Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vuEOQVZ-XIbkDroWw5V8nj9Pysg.roa
File:                     vuEOQVZ-XIbkDroWw5V8nj9Pysg.roa (raw, json)
Hash identifier:          g9zX9MqU6WI9ZjMfEwBoMyjjU74hNxaAcrK/lXoOPJ8=
Subject key identifier:   BE:E1:0E:41:56:7E:5C:86:E4:0E:BA:16:C3:95:7C:9E:3F:4F:CA:C8
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       27BFEC1D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vuEOQVZ-XIbkDroWw5V8nj9Pysg.roa
Signing time:             Sat 01 Jan 2022 16:08:46 +0000
ROA not before:           Sat 01 Jan 2022 16:08:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51500
IP address blocks:        93.171.154.0/24 maxlen: 24
                          146.158.73.0/24 maxlen: 24
                          95.47.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666889245 (0x27bfec1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:08:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bee10e41567e5c86e40eba16c3957c9e3f4fcac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:74:5a:7e:70:22:6f:62:ec:3a:91:2a:63:
                    50:53:1b:1f:b0:bd:64:89:12:4f:48:91:87:f2:1d:
                    50:c1:e9:9f:b2:ba:50:a6:29:34:80:91:24:08:96:
                    e7:1c:02:c2:f7:17:a3:00:82:bb:27:a1:2a:08:fc:
                    aa:3a:01:d5:98:ab:7f:19:56:7f:03:3c:5a:83:ed:
                    51:aa:2b:a1:7f:5b:ce:a0:08:20:a8:d9:8d:4b:f1:
                    93:ba:21:af:9a:43:90:15:a5:6b:56:fc:5f:55:47:
                    75:b4:4b:f3:a6:e7:20:91:91:c0:6a:2e:2a:76:88:
                    4a:ba:4c:f5:2a:d8:73:2f:10:71:8e:bb:c5:72:f6:
                    dc:c9:d6:77:df:ca:05:38:4d:72:87:97:6f:a7:10:
                    eb:e7:96:83:5e:02:5d:0c:3f:f3:44:2e:eb:7c:6f:
                    d9:33:82:65:92:27:da:d3:c2:84:03:b3:f8:88:75:
                    a6:88:67:94:88:3a:5f:74:f9:53:fd:ce:87:d0:d2:
                    f7:e8:12:b5:4b:4e:67:53:9c:6a:da:d8:0e:0e:6f:
                    e7:d5:ad:18:52:b4:a5:2c:ed:5b:3c:13:7a:12:b4:
                    a4:09:2b:4e:51:d0:2b:18:d8:ed:d7:4f:d5:99:d4:
                    7c:a8:ee:36:64:95:27:61:41:34:e7:07:21:55:53:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:0E:41:56:7E:5C:86:E4:0E:BA:16:C3:95:7C:9E:3F:4F:CA:C8
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/vuEOQVZ-XIbkDroWw5V8nj9Pysg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.154.0/24
                  95.47.56.0/24
                  146.158.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a8:6c:10:8d:76:58:a9:f3:38:e6:2d:7e:62:17:f5:0b:74:
         d5:85:ad:98:a9:a0:6e:1c:39:a4:03:4e:a3:31:03:de:4b:64:
         d5:18:c1:27:e2:29:34:33:2e:3a:42:5a:50:0f:37:4d:a7:69:
         a5:e9:5c:1c:77:cb:11:26:3d:db:31:4b:90:99:18:af:b7:5e:
         b8:60:cc:96:7e:23:16:2a:b3:73:f7:32:ef:0c:54:48:0b:b5:
         c3:b2:9b:ba:31:f0:a7:f9:8e:a8:c1:b9:b9:c0:ef:bd:ba:78:
         bc:3f:1a:53:65:a9:9e:53:8d:f7:98:30:84:4d:ef:16:3f:30:
         d3:4a:ec:73:52:34:d9:5e:0b:80:67:2c:9d:d0:6d:85:bb:f6:
         99:80:ab:13:e5:e3:29:2c:62:ce:08:d5:f0:80:25:ad:18:e4:
         bb:8d:c0:5e:e0:b3:a8:a1:ea:34:d3:16:b1:45:d4:2d:bb:66:
         a1:82:98:e8:4b:dd:b3:ac:de:c1:1e:e7:d4:91:b1:74:0f:49:
         89:2c:1b:cb:df:ac:fd:2e:39:a7:0f:73:e0:72:7f:ef:04:b7:
         53:0f:b0:2f:91:0a:74:55:49:f6:2f:01:82:ed:4f:20:ca:d1:
         fc:ed:68:bf:67:05:61:a4:02:1c:9c:ff:f4:99:a7:45:34:03:
         73:75:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:59 2025 by rpki-client