Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/j-21SehTxrDMGy7Qebqfg1EY4Hc.roa
File:                     j-21SehTxrDMGy7Qebqfg1EY4Hc.roa (raw, json)
Hash identifier:          jwWJn2AneJ3YM5YmN1JSREa5bbe7dvjIf6k7iVaqXZo=
Subject key identifier:   8F:ED:B5:49:E8:53:C6:B0:CC:1B:2E:D0:79:BA:9F:83:51:18:E0:77
Certificate issuer:       /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial:       08C122BA
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/j-21SehTxrDMGy7Qebqfg1EY4Hc.roa
Signing time:             Sat 01 Jan 2022 14:55:48 +0000
ROA not before:           Sat 01 Jan 2022 14:55:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12576
IP address blocks:        82.192.96.0/23 maxlen: 23
                          82.192.104.0/24 maxlen: 24
                          82.192.103.0/24 maxlen: 24
                          82.192.102.0/24 maxlen: 24
                          82.192.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146875066 (0x8c122ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
        Validity
            Not Before: Jan  1 14:55:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fedb549e853c6b0cc1b2ed079ba9f835118e077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:af:46:95:df:57:b8:61:51:e8:e8:e8:9d:
                    0b:59:66:12:30:6c:54:d9:4e:13:22:c6:39:ce:6e:
                    84:9d:c8:49:9b:86:37:8b:3e:86:c5:5a:10:54:71:
                    19:1a:c3:3e:c1:60:87:17:39:fb:10:3a:80:12:cf:
                    47:4b:28:42:aa:09:3f:b1:36:14:47:54:ba:a7:23:
                    e2:73:be:14:19:46:2e:ec:1a:00:2f:35:20:97:62:
                    d9:08:85:69:5c:a7:0d:a9:20:46:51:92:97:a5:44:
                    b8:83:7d:11:e5:8d:10:cd:23:94:21:e2:9e:2b:3e:
                    04:69:1d:e7:9b:cb:d8:c2:26:b5:71:ca:58:bd:7a:
                    04:2f:b4:5a:19:61:b0:39:53:e4:f0:ea:52:70:33:
                    b4:0a:1a:6c:9c:60:c8:40:a0:28:63:a8:52:4b:18:
                    f5:2f:eb:de:e2:3a:76:11:55:23:df:08:33:58:02:
                    0f:13:c3:90:d0:7d:27:48:2d:84:4b:60:7e:e6:d0:
                    e1:75:7e:50:37:f6:6f:73:1e:b4:8d:61:ab:43:df:
                    49:94:4b:6e:f7:01:61:b1:45:5c:1c:e4:4c:3d:e8:
                    74:76:c8:21:6d:be:dd:ef:7a:64:ae:ec:8f:50:fa:
                    24:0b:b2:bb:11:f0:72:e9:2d:34:6e:0c:87:38:86:
                    b7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:ED:B5:49:E8:53:C6:B0:CC:1B:2E:D0:79:BA:9F:83:51:18:E0:77
            X509v3 Authority Key Identifier:
                keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/j-21SehTxrDMGy7Qebqfg1EY4Hc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.192.96.0/23
                  82.192.100.0-82.192.104.255

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:c4:a0:df:af:a6:c8:e6:fa:1b:2d:e4:12:75:3f:41:17:
         32:28:b4:46:93:5b:63:7c:78:d2:f8:73:62:71:cb:14:f4:55:
         48:2a:c0:91:d0:ed:1c:79:11:a2:ab:8c:c8:01:70:89:44:1f:
         3b:73:76:f3:df:0b:95:7c:1c:b4:5f:07:ad:75:37:41:81:82:
         78:45:bd:ac:91:58:f5:73:e5:f4:36:c3:e8:77:ba:d3:a4:be:
         0d:59:9c:30:3c:2f:4f:b8:5f:1e:c0:ac:78:89:e2:b1:f6:aa:
         ec:da:c9:22:24:b6:e7:ec:34:05:bf:15:7d:60:4c:30:a3:75:
         76:34:fe:97:a1:a2:22:0f:2a:ec:02:eb:d6:c2:ed:59:a3:a9:
         46:d6:27:14:9a:b0:8a:89:35:f8:f2:69:c1:e9:8d:ee:f3:57:
         89:18:80:ae:7c:2f:95:fa:0c:26:02:74:96:51:02:ae:d8:7c:
         c6:a9:c9:38:96:3f:8a:fd:ff:7c:f4:61:3d:e7:44:23:53:c6:
         d0:ec:59:a9:17:07:e1:bf:08:25:db:a3:1a:7a:b2:be:05:1a:
         36:2a:9b:81:f4:8a:12:59:1e:60:14:64:a3:e8:60:92:16:bc:
         c4:ac:d2:bf:57:cd:fb:be:f9:9d:5a:62:c4:1e:d2:17:40:98:
         bb:56:12:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:36 2025 by rpki-client