Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5da15e-e8dc-4b00-99c8-17edb5738feb/1/U2AGoF4Z-35LGFuypRsZZ1kJRWA.roa
File:                     U2AGoF4Z-35LGFuypRsZZ1kJRWA.roa (raw, json)
Hash identifier:          +3YBt6rk7EISsE2FsHv3hB7XmPtmJqufrwDY0wqNSGo=
Subject key identifier:   53:60:06:A0:5E:19:FB:7E:4B:18:5B:B2:A5:1B:19:67:59:09:45:60
Certificate issuer:       /CN=27c54173c8f5a3a076b61c7715af61b8f1e8a568
Certificate serial:       097582CD
Authority key identifier: 27:C5:41:73:C8:F5:A3:A0:76:B6:1C:77:15:AF:61:B8:F1:E8:A5:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8VBc8j1o6B2thx3Fa9huPHopWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5da15e-e8dc-4b00-99c8-17edb5738feb/1/U2AGoF4Z-35LGFuypRsZZ1kJRWA.roa
Signing time:             Sat 01 Jan 2022 03:53:16 +0000
ROA not before:           Sat 01 Jan 2022 03:53:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47110
IP address blocks:        92.62.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158696141 (0x97582cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c54173c8f5a3a076b61c7715af61b8f1e8a568
        Validity
            Not Before: Jan  1 03:53:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=536006a05e19fb7e4b185bb2a51b196759094560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:13:b6:e6:30:b7:bb:2d:d5:09:e1:69:17:
                    72:6e:f5:8d:0a:ec:fb:e5:3b:b1:c1:93:76:05:d4:
                    6a:52:58:48:5a:79:1d:a4:a4:40:af:ef:b4:ec:4b:
                    dd:90:b3:e9:f2:d4:cc:e8:ff:e2:c1:66:b8:c7:15:
                    46:5e:66:d2:dc:a9:7d:d0:98:c2:3f:f1:ae:49:de:
                    ca:77:2a:77:70:3a:9f:d3:13:aa:14:e2:b9:1c:df:
                    bb:8f:9d:a5:01:a9:08:d9:2a:92:cc:92:7c:3e:20:
                    70:38:7a:73:5c:4d:d4:f8:b8:c2:d3:9c:4c:55:c6:
                    ac:df:3c:85:b0:14:a4:45:e4:11:86:c5:e0:6d:99:
                    a0:84:7a:4f:97:19:ec:8e:e0:87:10:97:23:ef:64:
                    ea:89:b0:fb:d8:19:bf:a9:4f:95:69:c0:79:c4:ac:
                    64:96:75:82:d0:24:dc:a6:e0:f7:4f:34:2e:d5:f7:
                    1e:4f:1b:d3:1b:ba:d6:f7:a3:81:d6:05:ff:af:5b:
                    01:63:4a:18:a7:7e:4e:58:1d:75:5e:d6:3b:36:29:
                    94:ff:af:57:37:8b:10:9e:22:d5:20:43:a1:9f:5b:
                    3c:26:99:12:98:fd:a4:22:f1:d5:25:3d:39:8a:f5:
                    10:3d:ac:56:6e:7b:cc:38:94:48:b0:47:31:de:44:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:60:06:A0:5E:19:FB:7E:4B:18:5B:B2:A5:1B:19:67:59:09:45:60
            X509v3 Authority Key Identifier:
                keyid:27:C5:41:73:C8:F5:A3:A0:76:B6:1C:77:15:AF:61:B8:F1:E8:A5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8VBc8j1o6B2thx3Fa9huPHopWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5da15e-e8dc-4b00-99c8-17edb5738feb/1/U2AGoF4Z-35LGFuypRsZZ1kJRWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5da15e-e8dc-4b00-99c8-17edb5738feb/1/J8VBc8j1o6B2thx3Fa9huPHopWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.62.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:c5:3a:58:48:ac:9c:65:0d:8f:ac:54:9e:76:ad:c0:3a:b2:
         7d:32:55:54:c8:f3:dd:c1:af:0d:ee:d4:cd:92:a2:a8:27:ca:
         3a:4c:bc:a3:fa:fa:9e:b3:03:89:01:4f:8e:b2:c6:ed:8d:c8:
         61:d4:ff:c0:3b:80:59:01:52:27:90:c2:97:9d:23:55:29:57:
         cf:a4:71:61:24:a0:5c:76:71:8b:10:c7:67:4e:96:5f:0a:83:
         28:3f:bb:8e:a1:3f:82:3d:5a:7c:4e:5c:cf:c6:c4:56:0a:e7:
         f9:64:cb:24:c1:9c:a1:c8:80:90:fe:a4:73:d6:f4:ee:b9:aa:
         6c:f2:b4:6f:62:77:d1:8f:93:68:40:b1:d1:2d:f8:d4:d6:15:
         42:72:56:04:54:3f:d5:15:8b:fa:f2:69:ff:33:bf:c0:95:9a:
         34:4e:c9:cd:21:3b:d6:a6:dd:45:ae:5c:ab:dc:7c:58:43:1e:
         79:55:7c:0b:33:2e:86:d2:c7:20:51:5c:99:4e:1c:10:1b:70:
         7e:0c:b2:8a:5f:a8:68:e6:3e:bd:67:84:d7:c2:6c:1e:82:af:
         fb:19:26:17:5e:5e:84:3c:2e:0b:30:ac:15:3a:72:8c:a4:ea:
         9f:ae:d7:2f:5d:b3:f9:12:a4:fb:05:7a:f1:57:c7:2a:09:79:
         e1:53:d1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:23 2025 by rpki-client