Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/g0zXxHbqEo7xJSeyV0cfd7YGV9s.roa
File:                     g0zXxHbqEo7xJSeyV0cfd7YGV9s.roa (raw, json)
Hash identifier:          IqdE5rQFbS4q6+mXwRmVK4Y5CFj19tTyzQZKYx5pfpE=
Subject key identifier:   83:4C:D7:C4:76:EA:12:8E:F1:25:27:B2:57:47:1F:77:B6:06:57:DB
Certificate issuer:       /CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
Certificate serial:       0FAAF0
Authority key identifier: 48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/g0zXxHbqEo7xJSeyV0cfd7YGV9s.roa
Signing time:             Sun 06 Feb 2022 20:43:13 +0000
ROA not before:           Sun 06 Feb 2022 20:43:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        93.177.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026800 (0xfaaf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483c9d9d09e3ff7d728c03792d74ad19968ce27d
        Validity
            Not Before: Feb  6 20:43:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=834cd7c476ea128ef12527b257471f77b60657db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:2e:75:cb:6d:a0:34:9a:a0:77:e0:7c:ba:
                    84:de:10:53:b6:ca:29:d8:0d:0d:40:e6:97:e1:3f:
                    7d:7b:e0:9f:36:80:b3:f0:08:00:f6:9b:30:a4:f4:
                    66:08:c0:fe:a5:cc:c3:22:cc:31:70:6a:a9:b3:e6:
                    35:8b:69:9f:d6:26:42:8a:c1:9a:4e:44:9c:08:72:
                    e7:89:42:d0:ad:e4:84:4a:d3:f4:68:65:1a:5a:a2:
                    f4:a5:39:ec:1a:96:c0:20:02:dd:42:4a:67:39:dd:
                    62:99:27:c1:08:f5:22:00:aa:5b:a3:72:66:cb:02:
                    7b:dd:2f:39:b7:49:25:e1:aa:c7:5a:36:0c:ac:48:
                    e1:7c:79:95:d8:ca:1e:3c:29:6c:ec:cc:86:aa:54:
                    26:bf:65:27:c4:78:f9:6a:40:81:d7:cd:a7:c1:f1:
                    8e:b5:a0:a7:24:b5:94:a4:91:1c:f9:a9:fd:4d:e2:
                    bc:b6:2b:2f:6c:50:4a:0c:8d:01:24:71:b7:11:ca:
                    39:5e:17:d2:16:88:50:c2:72:9b:fe:ae:7f:b9:af:
                    71:ee:8e:67:51:d8:5f:9a:2e:c9:95:a4:39:b9:fc:
                    3b:2f:fa:3b:15:a0:b1:c4:31:e5:d7:ff:8d:33:7d:
                    90:37:4f:74:2f:a4:64:67:92:31:cf:7c:25:21:41:
                    f8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4C:D7:C4:76:EA:12:8E:F1:25:27:B2:57:47:1F:77:B6:06:57:DB
            X509v3 Authority Key Identifier:
                keyid:48:3C:9D:9D:09:E3:FF:7D:72:8C:03:79:2D:74:AD:19:96:8C:E2:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDydnQnj_31yjAN5LXStGZaM4n0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/g0zXxHbqEo7xJSeyV0cfd7YGV9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/617e64-e4ed-4e4e-9466-c46caf64e710/1/SDydnQnj_31yjAN5LXStGZaM4n0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:ee:0d:33:c9:01:0c:b4:8b:cb:34:a1:c5:24:c3:3f:c4:
         67:a5:0c:9f:48:a3:c2:bf:03:b5:2c:80:9c:bf:54:e2:15:25:
         75:99:3a:02:02:77:82:83:b3:b2:89:38:8b:ac:de:91:71:cd:
         5f:21:78:7d:41:5f:b6:90:4d:31:46:0f:ea:0a:b4:79:cb:7d:
         e9:44:2a:ba:68:b4:79:1b:2a:63:37:f6:c9:23:84:62:4d:31:
         16:dc:8e:ac:f3:c1:64:90:85:58:f0:32:9d:fe:8e:f2:6a:f8:
         1d:af:88:0b:af:38:60:bd:fb:9c:8b:9e:28:0a:61:5b:8e:8e:
         61:bf:97:39:3e:d0:81:3a:5f:ce:43:f6:07:a8:6f:a1:d0:11:
         29:4d:9a:36:17:46:3b:b8:49:cf:d1:d7:7b:10:60:5e:d2:f0:
         ca:45:19:78:95:cc:5c:74:f3:c6:ca:74:6f:1b:a8:fe:e2:69:
         a0:31:72:35:b6:f4:fc:bc:66:28:db:5c:db:de:3a:99:47:40:
         9d:e6:ac:e5:7f:09:ea:8b:7f:79:09:d4:eb:b9:a3:5a:35:b8:
         6f:29:35:8f:02:0c:b2:f3:20:60:09:f9:68:bf:97:15:a2:cd:
         23:1c:fc:34:b1:b0:63:c2:dc:72:0f:8e:8c:35:2f:80:af:6c:
         ae:0a:b7:6a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDD6rwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ4
M2M5ZDlkMDllM2ZmN2Q3MjhjMDM3OTJkNzRhZDE5OTY4Y2UyN2QwHhcNMjIwMjA2
MjA0MzEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4MzRjZDdjNDc2ZWEx
MjhlZjEyNTI3YjI1NzQ3MWY3N2I2MDY1N2RiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsJIudcttoDSaoHfgfLqE3hBTtsop2A0NQOaX4T99e+CfNoCz
8AgA9pswpPRmCMD+pczDIswxcGqps+Y1i2mf1iZCisGaTkScCHLniULQreSEStP0
aGUaWqL0pTnsGpbAIALdQkpnOd1imSfBCPUiAKpbo3JmywJ73S85t0kl4arHWjYM
rEjhfHmV2MoePCls7MyGqlQmv2UnxHj5akCB182nwfGOtaCnJLWUpJEc+an9TeK8
tisvbFBKDI0BJHG3Eco5XhfSFohQwnKb/q5/ua9x7o5nUdhfmi7JlaQ5ufw7L/o7
FaCxxDHl1/+NM32QN090L6RkZ5Ixz3wlIUH4cwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFINM18R26hKO8SUnsldHH3e2BlfbMB8GA1UdIwQYMBaAFEg8nZ0J4/99cowD
eS10rRmWjOJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
U0R5ZG5RbmpfMzF5akFONUxYU3RHWmFNNG4wLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85YS82MTdlNjQtZTRlZC00ZTRlLTk0NjYtYzQ2Y2FmNjRlNzEwLzEv
ZzB6WHhIYnFFbzd4SlNleVYwY2ZkN1lHVjlzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS82
MTdlNjQtZTRlZC00ZTRlLTk0NjYtYzQ2Y2FmNjRlNzEwLzEvU0R5ZG5RbmpfMzF5
akFONUxYU3RHWmFNNG4wLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbFpMA0GCSqGSIb3DQEBCwUAA4IB
AQA01+4NM8kBDLSLyzShxSTDP8RnpQyfSKPCvwO1LICcv1TiFSV1mToCAneCg7Oy
iTiLrN6Rcc1fIXh9QV+2kE0xRg/qCrR5y33pRCq6aLR5GypjN/bJI4RiTTEW3I6s
88FkkIVY8DKd/o7yavgdr4gLrzhgvfuci54oCmFbjo5hv5c5PtCBOl/OQ/YHqG+h
0BEpTZo2F0Y7uEnP0dd7EGBe0vDKRRl4lcxcdPPGynRvG6j+4mmgMXI1tvT8vGYo
21zb3jqZR0Cd5qzlfwnqi395CdTruaNaNbhvKTWPAgyy8yBgCflov5cVos0jHPw0
sbBjwtxyD46MNS+Ar2yuCrdq
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:31 2025 by rpki-client