Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WEm2_edaOtgRe3pqkWZK36r2Azk.roa
File:                     WEm2_edaOtgRe3pqkWZK36r2Azk.roa (raw, json)
Hash identifier:          wYrHEH2g83QfnnkEH3hAW1NdEq0mOQhkkswNhP4lUfk=
Subject key identifier:   58:49:B6:FD:E7:5A:3A:D8:11:7B:7A:6A:91:66:4A:DF:AA:F6:03:39
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       019368AEEC32FEF8C55A617E9367AF509843
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WEm2_edaOtgRe3pqkWZK36r2Azk.roa
Signing time:             Tue 26 Nov 2024 13:35:14 +0000
ROA not before:           Tue 26 Nov 2024 13:35:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     396541
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32
                          185.100.0.53/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:ae:ec:32:fe:f8:c5:5a:61:7e:93:67:af:50:98:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Nov 26 13:35:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5849b6fde75a3ad8117b7a6a91664adfaaf60339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:93:8d:b0:40:17:75:96:7c:ba:7b:96:75:
                    ef:d1:85:ed:a5:d5:f2:a5:a2:54:31:28:70:e6:44:
                    f9:6a:a6:86:2b:cc:1d:38:e2:85:89:84:a0:19:40:
                    b4:41:48:c2:c0:db:05:58:c0:96:5f:50:f8:83:30:
                    4e:7f:ef:1b:c0:4c:e9:7f:08:81:69:f6:89:0c:26:
                    38:96:b9:2b:4a:7c:83:9d:64:6b:56:73:11:24:9f:
                    b0:c8:0f:f4:29:df:d0:48:b7:fa:2c:d0:71:d1:e4:
                    47:b0:83:5e:20:4f:9a:c2:b1:41:d5:df:f5:90:93:
                    90:1e:89:d4:14:40:7c:0e:a1:72:aa:45:11:12:e5:
                    d9:2a:a4:15:0f:d3:f4:cd:ad:1d:32:4b:2c:3b:e2:
                    f2:f3:6f:e9:e3:d8:f9:2b:c9:af:f4:45:a6:5f:fd:
                    1a:0a:b5:2c:88:ff:de:51:36:c4:db:d7:cb:3c:74:
                    de:83:6a:4f:70:0f:2b:f4:dd:83:18:93:8c:5e:0d:
                    a7:05:5d:ce:91:16:ce:b8:04:03:13:61:dc:45:4c:
                    6c:dd:5b:6b:c7:ba:1c:03:25:fa:0e:61:21:d0:3c:
                    00:5a:e1:60:b0:94:59:a7:ad:50:af:99:42:1c:3e:
                    2f:f3:0a:6c:2e:e3:c1:9d:c0:bb:8d:19:c7:09:52:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:49:B6:FD:E7:5A:3A:D8:11:7B:7A:6A:91:66:4A:DF:AA:F6:03:39
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WEm2_edaOtgRe3pqkWZK36r2Azk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31
                  185.100.0.53/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:37:7d:91:d9:e3:01:5c:7c:1b:59:5f:48:ef:57:fd:ab:11:
         3a:1a:30:4a:d3:1c:d6:8c:35:08:69:0c:db:f2:59:45:b6:ca:
         be:2c:01:90:95:62:87:24:41:ca:14:de:17:e5:f8:3a:67:1b:
         70:3a:a6:51:39:e1:dd:a2:2f:f9:ff:2b:24:1c:ed:95:00:43:
         36:42:fc:8c:ad:11:62:7a:af:33:a8:b4:56:9d:48:76:19:4c:
         af:46:98:34:86:7d:eb:23:6d:67:d8:d5:0c:74:92:e8:0e:c8:
         ab:5f:7f:f9:ea:0e:9b:21:41:18:79:eb:3a:58:36:4f:f7:1d:
         8a:e2:45:7f:2a:f3:b1:0d:a0:d4:f8:47:5c:ef:60:78:d6:7e:
         cc:e1:83:db:10:5e:55:e2:49:b0:e1:01:62:88:05:6b:df:bb:
         7a:1e:bf:8b:c8:e0:87:2d:c7:09:1f:cc:00:d9:f4:bc:a1:c6:
         94:f5:1f:62:a0:4b:49:77:96:1c:23:3a:9b:ab:7c:d2:9e:94:
         d1:35:a9:fd:e6:89:95:82:e2:30:2d:17:ac:ed:0e:c0:e8:a3:
         c4:c1:61:99:25:c0:b5:78:26:e1:1d:e2:d6:d0:30:b1:74:fb:
         91:25:43:39:8a:39:45:e0:2d:6c:73:06:e2:50:c8:31:43:14:
         b3:d6:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:56 2025 by rpki-client