Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/lOjZZuC4iYSd8lLeUtA2cYh_DBU.roa
File:                     lOjZZuC4iYSd8lLeUtA2cYh_DBU.roa (raw, json)
Hash identifier:          3lHoZvknSiUJe2xAu7gKUhIBJOv/43PBMULW/a0sPHs=
Subject key identifier:   94:E8:D9:66:E0:B8:89:84:9D:F2:52:DE:52:D0:36:71:88:7F:0C:15
Certificate issuer:       /CN=b549a600df1ad7974fa80e3466b5b76441393759
Certificate serial:       D3A8
Authority key identifier: B5:49:A6:00:DF:1A:D7:97:4F:A8:0E:34:66:B5:B7:64:41:39:37:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUmmAN8a15dPqA40ZrW3ZEE5N1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/lOjZZuC4iYSd8lLeUtA2cYh_DBU.roa
Signing time:             Mon 31 Jan 2022 15:53:58 +0000
ROA not before:           Mon 31 Jan 2022 15:53:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        93.177.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54184 (0xd3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b549a600df1ad7974fa80e3466b5b76441393759
        Validity
            Not Before: Jan 31 15:53:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=94e8d966e0b889849df252de52d03671887f0c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:47:b8:6d:d5:df:d5:c5:cf:6a:7c:67:6f:
                    66:4e:24:22:0d:f6:85:29:fc:24:07:b3:ba:df:5e:
                    92:ea:41:d1:98:7b:30:49:55:29:7f:72:2f:5b:51:
                    c4:31:be:e6:90:ee:87:58:33:23:4f:5f:38:61:a8:
                    d3:9c:7f:17:ee:3e:65:19:14:4a:12:3f:b3:34:b2:
                    9d:42:0b:ca:0f:d7:26:29:72:16:cb:97:a6:27:07:
                    cd:f1:60:86:41:b7:90:65:24:35:2e:4d:78:3b:aa:
                    e1:9d:b8:97:06:b4:72:b8:13:a6:2a:b8:78:7e:83:
                    c2:9f:0a:3a:10:66:19:71:48:cf:1f:54:32:d5:26:
                    28:1f:ea:aa:90:4c:e0:69:b1:82:17:45:b5:a4:d1:
                    8a:a8:45:c6:e4:c2:58:ab:cc:a9:23:0c:1e:25:58:
                    e8:8b:34:1b:49:8c:27:d2:6c:2d:55:8c:f5:63:53:
                    29:0a:62:ad:14:ac:f9:ed:c9:c2:1c:e2:f1:c3:b7:
                    08:46:b3:b0:16:11:86:0e:fb:fc:a2:2c:ba:cf:ba:
                    61:ee:8b:00:8b:ab:b0:da:e8:c0:6f:84:6d:f8:f5:
                    63:d6:ce:d7:71:0d:16:c2:06:be:32:46:c0:6e:7a:
                    28:87:73:d8:dc:91:60:32:38:d3:c9:5e:7c:d1:95:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:D9:66:E0:B8:89:84:9D:F2:52:DE:52:D0:36:71:88:7F:0C:15
            X509v3 Authority Key Identifier:
                keyid:B5:49:A6:00:DF:1A:D7:97:4F:A8:0E:34:66:B5:B7:64:41:39:37:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUmmAN8a15dPqA40ZrW3ZEE5N1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/lOjZZuC4iYSd8lLeUtA2cYh_DBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/tUmmAN8a15dPqA40ZrW3ZEE5N1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:49:b5:79:63:66:ec:d0:5b:66:a1:c1:d3:02:e6:ca:17:
         ff:11:3d:26:75:97:df:32:83:6c:8b:8f:31:1f:85:c0:3f:f8:
         39:6b:f5:b7:e0:f5:d5:39:9c:b1:7e:a7:7c:87:6a:6d:6c:19:
         ee:cd:3c:6c:21:69:7c:6e:b7:27:2b:ac:21:5f:da:a0:42:6f:
         64:f2:9f:09:53:3c:a8:af:74:ee:67:5a:41:7c:6e:41:db:10:
         bd:58:e5:53:ae:07:30:71:6d:69:84:ac:80:08:ea:07:9f:12:
         c8:54:a1:68:09:27:19:b1:40:52:e7:c6:5b:7f:21:8b:3b:ac:
         4e:e8:e0:bd:81:41:2e:f6:6f:3b:e1:cc:e7:77:89:4c:c3:ce:
         22:79:8a:d1:ef:64:be:7e:26:8d:6b:13:03:12:e0:cb:77:45:
         15:9b:9f:4f:71:46:15:15:22:45:07:60:65:a8:86:28:f1:03:
         28:90:46:fe:2b:ad:da:02:72:4f:4f:25:5c:0d:35:ae:23:01:
         5d:4d:97:fa:30:c8:30:be:77:cb:a6:59:94:de:90:e3:bf:35:
         57:ad:d7:bb:bc:3e:c8:fd:58:36:7d:f5:5e:ca:9b:d0:25:8d:
         42:44:4f:6f:5d:e6:53:96:14:b6:25:81:2a:77:f9:5b:b2:c1:
         b8:59:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:22 2025 by rpki-client