Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/JioSZcogLBvnPm_i10GpZ6DFfe0.roa
File:                     JioSZcogLBvnPm_i10GpZ6DFfe0.roa (raw, json)
Hash identifier:          okwU3DuRLl0CqMjCKzOSSowupf9RgDTRhQ+79P+x4cs=
Subject key identifier:   26:2A:12:65:CA:20:2C:1B:E7:3E:6F:E2:D7:41:A9:67:A0:C5:7D:ED
Certificate issuer:       /CN=21001d34d7cfadd22889a7e50db731d8a9071c25
Certificate serial:       07916A0F
Authority key identifier: 21:00:1D:34:D7:CF:AD:D2:28:89:A7:E5:0D:B7:31:D8:A9:07:1C:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQAdNNfPrdIoiaflDbcx2KkHHCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/JioSZcogLBvnPm_i10GpZ6DFfe0.roa
Signing time:             Fri 17 Jun 2022 09:30:45 +0000
ROA not before:           Fri 17 Jun 2022 09:30:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        185.93.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126970383 (0x7916a0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21001d34d7cfadd22889a7e50db731d8a9071c25
        Validity
            Not Before: Jun 17 09:30:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=262a1265ca202c1be73e6fe2d741a967a0c57ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:d5:0a:18:20:f1:d8:58:33:27:0c:00:8c:
                    57:5a:02:08:88:46:38:24:cd:c2:28:12:34:52:9e:
                    8f:3b:cf:53:3c:2a:88:17:ec:b0:c9:d2:fb:08:ac:
                    85:bc:93:eb:08:94:7d:7b:41:21:b9:55:af:2e:de:
                    92:3c:c1:e0:b8:9a:f9:85:fd:b8:a3:4b:31:6e:20:
                    9b:6b:5d:25:bd:c3:43:28:2a:77:14:72:68:83:cd:
                    2f:0e:dc:54:d2:32:94:5c:08:2b:4e:51:6a:5f:3c:
                    56:1a:8e:51:3d:21:aa:be:27:94:6b:30:ac:d5:5d:
                    36:a3:23:f6:a2:3e:2e:d2:0f:06:14:7e:d9:6b:02:
                    11:ff:de:a5:14:87:13:ff:30:5e:ee:b0:2b:de:99:
                    d8:d5:40:6e:9d:6f:6c:9d:1b:6b:a6:74:70:de:c7:
                    87:5e:5a:7e:99:2a:e4:ce:76:8e:35:46:a9:98:78:
                    bb:31:e0:f4:11:c0:af:29:b7:40:64:82:08:6c:04:
                    d6:80:26:29:2d:1b:16:38:77:0f:01:b2:eb:f1:56:
                    c2:ad:0d:d6:98:5b:6b:55:20:51:15:0b:40:13:7e:
                    54:d9:69:2c:bb:ab:93:4a:38:65:a6:27:dd:9d:90:
                    cd:e5:00:86:d4:d0:7f:7b:e1:00:ca:69:c0:55:1a:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2A:12:65:CA:20:2C:1B:E7:3E:6F:E2:D7:41:A9:67:A0:C5:7D:ED
            X509v3 Authority Key Identifier:
                keyid:21:00:1D:34:D7:CF:AD:D2:28:89:A7:E5:0D:B7:31:D8:A9:07:1C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQAdNNfPrdIoiaflDbcx2KkHHCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/JioSZcogLBvnPm_i10GpZ6DFfe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02279e-9c48-4cf4-a2fa-9d66beb0e4c4/1/IQAdNNfPrdIoiaflDbcx2KkHHCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:97:dc:f0:ae:cd:93:23:e8:6d:b9:89:c6:2a:bd:f2:9a:06:
         8d:3f:84:a9:b2:76:ae:c4:e9:4f:d9:2b:8d:37:7a:43:04:88:
         af:11:85:2c:13:98:5f:5a:ad:3a:35:e6:5e:ea:04:1f:0e:b3:
         25:34:a9:a7:53:e0:d1:30:bb:25:b7:82:03:e5:c9:21:36:f4:
         37:d9:5c:ae:09:ee:52:cb:c3:6c:16:cc:28:a5:1e:51:50:9e:
         44:1c:9b:62:34:14:79:96:9a:a2:5e:ca:32:2a:0c:86:94:c4:
         29:c1:b2:77:36:48:09:18:29:76:38:6d:e4:4b:e2:ee:2a:c2:
         3d:4e:4e:d1:94:f2:b5:e0:29:c7:fe:3a:ab:8b:03:3d:4e:c2:
         e7:21:e7:58:c6:f0:fc:27:83:e8:05:32:45:1b:0f:d1:a5:d1:
         be:18:b2:7a:c7:cc:17:e6:b5:3b:46:34:c7:88:cf:cf:20:05:
         8c:47:54:a0:84:5d:25:05:1e:4f:2a:70:2e:f2:87:9c:5b:15:
         c2:6a:a7:30:98:ca:12:2e:e2:ed:59:30:98:0f:76:ce:de:29:
         f4:85:6e:d4:e7:5d:e9:4b:73:60:d7:b7:e4:5c:82:0c:eb:bb:
         ac:59:fb:d1:71:8e:d0:23:f3:d7:b2:25:3a:2f:26:73:9b:2f:
         6d:76:9e:b4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB5FqDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTAwMWQzNGQ3Y2ZhZGQyMjg4OWE3ZTUwZGI3MzFkOGE5MDcxYzI1MB4XDTIyMDYx
NzA5MzA0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjYyYTEyNjVjYTIw
MmMxYmU3M2U2ZmUyZDc0MWE5NjdhMGM1N2RlZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMPr1QoYIPHYWDMnDACMV1oCCIhGOCTNwigSNFKejzvPUzwq
iBfssMnS+wishbyT6wiUfXtBIblVry7ekjzB4Lia+YX9uKNLMW4gm2tdJb3DQygq
dxRyaIPNLw7cVNIylFwIK05Ral88VhqOUT0hqr4nlGswrNVdNqMj9qI+LtIPBhR+
2WsCEf/epRSHE/8wXu6wK96Z2NVAbp1vbJ0ba6Z0cN7Hh15afpkq5M52jjVGqZh4
uzHg9BHArym3QGSCCGwE1oAmKS0bFjh3DwGy6/FWwq0N1phba1UgURULQBN+VNlp
LLurk0o4ZaYn3Z2QzeUAhtTQf3vhAMppwFUavW0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQmKhJlyiAsG+c+b+LXQalnoMV97TAfBgNVHSMEGDAWgBQhAB0018+t0iiJ
p+UNtzHYqQccJTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lRQWROTmZQcmRJb2lhZmxEYmN4MktrSEhDVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWYvMDIyNzllLTljNDgtNGNmNC1hMmZhLTlkNjZiZWIwZTRjNC8x
L0ppb1NaY29nTEJ2blBtX2kxMEdwWjZERmZlMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYv
MDIyNzllLTljNDgtNGNmNC1hMmZhLTlkNjZiZWIwZTRjNC8xL0lRQWROTmZQcmRJ
b2lhZmxEYmN4MktrSEhDVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALldezANBgkqhkiG9w0BAQsFAAOC
AQEAT5fc8K7NkyPobbmJxiq98poGjT+EqbJ2rsTpT9krjTd6QwSIrxGFLBOYX1qt
OjXmXuoEHw6zJTSpp1Pg0TC7JbeCA+XJITb0N9lcrgnuUsvDbBbMKKUeUVCeRByb
YjQUeZaaol7KMioMhpTEKcGydzZICRgpdjht5Evi7irCPU5O0ZTyteApx/46q4sD
PU7C5yHnWMbw/CeD6AUyRRsP0aXRvhiyesfMF+a1O0Y0x4jPzyAFjEdUoIRdJQUe
TypwLvKHnFsVwmqnMJjKEi7i7VkwmA92zt4p9IVu1Odd6UtzYNe35FyCDOu7rFn7
0XGO0CPz17IlOi8mc5svbXaetA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:32 2025 by rpki-client