/vsWVau_PKeeKbo2Gj-2jKqxBqSI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2e28f5-8268-41e9-8bc7-146641f208bc/1/pLZo0jRn8sj2dCbJ5ovknEJH7nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.211.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:93:91:01:c3:f3:95:bf:d3:46:97:ad:b9:39:f0:ac:dc:e9:
         74:d3:57:fa:c2:bf:c1:01:42:a1:06:85:4f:13:79:ce:0a:f1:
         32:68:e9:c8:74:52:cb:f7:ee:96:8a:33:07:55:c4:e2:04:a4:
         15:f3:3d:01:23:00:7b:2b:f8:37:58:71:cd:10:9e:ec:cd:34:
         d2:56:5c:1e:27:06:57:29:11:ef:d9:90:b9:6b:f2:fd:24:6b:
         5d:f0:68:35:a4:2d:a6:18:ea:b3:39:04:f8:9c:7a:6f:6e:23:
         9b:31:a9:2f:10:2b:b7:64:31:e7:47:6e:06:c4:40:29:bf:60:
         92:58:37:62:7a:27:f4:0f:6d:06:37:fe:c1:93:92:43:ac:ca:
         72:f7:2f:5e:6e:67:5f:f4:93:88:08:23:66:c8:f3:55:2e:66:
         48:c4:36:f9:d4:58:80:ac:19:c2:9b:56:5d:dd:e9:1f:ff:3d:
         57:2a:cb:c1:96:d1:e1:a4:0a:5f:23:dd:b8:66:d3:2b:f8:22:
         31:d7:1b:98:7f:76:36:46:ae:a8:17:a6:9b:05:ce:40:ae:3d:
         a2:8e:a1:ac:5b:91:cd:12:2e:31:3d:9a:95:af:3c:01:4f:0c:
         06:16:b6:c0:73:b2:f4:b0:5d:34:f0:e2:d1:28:9a:e4:0b:30:
         6c:18:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:43 2025 by rpki-client