Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/TyCQNkUvOHgfBA0UHeQbFXyfuhE.roa
File:                     TyCQNkUvOHgfBA0UHeQbFXyfuhE.roa (raw, json)
Hash identifier:          /P4+XXVvBC5dGoin/Tyd124ZEXXHKiytdMrXY1+r948=
Subject key identifier:   4F:20:90:36:45:2F:38:78:1F:04:0D:14:1D:E4:1B:15:7C:9F:BA:11
Certificate issuer:       /CN=93410b61a8025a526f23bc20024179d322db16ce
Certificate serial:       0696947F
Authority key identifier: 93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/TyCQNkUvOHgfBA0UHeQbFXyfuhE.roa
Signing time:             Sat 01 Jan 2022 09:55:35 +0000
ROA not before:           Sat 01 Jan 2022 09:55:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13768
IP address blocks:        62.192.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110531711 (0x696947f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93410b61a8025a526f23bc20024179d322db16ce
        Validity
            Not Before: Jan  1 09:55:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f209036452f38781f040d141de41b157c9fba11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:73:20:b5:32:05:2e:6d:58:35:9c:8e:8c:
                    ca:3a:0c:72:b2:81:b4:45:e9:27:54:df:99:aa:9d:
                    36:f3:aa:91:d0:2b:25:e4:b7:5d:2b:1d:19:0d:9b:
                    aa:26:9f:30:2d:76:dd:f4:03:05:13:85:b3:e4:c4:
                    87:2a:ee:eb:49:20:4a:1c:f3:22:a1:b5:4c:91:88:
                    2a:12:22:1b:ca:01:4a:49:66:32:f0:d0:8b:ca:7a:
                    c1:33:95:80:70:de:c6:31:a1:95:79:28:52:2f:f9:
                    a8:b4:60:78:1f:38:17:b2:d9:3a:a0:6a:e8:31:c3:
                    37:c3:b8:ad:f3:0d:28:df:f8:75:6c:a9:8d:63:6d:
                    fc:ff:42:a1:69:4a:c4:4e:44:a7:79:58:8a:2b:d8:
                    e2:82:5c:3c:04:72:ef:40:d7:70:ea:16:b2:1c:f7:
                    e2:92:46:15:c5:b5:09:47:ff:1b:04:36:74:44:a2:
                    41:3f:65:6c:df:1a:05:37:67:fb:ba:48:91:17:ee:
                    07:aa:8b:50:68:98:b2:a0:01:76:4d:43:62:51:67:
                    e7:78:b2:b8:6d:b1:a8:d4:58:33:6c:77:26:3a:9d:
                    4b:f6:4c:03:1d:1e:ef:c6:d4:27:07:a8:ca:cb:27:
                    bc:61:96:25:0b:26:3b:5d:44:90:c5:1b:bd:f2:bd:
                    31:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:90:36:45:2F:38:78:1F:04:0D:14:1D:E4:1B:15:7C:9F:BA:11
            X509v3 Authority Key Identifier:
                keyid:93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/TyCQNkUvOHgfBA0UHeQbFXyfuhE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/k0ELYagCWlJvI7wgAkF50yLbFs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e7:40:ce:6d:1b:4d:29:ba:8d:f0:de:cb:eb:56:45:be:2c:
         02:c5:ce:6e:df:c3:65:cb:ae:c8:c8:ac:f6:df:2a:a4:00:d7:
         2b:fb:64:13:68:46:32:8a:11:8c:c1:85:6f:9d:bd:82:44:2d:
         63:ef:41:23:51:13:4c:1f:6a:0a:f3:b2:7a:05:a2:27:a1:4a:
         92:ff:89:40:34:f5:42:59:2c:89:ba:d9:6b:47:7f:66:91:3e:
         06:9b:6e:d7:5c:69:84:25:c0:d1:62:0f:98:83:10:6b:8f:fd:
         56:4f:b6:ee:0a:84:60:3f:3f:50:b0:da:fa:7c:ca:54:a7:ce:
         b3:9d:39:62:2a:19:b9:69:44:76:cf:64:7f:48:46:b2:08:fa:
         3a:14:03:09:78:67:be:86:00:9a:7e:4a:24:17:25:91:f3:26:
         43:9e:75:ed:ae:ea:a7:52:51:6c:a3:39:27:49:29:27:7c:03:
         56:65:fb:9f:1b:cb:96:f4:df:28:f4:39:1b:aa:ce:65:c3:15:
         99:25:5b:e3:99:d2:ae:14:d4:3b:a6:94:0a:59:71:10:56:42:
         0c:01:a3:ab:33:05:65:72:26:56:04:85:9a:8f:f4:52:1d:6b:
         9a:a8:1a:5d:ce:44:6d:5b:cd:53:0d:a3:6f:bc:77:98:a7:db:
         46:5d:59:1b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBpaUfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzQxMGI2MWE4MDI1YTUyNmYyM2JjMjAwMjQxNzlkMzIyZGIxNmNlMB4XDTIyMDEw
MTA5NTUzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGYyMDkwMzY0NTJm
Mzg3ODFmMDQwZDE0MWRlNDFiMTU3YzlmYmExMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMh3cyC1MgUubVg1nI6MyjoMcrKBtEXpJ1TfmaqdNvOqkdAr
JeS3XSsdGQ2bqiafMC123fQDBROFs+TEhyru60kgShzzIqG1TJGIKhIiG8oBSklm
MvDQi8p6wTOVgHDexjGhlXkoUi/5qLRgeB84F7LZOqBq6DHDN8O4rfMNKN/4dWyp
jWNt/P9CoWlKxE5Ep3lYiivY4oJcPARy70DXcOoWshz34pJGFcW1CUf/GwQ2dESi
QT9lbN8aBTdn+7pIkRfuB6qLUGiYsqABdk1DYlFn53iyuG2xqNRYM2x3JjqdS/ZM
Ax0e78bUJweoyssnvGGWJQsmO11EkMUbvfK9MQ8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRPIJA2RS84eB8EDRQd5BsVfJ+6ETAfBgNVHSMEGDAWgBSTQQthqAJaUm8j
vCACQXnTItsWzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2swRUxZYWdDV2xKdkk3d2dBa0Y1MHlMYkZzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvYmY3NDgxLTRlYmQtNDI2ZC1iNWE0LTNmZGFmNjljNmUzNS8x
L1R5Q1FOa1V2T0hnZkJBMFVIZVFiRlh5ZnVoRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
YmY3NDgxLTRlYmQtNDI2ZC1iNWE0LTNmZGFmNjljNmUzNS8xL2swRUxZYWdDV2xK
dkk3d2dBa0Y1MHlMYkZzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7AqTANBgkqhkiG9w0BAQsFAAOC
AQEAh+dAzm0bTSm6jfDey+tWRb4sAsXObt/DZcuuyMis9t8qpADXK/tkE2hGMooR
jMGFb529gkQtY+9BI1ETTB9qCvOyegWiJ6FKkv+JQDT1QlksibrZa0d/ZpE+Bptu
11xphCXA0WIPmIMQa4/9Vk+27gqEYD8/ULDa+nzKVKfOs505YioZuWlEds9kf0hG
sgj6OhQDCXhnvoYAmn5KJBclkfMmQ5517a7qp1JRbKM5J0kpJ3wDVmX7nxvLlvTf
KPQ5G6rOZcMVmSVb45nSrhTUO6aUCllxEFZCDAGjqzMFZXImVgSFmo/0Uh1rmqga
Xc5EbVvNUw2jb7x3mKfbRl1ZGw==
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:49 2025 by rpki-client