Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/2Hb8AG85PlvYAkb6_6r015AjXX4.roa
File:                     2Hb8AG85PlvYAkb6_6r015AjXX4.roa (raw, json)
Hash identifier:          qlmMee+dSMb4wj2KMOtM8dTmlI8+aS0poeufmdvnDpU=
Subject key identifier:   D8:76:FC:00:6F:39:3E:5B:D8:02:46:FA:FF:AA:F4:D7:90:23:5D:7E
Certificate issuer:       /CN=6a5694cf43356ce41722733e80dfc38887f46554
Certificate serial:       0B2A93
Authority key identifier: 6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/2Hb8AG85PlvYAkb6_6r015AjXX4.roa
Signing time:             Wed 27 Apr 2022 07:27:50 +0000
ROA not before:           Wed 27 Apr 2022 07:27:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8075
IP address blocks:        193.150.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731795 (0xb2a93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5694cf43356ce41722733e80dfc38887f46554
        Validity
            Not Before: Apr 27 07:27:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d876fc006f393e5bd80246faffaaf4d790235d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:5c:6e:5e:d9:e2:00:16:88:5f:8d:b9:12:
                    25:30:54:e1:ad:1d:65:95:ea:39:5a:5d:68:9f:64:
                    ca:9f:59:9b:cb:79:0b:0d:d9:9a:e3:e0:a0:b7:01:
                    88:ba:67:47:49:48:f6:ac:be:71:b1:ad:3a:cf:6a:
                    b6:2a:7f:4d:0d:54:8d:6a:28:c3:31:1f:5a:80:67:
                    9a:b8:d1:b0:e9:c8:dd:d2:29:45:a0:bd:ba:1b:76:
                    06:cb:85:c6:26:c6:ca:5c:58:16:32:25:6c:03:a9:
                    16:6c:b7:ad:ce:fe:e8:94:55:47:7a:40:11:00:ac:
                    d7:b5:28:cc:e4:1d:d2:e6:52:bd:16:63:b5:80:d9:
                    f8:78:a0:81:18:a0:8f:a4:f9:df:80:e8:ec:80:73:
                    7e:3c:40:e1:d3:be:c9:03:51:e4:1b:5e:63:a7:5d:
                    18:55:50:7f:73:fb:3e:b8:75:50:c8:0b:ba:4f:88:
                    58:b9:77:28:b2:4d:4c:51:0a:94:49:b8:d4:ef:bb:
                    d4:c6:14:c5:a1:ce:b3:04:45:9e:b1:89:e7:4c:db:
                    d8:90:ab:4d:78:6a:de:77:f9:1d:51:16:51:65:28:
                    46:f1:70:36:c4:03:7d:24:35:57:2d:8f:0a:7c:85:
                    a0:c5:95:86:e5:43:8e:34:06:b7:f0:ac:c9:ef:88:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:FC:00:6F:39:3E:5B:D8:02:46:FA:FF:AA:F4:D7:90:23:5D:7E
            X509v3 Authority Key Identifier:
                keyid:6A:56:94:CF:43:35:6C:E4:17:22:73:3E:80:DF:C3:88:87:F4:65:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alaUz0M1bOQXInM-gN_DiIf0ZVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/2Hb8AG85PlvYAkb6_6r015AjXX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/829a11-5bde-4528-9adc-933d58ad3f6a/1/alaUz0M1bOQXInM-gN_DiIf0ZVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:91:36:a7:4b:15:d8:8f:11:7c:e7:f9:ac:a7:45:99:d2:58:
         d9:65:af:36:62:f6:19:f0:af:6e:ef:29:fe:74:33:2a:48:e9:
         d5:19:69:9e:40:22:36:47:5f:dd:99:c6:3f:e8:2b:fa:e1:5e:
         86:20:5b:b6:1f:69:7c:6d:93:af:c1:f6:b5:ca:4f:40:52:6e:
         e6:bd:9e:d6:a7:cb:74:63:c9:a5:86:db:06:04:9a:dc:4e:ad:
         69:05:6d:42:e1:b4:32:52:4f:ac:22:fc:23:57:00:6b:61:68:
         ee:ba:36:61:1f:b5:49:ad:49:f3:d4:c4:c1:1e:1a:24:87:86:
         24:28:1b:c3:84:5d:97:2a:18:03:82:dd:ca:d4:94:ea:07:1c:
         25:89:61:b7:4b:6a:44:6f:9d:b6:75:8d:71:d7:45:37:bd:a9:
         5f:b3:32:60:f7:bb:9f:9c:8b:bf:08:ec:c7:7f:75:ee:2a:a3:
         90:a9:d3:5f:0c:76:d3:98:b8:b0:59:c6:92:e2:cc:c3:7c:ad:
         08:a7:8f:05:87:9c:eb:be:f4:e2:3f:a1:0d:c2:3e:07:dc:35:
         b4:46:5b:07:8d:98:c9:68:c8:9b:3c:63:b9:e9:f7:ab:4c:92:
         23:71:80:96:da:c3:14:f3:e5:3e:07:6a:d3:98:d5:01:c7:45:
         c6:61:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:52 2025 by rpki-client