Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/bJ5e0UwR3nUzWbIqnjBBuWHF5kM.roa
File:                     bJ5e0UwR3nUzWbIqnjBBuWHF5kM.roa (raw, json)
Hash identifier:          oqsoxXtWVKS93w9PD1gPl1hdwPvOJVLWxRWANRwxa5w=
Subject key identifier:   6C:9E:5E:D1:4C:11:DE:75:33:59:B2:2A:9E:30:41:B9:61:C5:E6:43
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       01857070580ADF938820BE57E360DCCCB6F9
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/bJ5e0UwR3nUzWbIqnjBBuWHF5kM.roa
Signing time:             Mon 02 Jan 2023 03:04:48 +0000
ROA not before:           Mon 02 Jan 2023 03:04:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        93.127.200.0/24 maxlen: 24
                          77.37.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:58:0a:df:93:88:20:be:57:e3:60:dc:cc:b6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Jan  2 03:04:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c9e5ed14c11de753359b22a9e3041b961c5e643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:c0:9f:13:86:8c:2c:2c:3d:70:8f:49:7c:
                    f3:ba:47:d6:b9:22:7a:af:bc:09:6d:e6:a7:67:16:
                    52:48:f3:bf:70:a0:89:4c:c9:45:39:6e:aa:03:a1:
                    3d:bb:a3:37:53:23:eb:a2:19:56:12:7d:e4:1e:e7:
                    b6:86:6f:00:fe:5a:a2:06:bb:4e:45:78:7c:dc:b6:
                    7b:f7:fb:52:b8:6d:19:c8:0e:3c:f0:4f:b9:a0:71:
                    71:3e:7a:03:11:4d:df:e5:d0:9c:bb:ca:3b:6c:2f:
                    96:7f:20:44:4c:6c:75:30:32:22:c0:6b:08:66:8b:
                    1d:0c:ad:5d:5d:c2:bc:3e:3e:0c:c1:c5:83:bb:98:
                    86:90:52:33:71:13:37:96:2c:01:27:f4:e8:73:f4:
                    1f:ee:58:99:71:8d:5a:f1:14:c3:59:87:8b:dc:d7:
                    07:0d:d4:d2:a9:5f:08:66:17:66:97:42:c0:eb:ea:
                    b3:11:45:36:cf:a3:c3:6f:cd:13:21:51:95:17:0a:
                    9a:2f:fb:e5:fb:b3:6b:68:be:ed:2c:d1:a8:68:45:
                    9b:b5:83:81:c5:70:24:ef:df:83:b8:d0:25:2d:f8:
                    ff:82:38:24:67:55:7c:ff:9c:e5:eb:0b:93:a2:4b:
                    9d:c6:34:9c:3d:26:66:07:b6:f9:ca:74:cc:fc:4f:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:5E:D1:4C:11:DE:75:33:59:B2:2A:9E:30:41:B9:61:C5:E6:43
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/bJ5e0UwR3nUzWbIqnjBBuWHF5kM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.88.0/24
                  93.127.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:29:f6:4c:e5:07:a5:e6:b2:80:14:c9:08:a7:30:5d:bf:1e:
         19:36:79:e7:e8:25:b0:02:f9:ca:4b:94:33:1f:31:3c:6c:53:
         79:79:ab:51:74:6b:4b:c6:02:06:c2:79:ba:7d:6d:80:af:b7:
         95:f1:a2:f3:6f:4c:57:ed:10:39:31:b5:0c:06:fc:e8:5f:f2:
         dc:84:79:8d:5d:4e:d6:4a:93:40:54:b1:54:74:a8:6d:32:89:
         a8:4f:a7:d2:4e:8f:dd:57:2f:4a:cb:0d:ec:96:db:23:f2:5b:
         fb:64:3b:ef:17:c7:57:61:07:53:b8:3e:f2:53:21:e4:84:de:
         c4:c4:5a:20:42:cd:b9:8b:52:24:ec:04:ea:2a:68:81:83:b8:
         a5:7a:c5:16:54:81:82:ca:7d:3e:77:6e:3e:5c:51:98:53:10:
         0b:8b:e2:48:75:b6:48:35:81:2d:f3:f7:7a:5b:fc:4c:a3:4b:
         9d:85:7c:c7:c4:7a:57:21:5b:1c:3b:46:b9:9d:35:2f:73:fe:
         8f:10:d3:b1:e3:fd:f2:c7:16:89:e0:e5:08:d3:36:4d:3b:08:
         cc:51:d9:35:46:dc:4f:95:fb:39:6e:26:71:7c:72:87:37:5f:
         45:e1:e6:8a:63:f9:de:ff:33:3d:e2:4b:fd:34:df:27:45:96:
         cc:80:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:42 2025 by rpki-client