Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kXptDRJnzaXGsYBUNBKqCYaFsqo.roa
File:                     kXptDRJnzaXGsYBUNBKqCYaFsqo.roa (raw, json)
Hash identifier:          PoGpmgO/VM50uol1nPLECICg1Dsh/zoj8KTT239MGS4=
Subject key identifier:   91:7A:6D:0D:12:67:CD:A5:C6:B1:80:54:34:12:AA:09:86:85:B2:AA
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       29FBB6D0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kXptDRJnzaXGsYBUNBKqCYaFsqo.roa
Signing time:             Thu 26 May 2022 12:19:15 +0000
ROA not before:           Thu 26 May 2022 12:19:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210519
IP address blocks:        92.38.50.0/23 maxlen: 24
                          31.148.196.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704362192 (0x29fbb6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: May 26 12:19:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=917a6d0d1267cda5c6b180543412aa098685b2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:e5:b2:d4:9f:21:f4:75:cf:99:f8:59:e7:
                    01:c1:77:04:b1:09:e1:c2:a0:24:6c:bb:26:cd:60:
                    6f:56:5d:3f:16:fc:a8:c2:ff:98:02:79:93:cf:2b:
                    de:24:8f:b4:b3:b7:f2:74:0a:79:fe:be:74:18:34:
                    80:58:53:0c:01:d6:84:96:51:c3:f8:ab:dc:f7:e2:
                    06:49:cb:63:e0:6e:54:9d:eb:47:69:2a:b4:5e:5e:
                    2c:cd:82:78:aa:fc:72:bb:cf:29:f0:fc:4e:8c:2f:
                    9a:44:ff:7d:dc:9b:23:ae:01:49:3e:0b:06:4e:82:
                    10:08:7c:89:a0:7e:ba:85:c2:b4:83:bf:89:1a:19:
                    94:27:60:13:93:e8:41:7a:9c:c1:e0:68:31:46:ce:
                    19:d3:0b:d7:79:33:90:57:68:4d:35:53:a2:ba:04:
                    97:90:98:a8:1f:c1:63:b5:fd:36:43:37:c4:7a:60:
                    b1:3d:2e:f7:0c:da:f9:86:a0:ab:69:24:bf:76:70:
                    33:00:de:03:9a:74:50:0b:0c:5f:4b:52:ca:13:98:
                    ce:cc:01:23:1c:c3:be:44:9e:09:10:a1:c8:67:d4:
                    c9:43:26:8c:c1:8e:2a:1a:3b:5e:72:8e:46:e3:3e:
                    e2:4b:17:1c:2d:fb:d0:1f:31:c8:fa:60:46:76:75:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7A:6D:0D:12:67:CD:A5:C6:B1:80:54:34:12:AA:09:86:85:B2:AA
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kXptDRJnzaXGsYBUNBKqCYaFsqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.148.196.0/23
                  92.38.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:2b:55:14:83:f9:f4:11:fb:49:c7:54:74:d7:95:97:93:b5:
         ea:7e:40:6d:95:40:f2:15:b9:4a:81:0c:ec:93:6a:22:b0:b5:
         73:c7:30:12:1e:09:ef:f7:eb:11:49:8e:fc:29:16:37:a7:e9:
         f8:64:66:f2:94:44:63:de:67:d6:a6:bb:ce:02:32:35:b3:75:
         fa:97:b3:81:97:42:2a:35:13:42:0e:29:11:f8:b6:95:7e:c4:
         4b:66:5b:c0:2c:50:d1:78:11:ac:f8:c4:e9:38:d6:c4:05:5d:
         2c:02:8d:e9:2f:fa:cc:b5:df:95:89:74:85:ef:04:db:88:89:
         ca:e6:e0:c1:28:be:fa:61:f9:04:cb:c7:d2:35:01:99:6c:c8:
         ef:9b:ea:4d:b7:d6:62:e5:54:c6:57:53:06:1e:77:e4:94:3d:
         c0:65:45:49:1b:80:ca:50:49:02:4a:a9:55:89:a5:bf:72:5f:
         26:97:2c:1a:97:fc:84:fc:c3:ba:d7:4b:85:c7:ba:31:00:b4:
         e1:a7:2c:c6:59:3c:6c:58:f5:55:45:ff:e9:e5:08:ef:8b:58:
         85:0e:55:8d:18:b9:dd:d3:d2:8f:cc:aa:c3:44:c4:fd:f4:5f:
         6a:ff:16:14:2f:19:58:3f:2e:8d:80:b1:bd:76:47:d0:24:a4:
         2d:89:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:52 2025 by rpki-client