Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/ffLQ5c_6MmpvWerBvXSxOfVT6yA.roa
File:                     ffLQ5c_6MmpvWerBvXSxOfVT6yA.roa (raw, json)
Hash identifier:          iaYqNrvwGelbgSB3HZsDc2yZ+rcZPZE4ntsUAl/F0Vg=
Subject key identifier:   7D:F2:D0:E5:CF:FA:32:6A:6F:59:EA:C1:BD:74:B1:39:F5:53:EB:20
Certificate issuer:       /CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Certificate serial:       0182208B68073F7D5C4DF7C154B10476BF8B
Authority key identifier: 99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/ffLQ5c_6MmpvWerBvXSxOfVT6yA.roa
Signing time:             Thu 21 Jul 2022 11:36:23 +0000
ROA not before:           Thu 21 Jul 2022 11:36:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        193.162.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:8b:68:07:3f:7d:5c:4d:f7:c1:54:b1:04:76:bf:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
        Validity
            Not Before: Jul 21 11:36:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7df2d0e5cffa326a6f59eac1bd74b139f553eb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:a1:ca:cc:fc:c8:c8:93:7d:9c:f9:a3:88:
                    5e:68:44:b9:75:df:f0:bb:86:30:ca:e4:67:62:5c:
                    23:df:52:a9:e8:a0:56:8b:87:17:16:f3:f3:b8:06:
                    5b:26:62:7d:b6:db:ec:00:ee:03:6c:9e:82:75:e1:
                    83:be:20:a9:e2:74:01:8c:73:b9:c2:52:c0:dc:da:
                    c9:24:a0:0a:c9:5f:a3:3b:fa:24:d8:c3:42:8a:a5:
                    fb:ba:85:49:a9:78:39:73:fe:27:66:f9:b6:e6:c9:
                    0f:a0:dc:e2:ff:dd:90:5f:83:b3:c1:84:c7:a3:0d:
                    1f:c7:3f:aa:71:36:a6:8b:25:f7:30:04:bd:09:84:
                    a3:89:48:fa:b8:9d:f7:2d:9e:54:d8:91:e0:28:1b:
                    44:61:49:34:fa:68:88:68:fa:1e:3d:4a:27:08:cf:
                    04:4d:68:17:97:d3:56:41:61:b0:fd:d7:45:39:d5:
                    0c:27:36:11:69:88:ed:4b:a9:d6:b5:20:be:9b:ed:
                    8c:5c:3d:ca:fa:93:05:8b:3f:27:0a:70:3e:e5:eb:
                    bd:fc:b2:d2:af:d0:3e:fb:9d:7b:26:29:f4:1f:e5:
                    73:f6:bc:75:73:7a:8c:dc:6f:15:05:ea:db:ea:b4:
                    e7:97:4d:be:65:62:11:82:e0:05:91:6a:d1:3b:db:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F2:D0:E5:CF:FA:32:6A:6F:59:EA:C1:BD:74:B1:39:F5:53:EB:20
            X509v3 Authority Key Identifier:
                keyid:99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/ffLQ5c_6MmpvWerBvXSxOfVT6yA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:50:16:a8:9c:8c:17:1d:bf:c0:15:23:2e:c7:c4:8f:05:e7:
         5a:bf:c1:da:d8:bd:b4:b4:5d:30:fa:5b:e0:ff:a6:fc:d3:46:
         3a:29:80:5f:06:62:ca:27:8b:8f:b3:4b:a1:77:b8:49:a9:b1:
         18:94:58:76:e1:ed:7c:df:9b:83:68:a4:76:fd:bd:9a:78:7d:
         bc:e3:fe:4f:7d:58:95:e9:1f:c8:9d:b8:9b:17:cb:2e:96:47:
         e9:63:48:4e:3c:37:9c:49:cc:7d:ed:9d:5e:97:07:60:16:7f:
         7e:3c:b3:c3:d9:3e:fc:12:ae:07:54:19:c4:cf:b5:38:04:8b:
         d0:81:8b:73:0b:43:59:c9:92:85:37:29:64:a9:08:f5:7b:f4:
         f9:75:2d:62:f8:22:63:da:47:4c:4b:b3:a7:2e:e3:4c:ba:61:
         f2:a3:94:0f:5b:b6:46:8e:ce:c8:14:da:a2:64:be:02:da:a7:
         d6:ac:c7:19:ee:a0:30:88:c5:27:e7:91:55:78:76:3a:54:84:
         e9:75:f5:72:93:e0:da:27:63:1c:f2:54:a9:cf:3d:34:1c:9e:
         49:1c:58:b5:4a:66:8b:ba:48:e4:37:64:93:68:2a:ee:0b:ca:
         9f:4e:f1:ea:f4:d5:4c:6f:a3:9b:ea:e5:d9:85:96:1a:3b:2b:
         28:5f:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:36 2025 by rpki-client