Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/uS7xbLf5my_2my7tC4oSKc00u48.roa
File:                     uS7xbLf5my_2my7tC4oSKc00u48.roa (raw, json)
Hash identifier:          JHLp1nHNPeeJLh0ao+tk0nMadW2Soxq5KdA5D8Sxwjw=
Subject key identifier:   B9:2E:F1:6C:B7:F9:9B:2F:F6:9B:2E:ED:0B:8A:12:29:CD:34:BB:8F
Certificate issuer:       /CN=d7da8118018d7cb0efde6793788104873f47f45d
Certificate serial:       1800500A
Authority key identifier: D7:DA:81:18:01:8D:7C:B0:EF:DE:67:93:78:81:04:87:3F:47:F4:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19qBGAGNfLDv3meTeIEEhz9H9F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/uS7xbLf5my_2my7tC4oSKc00u48.roa
Signing time:             Sat 01 Jan 2022 04:55:22 +0000
ROA not before:           Sat 01 Jan 2022 04:55:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31533
IP address blocks:        91.213.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402673674 (0x1800500a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7da8118018d7cb0efde6793788104873f47f45d
        Validity
            Not Before: Jan  1 04:55:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b92ef16cb7f99b2ff69b2eed0b8a1229cd34bb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1b:9e:46:df:b6:99:41:39:1e:9f:40:cb:e6:
                    6e:e8:0e:0b:13:98:1f:af:1c:d0:ab:b8:3b:aa:68:
                    30:39:be:77:0a:04:2f:09:21:21:46:bd:15:e0:3a:
                    46:b1:d6:34:48:47:2d:f6:ca:68:69:06:d7:b7:98:
                    64:bd:0a:a8:fe:4e:bb:ac:1c:68:2a:db:2d:01:f2:
                    1d:77:7f:86:f5:13:29:81:74:75:e6:49:9e:fe:3d:
                    54:d9:d4:04:bb:11:bf:c6:68:1a:92:a0:29:3e:68:
                    2e:4f:15:07:0c:8b:97:9c:0e:fd:99:8e:74:c1:d9:
                    ea:8f:82:92:df:3b:1f:2a:0b:24:f1:60:51:39:46:
                    b1:d9:c8:1e:ea:b5:b7:ad:d6:1c:ee:3c:0d:a5:69:
                    ae:a4:0d:19:a4:3d:c3:a8:cc:64:c9:23:f5:23:d8:
                    c5:e8:66:5a:f7:2a:e5:01:77:8c:02:98:6e:78:d8:
                    ee:16:33:09:ee:c2:1b:9e:cf:f4:9f:59:dc:6f:40:
                    f6:29:17:c9:d0:52:d0:71:99:32:4e:4e:97:37:9e:
                    57:93:68:24:42:4c:c2:2b:eb:e7:ed:b1:96:50:ef:
                    c9:77:12:59:38:33:31:35:a9:11:d7:af:a9:f4:1a:
                    f7:46:88:40:fe:ec:76:fb:8b:3c:45:3d:7d:81:be:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2E:F1:6C:B7:F9:9B:2F:F6:9B:2E:ED:0B:8A:12:29:CD:34:BB:8F
            X509v3 Authority Key Identifier:
                keyid:D7:DA:81:18:01:8D:7C:B0:EF:DE:67:93:78:81:04:87:3F:47:F4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19qBGAGNfLDv3meTeIEEhz9H9F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/uS7xbLf5my_2my7tC4oSKc00u48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/19qBGAGNfLDv3meTeIEEhz9H9F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:14:b5:d6:41:db:6c:9d:36:d1:24:af:a2:f7:78:e4:53:63:
         9a:b2:3b:e9:5c:17:89:77:c2:ec:df:52:f8:bd:eb:bf:67:9c:
         ce:12:a0:f1:1a:ce:8b:98:22:e5:f7:bf:8a:84:06:27:58:7a:
         ae:7f:6f:90:00:b6:23:29:88:74:f6:76:e7:56:58:ce:8d:2f:
         66:2d:57:50:06:36:7b:9e:2f:71:f9:de:35:e8:e2:3a:8a:19:
         78:a9:6a:69:a8:29:5e:2b:3b:be:25:1e:6c:6f:8d:04:84:30:
         92:54:14:70:33:fc:4f:68:ed:9f:19:c7:23:68:71:b8:3a:40:
         bc:c7:81:58:9a:39:7f:44:cf:22:ee:67:36:32:09:e5:36:1e:
         df:eb:19:04:3e:2e:e6:d7:c0:3e:1e:af:e1:59:ff:0f:b1:cf:
         ae:3c:34:18:f8:48:a7:d3:0c:1a:4d:84:4d:12:37:57:0d:1b:
         c6:96:fe:fd:89:86:62:08:d0:80:85:13:32:ba:fc:b7:91:b0:
         de:51:f2:a8:9b:f8:cb:52:44:c6:83:75:e7:c7:88:2c:84:31:
         23:57:ef:9d:56:e8:bf:d6:26:cf:b1:f1:89:27:ff:5d:41:f0:
         30:be:f5:35:5a:2c:4c:7d:d2:ae:40:ce:c0:e6:e6:eb:2e:42:
         38:6c:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:06 2025 by rpki-client