Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/VGPoOAkiaVriUPa50Hb-EEDNTe8.roa
File:                     VGPoOAkiaVriUPa50Hb-EEDNTe8.roa (raw, json)
Hash identifier:          1hmKVhbdfgjfBpHSWZUg1nXgiralzWaiH9fh31fkJY0=
Subject key identifier:   54:63:E8:38:09:22:69:5A:E2:50:F6:B9:D0:76:FE:10:40:CD:4D:EF
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       01852FA69C7582CC8FDE6C34835A9DA96284
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/VGPoOAkiaVriUPa50Hb-EEDNTe8.roa
Signing time:             Tue 20 Dec 2022 13:08:46 +0000
ROA not before:           Tue 20 Dec 2022 13:08:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211432
IP address blocks:        93.127.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2f:a6:9c:75:82:cc:8f:de:6c:34:83:5a:9d:a9:62:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Dec 20 13:08:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5463e8380922695ae250f6b9d076fe1040cd4def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fc:53:45:8a:a7:6a:8d:db:59:52:8f:7f:b1:
                    fb:b3:bc:e9:0a:dd:2d:2e:c5:23:0d:a7:bc:50:3b:
                    4d:5f:48:94:45:07:e0:9c:62:c1:c3:1c:8a:2e:14:
                    be:29:4f:2d:f4:32:f9:49:3a:c0:ee:52:81:57:e0:
                    f2:eb:6c:cc:1c:8f:5c:7d:04:fe:c5:44:40:61:84:
                    ce:7e:83:3b:e2:e9:c5:fa:88:57:dc:71:76:ee:84:
                    4f:a1:4a:25:1a:73:b9:bc:d6:97:19:0d:7f:2e:e9:
                    d9:55:d3:cc:d0:ca:8d:67:66:9f:e5:0a:70:9b:f9:
                    af:ff:dc:66:b6:c5:61:c9:6d:95:1c:2d:0b:eb:ff:
                    db:4d:50:91:25:99:66:c0:2d:3e:20:19:f8:ed:bd:
                    16:16:2a:7d:bf:36:6e:b7:41:4c:96:40:44:f1:0d:
                    c0:e4:b9:0e:e5:27:8a:66:9b:27:00:05:c6:4d:97:
                    7a:c6:20:b6:29:18:32:55:9b:72:92:7e:e7:78:f4:
                    bc:a5:0a:27:ef:aa:b5:ca:3b:1a:e7:53:8c:a6:03:
                    66:79:21:9b:4f:6b:07:19:9b:b8:68:d7:4b:f1:25:
                    b7:ff:3b:9e:57:d8:9e:73:64:15:fa:88:7d:79:12:
                    c3:6e:d6:b9:c3:3c:f9:b2:b2:5c:dd:02:54:c6:dd:
                    92:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:63:E8:38:09:22:69:5A:E2:50:F6:B9:D0:76:FE:10:40:CD:4D:EF
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/VGPoOAkiaVriUPa50Hb-EEDNTe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:00:ea:6b:b8:7a:d3:f5:5f:67:c7:cf:8c:05:b8:64:6e:
         38:9a:24:67:93:7e:6f:17:6e:2f:7b:e9:5e:d8:16:e7:39:ec:
         16:4d:b7:c0:2a:57:ee:49:e3:b3:e6:a3:70:a3:b5:12:44:5e:
         cb:f8:ad:84:d9:fb:b8:4d:5a:2f:46:a0:95:5e:84:8f:49:16:
         8f:cf:9c:4f:da:26:94:e1:fe:f2:6c:bf:38:ae:08:8e:66:cc:
         7c:e1:a5:52:21:04:2d:f5:41:0f:3e:79:19:87:60:b3:b9:fc:
         d7:e1:59:ab:a4:6d:a3:5c:7a:3d:c3:94:ae:e8:34:db:25:8f:
         02:d0:4c:5a:7a:22:59:d8:b0:71:37:3f:81:27:cf:9f:89:56:
         c2:01:a2:df:82:c4:74:57:06:e4:d1:12:18:d5:ab:14:66:cc:
         af:b9:ea:17:e9:c8:1e:09:ba:90:84:54:b6:d4:1d:7f:b7:ae:
         32:56:28:f2:14:37:7a:01:3b:e4:c8:83:49:b9:9a:6e:91:c6:
         60:a3:e8:4d:aa:2a:c8:73:75:84:c7:ce:f6:dd:77:95:47:c7:
         0c:b7:f6:08:1e:ab:cd:13:89:b2:13:6e:e3:3a:80:f1:ae:a8:
         46:3a:69:06:6c:e4:ca:54:43:a2:d5:88:51:eb:36:84:03:57:
         a4:87:b6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:30 2025 by rpki-client