Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/FvJhwJiMnn0Y1cIxgNBQD9oJu5E.roa
File:                     FvJhwJiMnn0Y1cIxgNBQD9oJu5E.roa (raw, json)
Hash identifier:          KuJFEN+Xi62Am8c4rI3m3BJyjVphBgwjTZC03Ds3bs4=
Subject key identifier:   16:F2:61:C0:98:8C:9E:7D:18:D5:C2:31:80:D0:50:0F:DA:09:BB:91
Certificate issuer:       /CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Certificate serial:       02967E94
Authority key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/FvJhwJiMnn0Y1cIxgNBQD9oJu5E.roa
Signing time:             Mon 13 Jun 2022 20:10:44 +0000
ROA not before:           Mon 13 Jun 2022 20:10:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.88.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43417236 (0x2967e94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
        Validity
            Not Before: Jun 13 20:10:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16f261c0988c9e7d18d5c23180d0500fda09bb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:67:2e:91:96:ba:cc:ea:7e:88:1c:3c:e1:
                    39:af:bd:a1:0e:23:e0:de:52:48:35:9f:38:d5:a3:
                    8d:e8:c6:7d:0e:bc:e0:dc:ae:f8:98:8f:d4:35:f6:
                    77:12:7a:e3:2b:51:1f:43:2f:fb:86:ac:d6:2c:ac:
                    2c:0b:60:1c:ca:10:70:f5:f2:e6:b4:eb:f1:3a:0f:
                    ad:78:71:c3:26:e0:8b:42:34:38:1f:3e:cb:3c:05:
                    94:94:4d:2d:54:8f:6f:0e:3e:f0:40:a6:2f:8e:a0:
                    1c:e3:ef:f3:5f:65:34:a5:2b:e8:d4:09:47:73:9d:
                    02:78:ab:4a:4c:f4:a9:e8:b3:38:b0:8f:0b:11:73:
                    18:34:06:99:08:3b:e2:5b:86:f6:ea:7d:4c:26:48:
                    0f:5f:3c:ae:b6:40:97:35:ea:36:5c:28:09:2d:80:
                    2a:8d:c1:96:cb:88:45:e2:27:45:7f:79:87:40:81:
                    33:27:24:23:ca:ca:d9:41:8d:1f:ce:05:b8:c5:58:
                    d8:cc:da:29:19:a0:50:d7:e1:a5:dd:e5:bf:42:9b:
                    35:89:cc:ff:d7:30:4d:82:9c:ee:88:ef:92:ec:03:
                    8d:8d:c2:7f:fb:5b:66:d5:61:8e:f4:f4:ee:c3:f9:
                    d6:f3:ec:60:bd:18:f5:ac:af:49:2a:ac:1b:c6:6c:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:61:C0:98:8C:9E:7D:18:D5:C2:31:80:D0:50:0F:DA:09:BB:91
            X509v3 Authority Key Identifier:
                keyid:D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/FvJhwJiMnn0Y1cIxgNBQD9oJu5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3d:43:20:a6:0e:d7:e6:6c:30:34:dc:b1:be:74:2d:f5:29:
         e2:c5:d0:a2:1f:82:87:b0:07:67:26:d8:9e:da:da:0f:af:85:
         52:3a:f2:13:6f:b4:4e:29:31:ca:aa:aa:e6:6c:e9:d6:57:c5:
         1a:e0:16:63:41:c4:0b:b7:a0:93:3a:c3:f8:4a:44:e5:de:dd:
         b7:7d:f6:0a:9d:c6:a2:64:13:2f:2d:6b:1c:4b:57:0e:16:36:
         aa:b0:c5:c2:ec:fa:bc:d2:ef:8b:86:39:7f:2c:fc:69:bf:52:
         e3:30:ce:f4:bb:c2:ca:c0:f4:92:96:16:2d:b5:38:0d:1a:11:
         29:88:06:9a:0a:8b:0a:89:10:2a:c0:3a:10:bc:c1:88:da:e1:
         c0:16:84:7a:b8:f9:44:f3:12:89:61:ae:bc:5e:bd:a2:48:c4:
         ff:88:7d:fb:36:1d:79:d2:95:94:a6:44:26:21:e3:cc:f6:4d:
         dc:44:cb:18:1d:f5:68:9d:da:5e:7a:ea:5c:ab:9b:00:8e:0e:
         7d:da:1a:f2:83:80:c4:87:74:44:46:e9:de:34:72:1d:b2:05:
         5e:39:b7:d6:8f:fa:1d:55:b6:e5:8d:ed:f3:d7:77:40:ac:2b:
         2b:62:ba:91:11:b5:dc:80:3c:01:9e:fa:bb:61:0e:de:d5:42:
         e1:37:7e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:22 2025 by rpki-client