Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/nIAG9jXFCsUHWWH3Kn3718KqFY8.roa
File:                     nIAG9jXFCsUHWWH3Kn3718KqFY8.roa (raw, json)
Hash identifier:          sHS/CHVW10bzS9CBmVtzSnLuqqVVHL31UY0ylpxRhx8=
Subject key identifier:   9C:80:06:F6:35:C5:0A:C5:07:59:61:F7:2A:7D:FB:D7:C2:AA:15:8F
Certificate issuer:       /CN=93410b61a8025a526f23bc20024179d322db16ce
Certificate serial:       07EDD846
Authority key identifier: 93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/nIAG9jXFCsUHWWH3Kn3718KqFY8.roa
Signing time:             Thu 26 May 2022 17:42:13 +0000
ROA not before:           Thu 26 May 2022 17:42:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        62.192.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133027910 (0x7edd846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93410b61a8025a526f23bc20024179d322db16ce
        Validity
            Not Before: May 26 17:42:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c8006f635c50ac5075961f72a7dfbd7c2aa158f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:5e:48:ab:50:d3:ef:0b:df:63:1b:ff:40:
                    9e:15:b5:38:c5:40:28:ca:72:1c:b8:91:99:c7:c9:
                    24:4a:32:d4:86:8f:bc:86:c2:ba:02:45:34:e8:9d:
                    6b:f1:12:3f:07:c8:1a:20:14:26:18:39:14:60:b1:
                    ed:f7:0a:61:34:3a:fe:ad:58:f6:4d:39:31:9a:73:
                    b0:96:d4:8c:c8:dd:9c:4d:f3:fa:91:b6:d8:56:68:
                    bc:22:65:a0:0d:57:20:6e:f8:50:6d:c9:30:8e:30:
                    9c:74:55:69:67:a3:f6:ef:5c:ed:3d:94:64:2c:e1:
                    35:70:f7:f9:c5:aa:53:64:c9:4b:e6:1b:8e:30:4e:
                    e8:9e:93:67:a6:85:10:0a:69:8e:33:59:47:57:28:
                    74:78:5d:49:77:56:41:f8:89:eb:ad:ed:61:60:b0:
                    20:3c:3f:d7:94:d5:03:6f:02:56:a4:b7:77:9f:73:
                    9b:e9:6a:f0:aa:0e:03:cb:a7:46:fd:f4:44:c7:b6:
                    3d:42:92:ea:03:ce:78:45:f1:20:f5:85:c0:b0:b9:
                    14:57:44:22:fe:06:87:eb:58:95:d3:4a:eb:ba:02:
                    a2:dc:93:91:3f:04:0c:51:49:92:4d:dd:db:99:49:
                    9e:1e:6a:56:bb:6b:83:34:39:29:f3:14:39:20:92:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:80:06:F6:35:C5:0A:C5:07:59:61:F7:2A:7D:FB:D7:C2:AA:15:8F
            X509v3 Authority Key Identifier:
                keyid:93:41:0B:61:A8:02:5A:52:6F:23:BC:20:02:41:79:D3:22:DB:16:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0ELYagCWlJvI7wgAkF50yLbFs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/nIAG9jXFCsUHWWH3Kn3718KqFY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bf7481-4ebd-426d-b5a4-3fdaf69c6e35/1/k0ELYagCWlJvI7wgAkF50yLbFs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:83:95:11:31:78:3a:d9:0d:58:72:ae:a4:b5:6c:41:66:
         0d:7b:47:1b:c5:22:51:98:03:9e:97:83:25:9c:51:12:85:f2:
         f7:e0:6d:92:11:83:bd:41:42:f4:09:f3:fb:79:1c:08:df:08:
         65:d4:8c:f6:2c:e4:9a:28:7e:bf:b7:21:06:59:23:22:51:ff:
         08:ff:6e:aa:aa:15:3e:88:a4:c7:95:ce:a5:14:34:39:11:b1:
         e8:b8:fa:7c:6e:bf:3d:ff:07:ae:90:d4:b2:b8:28:87:9d:99:
         32:96:9e:33:90:ec:cf:e1:df:0d:de:c8:df:1f:d4:a8:3b:c5:
         19:b1:ef:b3:7c:20:7e:67:8b:fd:d6:b5:6f:1f:ef:18:81:ee:
         28:28:1c:86:57:2e:08:c2:46:52:13:0d:74:49:25:49:a9:aa:
         fb:3e:63:e2:b3:f8:e1:c8:ad:57:2d:c1:69:94:74:33:db:f6:
         82:b7:6f:c9:c1:5d:4c:c5:83:a7:6c:6c:a2:1f:d0:b4:c1:49:
         90:18:15:04:02:43:b1:e5:d4:d5:09:a3:90:a5:a7:3a:f8:db:
         0b:e8:90:76:2d:7c:ac:3d:35:c7:aa:4c:6c:46:56:e7:03:ef:
         58:c4:bd:ec:a2:12:ba:4b:29:4c:88:ff:54:eb:da:b5:c0:04:
         dd:96:a5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:36:51 2025 by rpki-client