Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MxuMIF1UWzyNRhYvV0dXhsIHvCk.roa
File:                     MxuMIF1UWzyNRhYvV0dXhsIHvCk.roa (raw, json)
Hash identifier:          rv626rNE9vPXPdzXcDZUxKTAc1YascjYoHQPC5dzP8M=
Subject key identifier:   33:1B:8C:20:5D:54:5B:3C:8D:46:16:2F:57:47:57:86:C2:07:BC:29
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0194258F97A710AEB341D847B9A83BE317FB
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MxuMIF1UWzyNRhYvV0dXhsIHvCk.roa
Signing time:             Thu 02 Jan 2025 05:49:15 +0000
ROA not before:           Thu 02 Jan 2025 05:49:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55286
IP address blocks:        93.92.112.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:97:a7:10:ae:b3:41:d8:47:b9:a8:3b:e3:17:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 05:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=331b8c205d545b3c8d46162f57475786c207bc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:32:45:5d:0b:60:ea:77:9e:c8:be:07:75:
                    db:ce:e9:a3:e5:77:2f:b5:dc:7b:c2:3c:e3:e3:5e:
                    01:e2:e0:73:ae:25:6e:92:15:6e:c8:33:4a:d8:e8:
                    1c:5a:00:1a:8e:1c:9c:85:49:11:cb:1d:89:ed:ec:
                    b5:5b:cc:2f:80:76:ca:d6:68:91:83:5d:35:cb:2b:
                    49:b0:77:47:b6:bf:85:fe:74:02:04:a9:aa:d5:8a:
                    11:09:71:56:d0:64:21:3f:5d:e2:91:89:17:4d:f7:
                    87:be:13:81:f9:00:b0:47:be:42:73:96:a1:6a:17:
                    c6:05:15:a3:14:bf:7b:83:0c:bf:07:3d:08:72:74:
                    a3:a6:2d:ee:a4:62:99:b3:a7:25:86:2b:54:2a:60:
                    51:af:52:27:62:43:12:fa:75:e1:ff:bd:bd:4a:07:
                    51:dc:40:56:bf:8c:df:e9:88:ac:c9:68:0b:36:b1:
                    59:cc:51:84:eb:73:df:60:fc:c1:4a:5f:ce:2a:3c:
                    90:db:09:24:a4:34:9d:b1:ab:3c:84:6c:67:27:0d:
                    fd:28:69:8f:c0:40:71:f2:3a:dc:e5:19:ee:ce:6c:
                    91:69:5d:9f:fd:ad:00:33:65:6f:01:78:09:71:f6:
                    33:27:1a:02:97:1a:ea:66:71:5b:23:20:a7:9d:a6:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1B:8C:20:5D:54:5B:3C:8D:46:16:2F:57:47:57:86:C2:07:BC:29
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/MxuMIF1UWzyNRhYvV0dXhsIHvCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:71:a4:47:e9:6d:b9:23:92:8a:3f:2a:bf:a4:74:00:22:d6:
         3f:05:0f:23:15:d2:4c:65:ae:73:0e:75:38:46:d7:05:e4:5b:
         82:d8:b2:94:9b:1c:0f:95:aa:f9:fc:21:6d:9e:eb:f0:9e:8f:
         db:4e:e6:74:ff:eb:61:d4:f4:bb:be:07:14:76:20:1c:a3:c6:
         2f:56:02:ae:54:cc:ea:dc:cc:21:df:cb:b9:e4:cc:d5:7b:92:
         4b:db:41:99:7d:ae:d9:f2:b1:70:c5:89:45:ac:51:0d:41:02:
         e4:a0:5a:14:74:85:c9:51:9b:43:a7:d9:38:9b:3c:71:1f:de:
         23:2b:99:a6:04:10:77:68:c6:b6:7a:84:75:19:f1:a9:30:a6:
         26:4e:90:62:18:0b:3b:d1:74:88:78:ae:fa:c8:93:8f:e4:6f:
         d7:02:cc:01:85:ce:d0:a4:08:88:da:05:b3:bd:ae:49:12:f5:
         ee:bd:86:19:8b:67:81:e5:5a:9a:a6:a5:49:b4:1f:f0:c4:df:
         6d:70:96:f4:e7:65:a6:1f:cc:2f:64:33:bf:15:cb:64:9c:68:
         dc:bf:d3:6c:cf:22:cf:e5:b4:5f:55:a5:20:0f:7d:0f:62:b0:
         85:31:88:a5:12:77:6f:71:86:45:42:9c:1a:73:89:87:ad:9f:
         c0:bc:60:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5enEK6zQdhHuag74xf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzFiOGMyMDVkNTQ1YjNjOGQ0NjE2MmY1NzQ3NTc4NmMyMDdiYzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7AyRV0LYOp3nsi+B3Xbzumj5Xcv
tdx7wjzj414B4uBzriVukhVuyDNK2OgcWgAajhychUkRyx2J7ey1W8wvgHbK1miR
g101yytJsHdHtr+F/nQCBKmq1YoRCXFW0GQhP13ikYkXTfeHvhOB+QCwR75Cc5ah
ahfGBRWjFL97gwy/Bz0IcnSjpi3upGKZs6clhitUKmBRr1InYkMS+nXh/729SgdR
3EBWv4zf6YisyWgLNrFZzFGE63PfYPzBSl/OKjyQ2wkkpDSdsas8hGxnJw39KGmP
wEBx8jrc5RnuzmyRaV2f/a0AM2VvAXgJcfYzJxoClxrqZnFbIyCnnabUKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDMbjCBdVFs8jUYWL1dHV4bCB7wpMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvTXh1TUlGMVVXenlOUmhZdlYwZFhoc0lIdkNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVxwMA0G
CSqGSIb3DQEBCwUAA4IBAQBYcaRH6W25I5KKPyq/pHQAItY/BQ8jFdJMZa5zDnU4
RtcF5FuC2LKUmxwPlar5/CFtnuvwno/bTuZ0/+th1PS7vgcUdiAco8YvVgKuVMzq
3Mwh38u55MzVe5JL20GZfa7Z8rFwxYlFrFENQQLkoFoUdIXJUZtDp9k4mzxxH94j
K5mmBBB3aMa2eoR1GfGpMKYmTpBiGAs70XSIeK76yJOP5G/XAswBhc7QpAiI2gWz
va5JEvXuvYYZi2eB5VqapqVJtB/wxN9tcJb052WmH8wvZDO/FctknGjcv9NszyLP
5bRfVaUgD30PYrCFMYilEndvcYZFQpwac4mHrZ/AvGCy
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:48:22 2025 by rpki-client