Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/EMwGC_rykH5kBBgXgl4wN1pai4E.roa
File:                     EMwGC_rykH5kBBgXgl4wN1pai4E.roa (raw, json)
Hash identifier:          ELlzILusM8WCE9zh2IbiUQhPcnuKBhVnxm5AMmdLpEY=
Subject key identifier:   10:CC:06:0B:FA:F2:90:7E:64:04:18:17:82:5E:30:37:5A:5A:8B:81
Certificate issuer:       /CN=50b49fa114a0ec3553c72132dbc56a2ebbef79df
Certificate serial:       0472B3
Authority key identifier: 50:B4:9F:A1:14:A0:EC:35:53:C7:21:32:DB:C5:6A:2E:BB:EF:79:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULSfoRSg7DVTxyEy28VqLrvved8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/EMwGC_rykH5kBBgXgl4wN1pai4E.roa
Signing time:             Wed 26 Jan 2022 11:44:14 +0000
ROA not before:           Wed 26 Jan 2022 11:44:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     10753
IP address blocks:        89.106.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291507 (0x472b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b49fa114a0ec3553c72132dbc56a2ebbef79df
        Validity
            Not Before: Jan 26 11:44:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10cc060bfaf2907e64041817825e30375a5a8b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:0f:56:25:c0:09:09:a9:1a:19:13:c6:44:
                    d5:70:56:08:bb:0d:87:b1:4b:c0:1a:1b:f5:b4:9a:
                    d3:e4:68:c5:4c:7a:dd:0a:36:d0:1b:3c:cb:7d:f3:
                    5b:ae:88:65:33:13:ab:bd:e3:48:68:05:79:d1:c7:
                    2f:a8:66:f9:cb:7e:72:e8:b1:1f:36:13:5f:fe:27:
                    bc:5e:40:b4:cd:1d:1f:2b:4f:47:22:b8:fd:e2:86:
                    03:b9:f9:c8:74:71:d5:45:7a:ed:b9:89:1b:34:bd:
                    5c:9e:23:75:b0:3c:45:4a:1e:27:e6:7a:74:1e:1f:
                    ca:9f:22:5c:95:3e:e4:02:d1:36:a6:0d:14:04:d2:
                    1f:a3:93:41:65:03:48:62:f0:bd:e6:22:1a:01:10:
                    c1:3b:bd:2e:6e:d0:75:8c:98:ec:6f:78:e1:4e:55:
                    44:22:24:bd:32:82:d3:16:69:d0:dc:0a:dc:d9:6b:
                    c1:09:d5:52:4a:f5:10:1a:13:bf:44:6c:7f:91:2c:
                    c8:18:d7:a6:e5:8f:99:5b:a5:97:e7:74:0d:12:71:
                    99:ee:9e:8f:0a:b4:1f:93:24:c6:e6:f5:df:b1:29:
                    02:da:48:52:0e:40:b5:bb:34:cd:ec:a7:01:b3:98:
                    2f:f3:a6:35:f2:09:66:58:12:0a:9d:74:f0:aa:2b:
                    3a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CC:06:0B:FA:F2:90:7E:64:04:18:17:82:5E:30:37:5A:5A:8B:81
            X509v3 Authority Key Identifier:
                keyid:50:B4:9F:A1:14:A0:EC:35:53:C7:21:32:DB:C5:6A:2E:BB:EF:79:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULSfoRSg7DVTxyEy28VqLrvved8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/EMwGC_rykH5kBBgXgl4wN1pai4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5965a-0a27-4587-8ac6-5cc28426c588/1/ULSfoRSg7DVTxyEy28VqLrvved8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:27:66:8e:67:e8:3f:6b:c0:70:aa:2f:2d:ae:80:a0:f9:99:
         24:07:75:a2:c7:b3:10:33:86:5f:01:b9:97:dc:dc:c5:35:76:
         a1:4b:7e:e0:f2:1d:81:a2:d6:52:1f:4d:1a:39:b1:62:e6:01:
         4b:f0:c1:79:07:8c:57:6f:9a:b8:e3:38:44:33:69:95:34:6c:
         68:84:3a:d4:0f:c3:3f:4f:15:81:a0:e8:e9:b0:30:d4:eb:0d:
         84:04:2a:46:53:4f:8f:a0:60:96:be:ca:03:c4:96:88:fb:36:
         4e:f4:fa:6a:15:14:2c:4a:67:50:87:ca:18:ad:38:06:76:2b:
         a7:da:96:54:8b:d9:8f:ee:8b:01:dc:e4:83:1c:72:d1:89:cc:
         37:2c:46:b6:1f:53:e9:3a:84:64:33:90:54:05:ab:f0:3a:41:
         ef:4e:01:33:9a:80:81:82:74:ad:55:60:19:75:e8:e9:d3:dc:
         e5:a4:3d:12:65:42:0a:12:c7:14:1a:50:09:f3:a9:4d:da:b2:
         f8:89:7f:c4:3f:79:89:8a:73:8c:02:75:45:b5:89:da:60:b0:
         b2:dd:92:c1:d7:04:19:b5:f5:0a:d4:37:12:c1:a8:a9:69:bd:
         05:72:d6:e4:24:89:a5:92:60:95:55:dd:fd:6a:23:7e:46:9a:
         d0:60:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:32 2025 by rpki-client