Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/Pjp5IwspejfgJCAdFQhBSAOmn9U.roa
File:                     Pjp5IwspejfgJCAdFQhBSAOmn9U.roa (raw, json)
Hash identifier:          H6iB++QyaW+ePLdGSkYTcCUpKKPf2jtFZPlTxtfclnE=
Subject key identifier:   3E:3A:79:23:0B:29:7A:37:E0:24:20:1D:15:08:41:48:03:A6:9F:D5
Certificate issuer:       /CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
Certificate serial:       0491AA64
Authority key identifier: 6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/Pjp5IwspejfgJCAdFQhBSAOmn9U.roa
Signing time:             Sat 01 Jan 2022 10:55:05 +0000
ROA not before:           Sat 01 Jan 2022 10:55:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24631
IP address blocks:        194.150.70.0/24 maxlen: 24
                          194.9.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76655204 (0x491aa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e582ea417520f9300c6e0e15eccab41bfbe11b0
        Validity
            Not Before: Jan  1 10:55:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e3a79230b297a37e024201d1508414803a69fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:84:cf:00:3c:99:7b:c1:a0:00:fb:0c:05:
                    b3:7b:cd:ca:78:0d:ae:ad:2f:64:b7:ef:ca:9f:24:
                    f3:c5:3d:17:de:24:02:58:e0:19:f9:92:de:bd:b7:
                    cd:29:9e:19:0d:4b:7b:5b:c1:b8:13:d4:d6:52:b7:
                    75:b3:cd:c4:5b:b4:a3:d0:ec:3f:41:aa:72:58:0c:
                    ab:8b:09:67:f6:21:24:a5:54:e3:56:f9:72:ab:db:
                    e6:37:d6:37:f2:6d:98:90:4c:48:4b:46:86:3d:db:
                    5e:22:99:f1:6b:99:af:d9:e6:91:e0:e7:6a:26:43:
                    84:98:bd:eb:b6:57:ad:0e:77:1a:92:63:cc:2a:16:
                    4a:ec:ec:8a:0c:06:97:5d:c3:58:95:28:6c:79:e1:
                    f9:79:cc:0e:db:8a:cd:47:45:b6:e0:86:f7:cd:3c:
                    67:39:02:e7:44:a1:8e:26:02:86:d1:e5:27:94:44:
                    a7:c4:49:44:5c:d8:0a:06:f7:01:8c:b6:4b:6a:08:
                    2e:ae:4f:23:fd:bb:43:81:8e:2a:c0:9a:7c:2e:53:
                    9e:71:43:93:f0:ef:bb:68:2a:26:db:28:ef:7e:b6:
                    88:c4:a4:65:40:47:45:81:ff:cd:9e:ea:8f:94:19:
                    03:91:cf:6a:28:38:f2:56:a9:6b:40:23:59:41:18:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3A:79:23:0B:29:7A:37:E0:24:20:1D:15:08:41:48:03:A6:9F:D5
            X509v3 Authority Key Identifier:
                keyid:6E:58:2E:A4:17:52:0F:93:00:C6:E0:E1:5E:CC:AB:41:BF:BE:11:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blgupBdSD5MAxuDhXsyrQb--EbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/Pjp5IwspejfgJCAdFQhBSAOmn9U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1bd319-cb0d-4ea8-aee5-32c967f4d20b/1/blgupBdSD5MAxuDhXsyrQb--EbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.80.0/24
                  194.150.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:19:c7:6a:c0:8b:9e:61:24:e3:2d:dd:bc:b9:41:46:a6:d1:
         eb:85:6a:08:e2:58:5b:ce:6c:fb:a5:e7:da:85:04:d8:27:9c:
         f4:82:1f:7c:97:1a:46:69:c6:60:1b:7b:d1:e6:52:36:d0:a1:
         2d:8b:bb:2e:df:ad:bf:9e:d1:64:18:6c:97:50:c6:0c:68:ba:
         4a:bb:3b:47:7b:c1:d8:6b:93:68:42:5c:a2:cd:98:a4:a7:71:
         bb:77:cc:ac:59:0c:d0:b0:f1:f1:3c:25:f6:3f:ae:9b:57:ba:
         1a:38:e7:d9:27:3e:e0:56:0b:ca:d3:74:31:a0:d8:2a:9d:76:
         ab:bf:45:18:31:eb:a7:d7:18:3b:4c:42:68:e9:92:e6:f0:2a:
         74:10:32:6c:1a:97:67:03:e9:8a:69:be:02:a0:c8:14:3e:8d:
         28:c3:25:96:46:85:e5:a4:c1:89:6e:6c:37:ef:55:3e:5c:66:
         2f:42:5f:c3:69:a5:46:57:5d:64:d6:1c:89:2a:4e:02:d7:9e:
         45:06:55:87:bd:23:13:7e:58:92:15:f1:d3:22:30:3a:05:12:
         4c:3e:7b:70:c9:1f:60:0b:34:3d:dd:07:cc:62:fa:d1:67:83:
         e6:d8:a9:72:1b:05:21:de:99:1a:fc:0d:20:85:e7:2e:6b:e6:
         c0:6c:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:16 2025 by rpki-client