Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7E-axSnMP7wC_J9-cJrkeOQPU7U.roa
File:                     7E-axSnMP7wC_J9-cJrkeOQPU7U.roa (raw, json)
Hash identifier:          vD08iXoiQiP0DTbmZI1mK/oWM1RGk81B5T8y0T0eVNE=
Subject key identifier:   EC:4F:9A:C5:29:CC:3F:BC:02:FC:9F:7E:70:9A:E4:78:E4:0F:53:B5
Certificate issuer:       /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial:       0188C85093ABD9A53190AE267EAA93869880
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7E-axSnMP7wC_J9-cJrkeOQPU7U.roa
Signing time:             Sat 17 Jun 2023 07:45:03 +0000
ROA not before:           Sat 17 Jun 2023 07:45:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        193.109.198.0/24 maxlen: 24
                          85.237.206.0/24 maxlen: 24
                          85.237.206.0/23 maxlen: 23
                          85.237.202.0/24 maxlen: 24
                          85.237.217.0/24 maxlen: 24
                          85.237.220.0/23 maxlen: 23
                          85.237.220.0/24 maxlen: 24
                          85.237.221.0/24 maxlen: 24
                          185.93.33.0/24 maxlen: 24
                          185.139.26.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c8:50:93:ab:d9:a5:31:90:ae:26:7e:aa:93:86:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
        Validity
            Not Before: Jun 17 07:45:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec4f9ac529cc3fbc02fc9f7e709ae478e40f53b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:e1:1d:5b:93:ac:83:ac:ad:f3:f3:0a:24:
                    ae:9e:f2:7b:c7:36:ec:66:94:e2:aa:41:80:89:54:
                    ad:b0:5f:16:92:8b:f1:a7:9e:4f:e8:2a:a6:8c:9c:
                    6a:fc:0e:e7:49:2a:7c:d8:b2:d4:b0:e3:de:cf:d3:
                    79:85:4d:0c:a6:f5:69:2d:4c:e2:04:0f:97:3f:84:
                    56:68:81:af:96:79:ef:1a:b9:56:b4:fd:26:8c:c2:
                    0a:3a:a7:5b:cc:04:0e:66:8d:92:34:61:2b:17:46:
                    e9:09:9d:8b:80:fe:06:95:e6:29:6c:47:e5:6d:dd:
                    e3:ae:cc:c0:74:60:36:09:6d:67:d4:d6:e7:c0:e5:
                    65:0e:e1:36:43:13:2c:1d:c9:62:12:6f:dc:5c:68:
                    08:70:f4:6a:21:4c:da:13:dd:9c:e6:2a:56:3b:ea:
                    d7:24:2b:9b:4f:ba:2b:69:ef:66:dc:66:40:70:cb:
                    a6:78:0c:f8:33:66:eb:84:23:60:d3:72:b9:ce:a2:
                    8b:a7:67:0c:04:fb:98:86:6e:b7:0a:dc:4b:77:57:
                    62:42:d1:93:1f:45:96:05:e0:33:9f:90:7d:1e:a9:
                    97:4c:f2:ee:86:e0:b2:b7:87:1f:2c:dd:ca:c8:25:
                    25:c4:65:92:97:71:41:ce:8c:df:0e:fc:90:67:32:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:9A:C5:29:CC:3F:BC:02:FC:9F:7E:70:9A:E4:78:E4:0F:53:B5
            X509v3 Authority Key Identifier:
                keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7E-axSnMP7wC_J9-cJrkeOQPU7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.202.0/24
                  85.237.206.0/23
                  85.237.217.0/24
                  85.237.220.0/23
                  185.93.33.0/24
                  185.139.26.0/24
                  193.109.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:37:57:54:ef:ee:3e:c3:db:fc:65:ba:8d:16:63:c4:46:
         96:3c:7c:d5:74:bf:73:bd:16:28:ef:b2:7a:94:ea:f4:0b:de:
         7d:f0:2e:51:1a:b1:64:4c:93:4c:b3:b2:d7:a1:0f:f1:27:b6:
         33:de:d4:b3:f5:02:2a:a8:9b:60:b2:0e:1a:5f:19:ed:ab:5e:
         0e:09:5a:92:c0:aa:de:0d:7f:5e:b9:ce:b7:ec:97:e4:24:bd:
         ec:af:57:a8:bd:6f:02:98:d2:1a:f1:2f:29:00:67:3d:d8:ae:
         ea:de:b6:8e:73:2c:5e:09:49:a8:fd:02:73:c9:a0:5c:3f:67:
         59:bb:11:7f:6e:34:54:a3:f1:3e:90:25:e0:c3:94:f9:3a:3c:
         98:6b:a9:9c:16:8d:7d:c3:23:ec:23:65:6a:85:15:a5:47:95:
         ff:1a:5f:df:2a:ad:07:5a:e3:6e:0e:e4:20:74:89:c9:42:1b:
         2c:7c:e2:ba:e6:37:b4:17:c4:df:65:7a:e1:ce:15:b8:97:04:
         2f:ed:eb:65:bf:a6:fd:a6:89:64:19:9c:d3:72:27:2d:57:15:
         e4:38:03:a9:0c:bd:32:78:2d:bd:7e:be:d4:b8:9e:e6:f7:0f:
         0c:f2:c9:52:d5:a4:be:42:e3:fe:1b:15:a9:59:09:10:3b:6a:
         2a:52:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:43:21 2025 by rpki-client