Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/62KTynvR_RGE_6LGd2OUGW9zq14.roa
File:                     62KTynvR_RGE_6LGd2OUGW9zq14.roa (raw, json)
Hash identifier:          rS9vUZoD5c4Vk+zLxC6aZj6lazL7o9G2rBQPxH0si3M=
Subject key identifier:   EB:62:93:CA:7B:D1:FD:11:84:FF:A2:C6:77:63:94:19:6F:73:AB:5E
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       278C8BF3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/62KTynvR_RGE_6LGd2OUGW9zq14.roa
Signing time:             Sat 01 Jan 2022 16:08:17 +0000
ROA not before:           Sat 01 Jan 2022 16:08:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43656
IP address blocks:        93.170.64.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663522291 (0x278c8bf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb6293ca7bd1fd1184ffa2c6776394196f73ab5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:4d:18:6f:0e:13:5f:ff:69:a7:2e:8f:07:
                    07:77:e5:fb:4a:ad:e2:dc:f9:ce:4c:8a:00:61:b8:
                    19:ad:ad:04:2c:0a:88:1d:5d:11:75:29:ec:fc:ce:
                    40:29:d7:60:0c:04:cb:07:04:f2:df:86:9b:bb:ab:
                    a2:cb:c6:a9:f6:0a:ac:d6:f5:c9:7a:3a:9f:d3:1e:
                    bd:a1:4f:f8:2a:9a:90:7b:aa:f6:2a:02:bd:71:59:
                    a0:a2:bb:bf:cd:26:18:c7:61:62:b6:4b:fb:89:23:
                    28:03:0a:90:6e:fe:bf:81:77:4f:08:cd:b7:46:dc:
                    34:7f:7d:13:0e:68:1f:00:fd:32:de:94:d0:cd:45:
                    a8:16:2b:b2:33:66:e7:68:6a:85:b4:f9:65:13:11:
                    ed:5b:96:22:cf:66:8f:09:d5:99:d6:4b:8e:7f:30:
                    45:46:12:99:6d:b4:57:7f:46:af:bb:66:28:26:40:
                    9b:62:fe:8f:93:ed:e7:ed:17:cf:0e:43:9b:3e:ac:
                    d0:d7:12:23:b6:3c:d2:b0:60:6e:a7:81:8b:03:8e:
                    3b:21:12:10:0e:cc:36:78:86:9f:5f:50:00:c3:a7:
                    87:79:cd:8c:93:45:34:f7:f3:f6:f3:38:f6:ff:05:
                    ed:e1:42:d4:40:68:e1:52:c9:b5:e2:1c:e5:9b:56:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:62:93:CA:7B:D1:FD:11:84:FF:A2:C6:77:63:94:19:6F:73:AB:5E
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/62KTynvR_RGE_6LGd2OUGW9zq14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:fd:73:40:c9:c5:51:03:ac:4e:a6:c0:a8:90:37:e7:8d:
         5e:65:67:e8:b0:7e:f3:15:32:c4:f4:e3:41:69:c6:9c:1d:59:
         68:a3:aa:55:f3:43:b0:b6:02:71:ed:f3:e9:0c:9b:05:81:c3:
         ff:e8:cc:9b:de:1c:41:7f:2b:5e:42:46:24:53:64:6c:dc:40:
         64:79:28:e9:de:7c:a8:1b:15:88:df:69:e8:50:67:f6:80:37:
         a9:cb:f6:f0:b6:55:b3:74:6c:0a:50:1a:2f:66:5e:8d:99:dd:
         58:07:f1:cf:25:fb:68:ae:d6:12:59:19:da:c4:22:52:4e:fe:
         4f:a0:a1:39:54:43:48:41:97:51:84:6e:a9:20:14:a5:df:1b:
         30:08:33:b0:a0:2f:23:54:22:a6:f3:91:f1:62:31:60:c7:01:
         e6:07:a1:3c:0b:61:a4:f7:52:0c:af:7f:fc:0f:bd:92:c5:4b:
         66:e8:91:8f:b4:6d:07:0e:35:fa:4c:eb:9c:dd:b9:b6:fa:25:
         7a:aa:de:1b:70:bc:a3:1c:43:c5:b4:83:70:7c:be:a0:37:ae:
         bf:8d:7b:02:63:77:20:7b:2f:6b:f2:29:2e:63:f6:cc:4d:ac:
         8e:d9:ad:61:9f:cf:2d:77:c6:2c:cb:6d:39:81:95:04:4b:2d:
         8a:8d:52:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:15 2025 by rpki-client