Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/A_pcIf-qE7h_R69vpeuZLwMLeHk.roa
File:                     A_pcIf-qE7h_R69vpeuZLwMLeHk.roa (raw, json)
Hash identifier:          GetG4P/eZ4MCSrlIWT/g6jeRarIDcNx4ohVjyr8K5Ms=
Subject key identifier:   03:FA:5C:21:FF:AA:13:B8:7F:47:AF:6F:A5:EB:99:2F:03:0B:78:79
Certificate issuer:       /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial:       0585B5D8
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/A_pcIf-qE7h_R69vpeuZLwMLeHk.roa
Signing time:             Fri 21 Jan 2022 20:12:55 +0000
ROA not before:           Fri 21 Jan 2022 20:12:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133973
IP address blocks:        89.41.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92648920 (0x585b5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
        Validity
            Not Before: Jan 21 20:12:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03fa5c21ffaa13b87f47af6fa5eb992f030b7879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:17:4a:b9:95:94:ca:0c:f3:0d:6e:82:1f:
                    a7:07:48:c6:a3:2f:9e:12:f1:ab:f7:c8:f4:f9:8d:
                    a5:0e:cd:26:04:60:3f:e1:5e:06:b6:4b:f5:57:85:
                    ae:14:e6:7c:97:6e:74:b3:c4:06:3c:0a:5a:d3:86:
                    1f:12:ca:70:3e:7e:07:83:e9:68:eb:b6:d0:65:45:
                    0b:0f:a7:e9:5b:57:98:f7:30:17:d4:3c:ae:6b:c7:
                    93:62:b9:59:86:79:e9:71:df:b9:82:b2:76:b0:4f:
                    7c:e7:97:0b:15:c7:27:6c:f8:f0:53:66:4c:50:86:
                    69:4f:de:f0:ae:35:9c:48:40:a3:e6:ba:9e:e5:ca:
                    86:cd:e6:40:cd:9f:88:36:48:ea:e0:18:4d:b5:be:
                    76:24:47:07:3b:bc:42:47:f9:a2:93:15:30:52:3b:
                    bc:ae:bf:e0:54:e6:e5:2a:4d:d1:11:31:c6:cf:17:
                    67:0d:f5:d4:18:87:9d:88:4c:ef:11:cd:34:12:e1:
                    95:1b:23:3e:f4:64:02:4d:19:6f:6b:42:ce:2c:ba:
                    1d:77:66:c7:43:c0:4a:6b:d9:93:34:dc:b9:75:90:
                    7c:7a:91:1d:55:f4:03:a6:e9:5a:de:21:ca:8a:58:
                    ef:74:da:f2:8a:16:3e:bc:d3:52:6d:47:45:a5:c1:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FA:5C:21:FF:AA:13:B8:7F:47:AF:6F:A5:EB:99:2F:03:0B:78:79
            X509v3 Authority Key Identifier:
                keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/A_pcIf-qE7h_R69vpeuZLwMLeHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.41.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:53:4c:07:ca:52:68:5f:c2:bb:06:42:a9:8e:7c:dd:1e:27:
         0a:34:2c:2d:09:8a:af:02:8e:42:e3:e9:af:09:d8:fa:16:8f:
         4d:80:3e:65:c1:76:e7:8f:af:20:d6:9e:12:92:f9:2c:1a:43:
         31:76:12:10:35:2a:a0:01:a9:8b:06:b5:ab:31:6b:4a:67:b2:
         81:55:c3:53:1d:e0:a5:93:bf:8a:63:ef:74:e2:aa:d9:12:0c:
         d6:0c:5a:9c:7a:17:e4:4e:5e:b9:b9:fb:a3:d4:4a:4b:4e:2f:
         d5:69:24:fc:0b:3e:e8:f1:ff:a6:ff:a5:3d:c4:8c:f7:8e:25:
         a4:b2:f4:29:66:83:35:2b:90:fa:84:3f:28:eb:e7:3a:43:1b:
         5e:9d:11:69:0e:7c:ed:4e:b4:7d:f6:5f:d3:0c:e3:44:55:ce:
         78:02:e8:b1:24:d7:5e:a6:77:2b:60:ed:6f:4d:73:ca:92:da:
         62:9a:0d:30:34:6e:66:d0:d5:19:78:22:d2:82:b2:ac:34:1a:
         3a:0f:73:c1:31:81:e8:6a:9a:4e:9c:cd:cb:35:f7:bc:73:ee:
         94:20:e7:ba:78:2b:bd:05:b4:cc:c5:9f:c0:7e:42:9d:e1:c9:
         9e:2a:a6:1b:8e:69:aa:af:0c:f6:08:7f:dd:d7:73:0e:67:2e:
         44:c8:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:43 2025 by rpki-client