Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Eou3_lpkmNyH1mt_5VIdbUpaMfA.roa
File:                     Eou3_lpkmNyH1mt_5VIdbUpaMfA.roa (raw, json)
Hash identifier:          PEx8lo/7pD3nUY/tc0xtBDJAZRZh1xdrrZhGsAqjbwU=
Subject key identifier:   12:8B:B7:FE:5A:64:98:DC:87:D6:6B:7F:E5:52:1D:6D:4A:5A:31:F0
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       285A367D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Eou3_lpkmNyH1mt_5VIdbUpaMfA.roa
Signing time:             Sat 01 Jan 2022 16:10:18 +0000
ROA not before:           Sat 01 Jan 2022 16:10:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211587
IP address blocks:        93.170.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677000829 (0x285a367d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:10:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=128bb7fe5a6498dc87d66b7fe5521d6d4a5a31f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:82:e1:ee:e0:35:d0:41:db:d1:7e:95:ba:
                    ca:6c:ab:38:10:b2:8d:30:f6:90:2a:23:e0:3d:f9:
                    47:38:84:50:cb:b9:30:74:59:14:d6:e7:b5:66:0e:
                    68:a8:b8:b4:4a:00:a6:0d:1e:7c:28:c2:e5:29:42:
                    3d:36:00:61:62:f7:40:60:c4:9f:86:14:f5:ff:7b:
                    6a:f4:e4:08:e9:bd:f7:79:56:d8:37:95:1f:15:a5:
                    25:08:d8:8c:70:de:e9:39:83:8d:2a:26:34:63:dc:
                    27:ff:68:79:dd:a7:fc:e3:00:9f:60:2f:89:bc:4b:
                    ee:22:a1:5f:61:14:04:fc:6c:d6:d3:85:04:03:eb:
                    a5:a9:04:bc:34:b1:f8:3f:13:84:8a:5f:c1:fd:be:
                    24:18:18:73:bb:0e:4d:6d:95:6f:ca:f9:ce:de:60:
                    90:3c:b3:9b:cb:d3:a3:f7:52:57:f4:14:6c:fb:d9:
                    87:2e:c9:18:e1:51:04:5f:ea:7d:fe:a0:42:56:26:
                    42:a7:06:21:e1:0f:31:59:a0:07:38:1b:6b:51:cc:
                    45:33:85:a3:1e:23:d2:7b:40:0b:b3:3b:1e:8f:92:
                    c0:1f:ba:fb:98:e5:6e:43:f8:d8:a9:92:4c:dc:da:
                    3f:8f:c7:ba:0c:5b:b7:5b:9b:0d:66:0a:89:39:c9:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8B:B7:FE:5A:64:98:DC:87:D6:6B:7F:E5:52:1D:6D:4A:5A:31:F0
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Eou3_lpkmNyH1mt_5VIdbUpaMfA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:78:b3:1a:a1:a4:c5:c1:aa:57:9f:f6:cc:92:59:64:64:84:
         c0:46:dc:33:6a:12:e8:f4:d8:83:af:66:ca:20:d1:dc:e4:db:
         b1:1a:57:5f:19:42:2a:49:9f:25:e8:e3:c6:c2:9d:c5:f7:10:
         b3:8d:20:6d:76:25:d6:88:65:71:8d:9d:33:29:13:95:db:ba:
         2e:c0:9d:cc:16:55:b0:10:d5:9d:a3:ed:3c:1d:d3:b2:9d:ae:
         b8:a2:6d:22:5e:9b:1b:3b:1f:6e:e5:f3:a4:1a:f7:90:6a:f1:
         0c:ec:a5:4f:3e:0e:bf:a2:18:0b:f9:95:fd:05:b8:3f:d7:f4:
         e4:df:b9:46:dd:f5:9d:b5:40:64:ea:cf:07:c1:0a:2b:60:1e:
         c0:02:f2:db:7f:cb:e5:f1:64:15:8e:37:80:d8:39:eb:2b:54:
         0b:ec:f1:6f:06:07:d5:1b:2f:a0:88:89:2d:10:9f:74:b0:77:
         cc:1f:a8:22:f6:7b:73:0b:1c:48:81:50:32:cf:aa:b9:0a:05:
         a4:33:75:66:a8:98:cc:65:89:f2:21:91:a2:10:9d:12:18:8d:
         65:33:d9:8d:7e:96:64:9a:19:a8:d5:14:56:a5:3c:eb:e9:45:
         93:13:37:de:14:6a:47:47:e7:32:cb:40:db:b4:8d:e3:77:31:
         8f:f9:00:91
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKFo2fTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MTAxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTI4YmI3ZmU1YTY0
OThkYzg3ZDY2YjdmZTU1MjFkNmQ0YTVhMzFmMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJKWguHu4DXQQdvRfpW6ymyrOBCyjTD2kCoj4D35RziEUMu5
MHRZFNbntWYOaKi4tEoApg0efCjC5SlCPTYAYWL3QGDEn4YU9f97avTkCOm993lW
2DeVHxWlJQjYjHDe6TmDjSomNGPcJ/9oed2n/OMAn2AvibxL7iKhX2EUBPxs1tOF
BAPrpakEvDSx+D8ThIpfwf2+JBgYc7sOTW2Vb8r5zt5gkDyzm8vTo/dSV/QUbPvZ
hy7JGOFRBF/qff6gQlYmQqcGIeEPMVmgBzgba1HMRTOFox4j0ntAC7M7Ho+SwB+6
+5jlbkP42KmSTNzaP4/Hugxbt1ubDWYKiTnJH7UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQSi7f+WmSY3IfWa3/lUh1tSlox8DAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0VvdTNfbHBrbU55SDFtdF81VklkYlVwYU1mQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2qjTANBgkqhkiG9w0BAQsFAAOC
AQEAMXizGqGkxcGqV5/2zJJZZGSEwEbcM2oS6PTYg69myiDR3OTbsRpXXxlCKkmf
JejjxsKdxfcQs40gbXYl1ohlcY2dMykTldu6LsCdzBZVsBDVnaPtPB3Tsp2uuKJt
Il6bGzsfbuXzpBr3kGrxDOylTz4Ov6IYC/mV/QW4P9f05N+5Rt31nbVAZOrPB8EK
K2AewALy23/L5fFkFY43gNg56ytUC+zxbwYH1RsvoIiJLRCfdLB3zB+oIvZ7cwsc
SIFQMs+quQoFpDN1ZqiYzGWJ8iGRohCdEhiNZTPZjX6WZJoZqNUUVqU86+lFkxM3
3hRqR0fnMstA27SN43cxj/kAkQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:35 2025 by rpki-client