Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/teofKEWTc1nyxxTijDNRCJ3wBkI.roa
File:                     teofKEWTc1nyxxTijDNRCJ3wBkI.roa (raw, json)
Hash identifier:          tmqknDeYrSqTxwfBHVjKdshC/ckwPaTTHa41SLOq4S4=
Subject key identifier:   B5:EA:1F:28:45:93:73:59:F2:C7:14:E2:8C:33:51:08:9D:F0:06:42
Certificate issuer:       /CN=db988cd5db4bc702f44a0fca59c4fe1eb11a97d3
Certificate serial:       01076BE5
Authority key identifier: DB:98:8C:D5:DB:4B:C7:02:F4:4A:0F:CA:59:C4:FE:1E:B1:1A:97:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25iM1dtLxwL0Sg_KWcT-HrEal9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/teofKEWTc1nyxxTijDNRCJ3wBkI.roa
Signing time:             Sat 01 Jan 2022 06:54:49 +0000
ROA not before:           Sat 01 Jan 2022 06:54:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51088
IP address blocks:        93.190.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17263589 (0x1076be5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db988cd5db4bc702f44a0fca59c4fe1eb11a97d3
        Validity
            Not Before: Jan  1 06:54:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5ea1f2845937359f2c714e28c3351089df00642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:e9:8d:64:ca:14:50:e1:55:cc:5c:16:4e:
                    db:ed:91:6b:ad:7d:67:83:bd:51:78:90:91:66:40:
                    43:b0:0b:92:e7:f1:04:85:09:30:d7:ba:6d:98:f9:
                    72:38:72:49:98:82:74:55:ab:00:11:2a:d8:fc:83:
                    56:c4:8c:b1:c2:ec:70:06:6d:88:f2:a6:21:b7:4c:
                    28:f3:01:3a:15:e9:e8:05:b0:77:5f:31:11:2b:23:
                    50:6d:5d:58:0f:24:0d:51:cd:85:3f:28:90:4d:29:
                    9c:a7:18:3e:1b:f6:c9:e0:34:eb:93:2d:4e:c4:f7:
                    a3:02:e2:ab:5e:29:bb:9a:5e:c4:c0:e6:c1:4e:e2:
                    0a:43:c4:e0:90:ec:63:5b:95:37:23:3b:14:fb:a0:
                    a7:8e:bd:b1:13:55:ec:40:61:cc:09:5d:d8:19:d7:
                    00:dc:6f:3e:3a:fe:a3:3b:8a:86:6c:ed:73:91:f3:
                    ed:ac:28:52:05:13:1c:ad:89:77:67:d4:fb:4c:e1:
                    e2:af:e8:27:54:74:be:57:b9:bd:2b:13:ab:3f:1e:
                    ca:0f:3b:e8:35:e5:44:00:46:c1:59:fe:8d:d6:25:
                    c3:4d:e0:aa:ac:c9:8a:07:16:9a:c8:f5:b3:58:18:
                    39:85:14:a3:4c:c8:b1:4e:25:93:2e:dc:22:2a:f9:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EA:1F:28:45:93:73:59:F2:C7:14:E2:8C:33:51:08:9D:F0:06:42
            X509v3 Authority Key Identifier:
                keyid:DB:98:8C:D5:DB:4B:C7:02:F4:4A:0F:CA:59:C4:FE:1E:B1:1A:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25iM1dtLxwL0Sg_KWcT-HrEal9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/teofKEWTc1nyxxTijDNRCJ3wBkI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/25iM1dtLxwL0Sg_KWcT-HrEal9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:6d:22:3f:3a:08:4f:eb:8b:61:39:ab:40:9d:43:13:7a:79:
         09:e1:75:6f:9c:58:22:60:6b:ac:5a:81:7c:0c:fc:80:8b:02:
         ba:3c:ca:86:51:0a:f4:cc:c8:02:06:ec:eb:9b:7b:a6:be:59:
         f2:fe:58:ec:7f:d3:36:f0:34:b2:93:a9:88:13:0e:3c:86:96:
         11:58:fc:be:89:6c:38:ca:19:dd:7c:ca:af:0a:34:d5:04:7d:
         24:bb:29:6f:d5:d5:4d:2b:89:7a:5a:90:75:b7:e1:fe:be:bd:
         78:1c:c2:e2:43:d2:d1:46:bd:07:33:df:ae:8e:9f:c9:86:92:
         b1:4e:80:6f:1d:68:76:14:b5:8a:a8:31:50:be:e0:07:f8:11:
         c6:93:c1:77:aa:df:7d:dc:e8:c1:38:d0:2c:63:47:60:27:a1:
         91:01:b8:aa:09:a2:78:02:20:85:4c:7f:17:d0:87:ea:8b:5f:
         a4:53:d1:6f:48:cc:b0:cd:14:22:99:ae:23:7c:16:1a:9b:f7:
         27:a3:09:7d:42:72:a3:9b:ec:e2:5d:2d:44:23:e8:e2:3a:ad:
         df:8a:76:ac:e0:51:d9:d5:40:85:23:02:52:60:27:af:ba:6d:
         f4:e1:a5:72:e6:55:08:7b:f1:53:fa:fc:ac:10:38:eb:5d:17:
         b2:ec:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:43 2025 by rpki-client