Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6Z4ELSqIELEi2HIxAGCV8v0KV8o.roa
File:                     6Z4ELSqIELEi2HIxAGCV8v0KV8o.roa (raw, json)
Hash identifier:          vUkAxBQGnpi/A86hQZvutaom+859gLMm+yDpXCb4dRU=
Subject key identifier:   E9:9E:04:2D:2A:88:10:B1:22:D8:72:31:00:60:95:F2:FD:0A:57:CA
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       2802821E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6Z4ELSqIELEi2HIxAGCV8v0KV8o.roa
Signing time:             Sat 01 Jan 2022 16:09:24 +0000
ROA not before:           Sat 01 Jan 2022 16:09:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61407
IP address blocks:        93.171.169.0/24 maxlen: 24
                          31.148.98.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671253022 (0x2802821e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:09:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e99e042d2a8810b122d87231006095f2fd0a57ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:74:1d:d7:65:ca:b9:4c:a0:05:17:f7:48:c0:
                    88:b8:cd:cd:2b:c2:5d:66:32:45:81:3c:5e:34:23:
                    f8:dd:21:f0:ee:a6:70:f2:79:69:85:ea:f9:00:9f:
                    05:fd:14:d7:31:28:6a:08:ba:73:c3:e7:02:3b:d5:
                    68:0a:08:da:51:ef:53:d3:ab:7d:6d:a6:74:7e:dc:
                    95:c7:ce:ee:30:25:e4:c1:bf:ed:43:17:f3:5b:f6:
                    bd:54:29:e3:88:7d:13:0d:5d:c6:27:4b:d3:55:80:
                    88:19:61:1c:ba:cb:89:24:3e:58:b3:a7:8e:ef:df:
                    1b:61:7c:6c:ba:a4:17:1e:4c:63:e1:1b:6d:e7:1a:
                    fb:2d:e8:8d:a5:ad:e2:db:8e:0e:de:07:d6:f3:b9:
                    76:b2:89:4d:fd:b3:35:3b:1f:96:6c:e4:29:93:27:
                    34:58:d7:b0:2d:53:36:6f:bd:1c:c5:5d:ff:10:5d:
                    15:27:ea:44:58:65:bb:17:35:2b:7b:1a:9a:de:d1:
                    79:e2:f6:7e:26:f8:ea:ad:0f:88:2e:08:b5:d8:aa:
                    81:55:6a:e3:ad:fb:72:a1:3c:5b:67:25:0a:14:b1:
                    ac:10:4e:e3:bf:21:d8:75:24:87:d4:9a:94:ea:c9:
                    9c:83:8d:62:49:e5:16:9d:ef:cd:19:bf:44:b3:62:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9E:04:2D:2A:88:10:B1:22:D8:72:31:00:60:95:F2:FD:0A:57:CA
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6Z4ELSqIELEi2HIxAGCV8v0KV8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.148.98.0/24
                  93.171.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:10:94:57:69:b5:05:44:84:f0:a4:14:7d:b0:47:06:ac:
         25:16:43:e0:7e:df:8a:ba:21:26:5d:9e:33:22:af:70:a9:0a:
         2e:38:54:e8:c7:14:ce:78:cd:bf:b6:2e:b8:ef:8b:4a:37:b9:
         f2:fd:4a:1d:3c:9d:b2:48:b4:48:f8:f8:ff:22:12:52:76:a0:
         ba:21:f4:7e:42:2c:7b:ea:00:52:9c:32:6e:ff:bb:5d:18:74:
         23:58:d3:c4:a1:0c:27:6b:ac:92:2a:41:46:e0:bb:44:84:f0:
         bb:60:e8:90:60:8a:f8:f4:a2:03:cc:47:0c:4f:9e:4e:6c:df:
         73:e3:27:7d:1a:05:84:75:fc:05:f6:a6:86:eb:eb:7a:1f:81:
         9a:0d:71:30:79:a8:c5:6c:47:34:5d:56:7e:2e:85:77:3b:c8:
         07:8f:85:15:94:f3:8f:56:a1:b8:72:92:c3:a3:4f:e5:0f:1f:
         1e:52:a8:db:d1:5d:5d:31:f2:4f:9c:31:f8:3a:81:f1:88:3e:
         35:e8:d5:4f:6d:48:e1:ca:8f:a1:0e:6f:b3:a7:d5:1f:51:6e:
         7d:78:ce:15:62:c8:25:13:da:71:c8:5f:6f:fa:a8:d1:04:51:
         6a:a7:56:89:51:ce:0b:d2:ac:6d:3a:00:12:e7:72:84:63:5a:
         bc:07:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:29 2025 by rpki-client