Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/5Fjs9s1trmv_rmasIHJT-jm3UTY.roa
File:                     5Fjs9s1trmv_rmasIHJT-jm3UTY.roa (raw, json)
Hash identifier:          LSdbp64+Cq9WuPw/hPaUvIAYVIKYQr2EiC/8sjpVrVo=
Subject key identifier:   E4:58:EC:F6:CD:6D:AE:6B:FF:AE:66:AC:20:72:53:FA:39:B7:51:36
Certificate issuer:       /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial:       018A1C5CAA5F24F567FDCA89AF4A75537259
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/5Fjs9s1trmv_rmasIHJT-jm3UTY.roa
Signing time:             Tue 22 Aug 2023 08:29:09 +0000
ROA not before:           Tue 22 Aug 2023 08:29:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        193.135.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1c:5c:aa:5f:24:f5:67:fd:ca:89:af:4a:75:53:72:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Aug 22 08:29:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e458ecf6cd6dae6bffae66ac207253fa39b75136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:34:f2:08:58:56:d4:f2:bb:57:ad:36:c2:
                    d3:9b:78:30:30:b1:2b:99:45:c1:0e:fe:e6:ae:1b:
                    90:e4:aa:d5:19:09:ff:24:9c:da:62:5e:3e:45:58:
                    51:8b:50:71:b7:69:4d:ae:fe:9d:63:dc:e6:1c:7e:
                    d5:5e:79:dc:96:f1:5c:f8:11:42:cd:fe:1e:38:b9:
                    0e:30:2a:ca:69:d0:b0:ac:fa:92:cb:d3:0c:f5:55:
                    ee:38:ab:9b:59:7e:fb:76:57:ad:3a:14:1a:5c:e9:
                    cc:e2:41:cd:95:f1:c1:a7:12:84:71:ac:e1:4c:44:
                    3c:33:9a:4f:01:08:84:2f:49:fd:30:37:f3:8b:f7:
                    6c:11:b0:87:04:39:db:05:0a:38:2a:1f:da:30:7f:
                    ae:6a:b0:ca:41:fc:d4:df:71:5f:53:89:93:ad:c5:
                    74:56:bc:8e:ba:43:4b:4e:85:39:64:4a:96:96:8a:
                    12:85:1a:3f:a0:f7:83:ff:6d:8a:c5:a6:ec:a2:49:
                    a0:7f:73:bd:64:9d:ee:6c:23:9f:f2:d5:4d:fe:65:
                    98:a3:19:5d:65:f7:22:5f:7e:b7:f2:01:88:8f:20:
                    86:0e:2c:8a:d1:34:c8:65:88:b9:f5:cf:52:d2:42:
                    e3:67:67:7e:13:a0:eb:02:78:3f:c5:a5:e0:89:47:
                    21:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:58:EC:F6:CD:6D:AE:6B:FF:AE:66:AC:20:72:53:FA:39:B7:51:36
            X509v3 Authority Key Identifier:
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/5Fjs9s1trmv_rmasIHJT-jm3UTY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:03:0a:c0:8d:c5:01:2b:05:f7:d9:3f:d4:a3:06:45:53:f7:
         ed:63:a9:d6:6c:a5:4d:28:a7:6a:16:d2:25:a4:82:bd:1d:2b:
         e8:1e:79:e1:5f:92:de:1f:e2:57:66:1f:22:6b:2d:bd:7f:db:
         5d:f1:74:30:24:1d:f9:bf:3a:1f:93:e3:fd:8c:52:e3:37:5a:
         4d:13:1b:23:f9:79:1c:7a:22:3b:e9:6f:a7:26:20:38:94:a3:
         1e:f5:7d:a8:38:3f:6e:c9:5e:96:8f:38:af:54:e0:2b:13:cf:
         61:cd:fb:7a:46:70:43:43:1b:52:90:64:1c:d1:ab:ea:4f:1e:
         57:dd:d8:4f:c2:f6:03:97:6e:8a:62:8e:fd:f0:11:0f:18:a9:
         64:0c:82:7d:0a:60:9d:eb:23:86:89:76:eb:48:64:51:b0:a8:
         9e:b5:4c:d4:60:97:23:63:90:7d:8a:76:fe:67:83:d3:b9:b7:
         89:e4:e1:bd:77:d0:33:8c:5d:c7:fb:0a:cc:cf:1e:4d:6b:80:
         f1:ca:4a:d6:df:09:8b:0a:26:4d:7b:c2:e0:71:c8:73:f4:ca:
         93:cf:b4:d4:75:90:9a:3a:f5:56:c7:37:bb:99:a7:36:d5:70:
         d1:79:43:33:9b:fd:96:95:56:29:b5:fc:53:c2:10:05:02:ab:
         9e:be:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:24 2025 by rpki-client