Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/Yehkzrmz9aVjQM0VLCF-ZV21K8U.roa
File:                     Yehkzrmz9aVjQM0VLCF-ZV21K8U.roa (raw, json)
Hash identifier:          q5V5JOk+FYGhYJHnuM5/iwh0Q5bfOUAOx6ArMcHDvgk=
Subject key identifier:   61:E8:64:CE:B9:B3:F5:A5:63:40:CD:15:2C:21:7E:65:5D:B5:2B:C5
Certificate issuer:       /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial:       02F43B10
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/Yehkzrmz9aVjQM0VLCF-ZV21K8U.roa
Signing time:             Sat 01 Jan 2022 04:57:48 +0000
ROA not before:           Sat 01 Jan 2022 04:57:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12310
IP address blocks:        93.113.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49560336 (0x2f43b10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
        Validity
            Not Before: Jan  1 04:57:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61e864ceb9b3f5a56340cd152c217e655db52bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:ce:a1:18:b7:2e:56:cb:df:b7:b1:40:11:
                    34:32:7e:b1:b1:83:38:2e:7b:39:df:e1:44:d7:9d:
                    bc:16:1c:2d:95:a6:dc:df:17:b4:e9:2d:6b:c1:7f:
                    eb:74:34:eb:df:1e:53:38:ff:d8:74:b2:11:e8:f6:
                    92:d9:f0:ce:d1:a4:36:1b:2c:53:d6:34:db:bc:cd:
                    3e:bf:f5:9a:3f:98:13:23:a3:97:ef:d3:6c:f3:03:
                    49:56:dd:c5:9c:0d:36:7d:a0:93:a5:f0:8f:38:36:
                    64:70:bb:cd:5a:d8:13:83:ce:20:f7:66:e6:3b:92:
                    6b:87:dc:d8:5e:5d:2b:06:ae:05:49:72:b0:1e:ea:
                    2f:9c:8a:f0:4a:b3:5c:d7:b3:6c:db:72:8b:0d:72:
                    9e:9d:4c:22:d5:26:44:1b:c8:5b:9d:e0:aa:24:0a:
                    bf:d9:33:b9:36:c3:9d:eb:16:0f:e9:e7:e2:94:50:
                    32:2b:23:fe:30:10:3a:70:1f:2b:d5:2a:a4:8a:89:
                    ea:7d:39:96:61:0b:48:68:af:cf:48:1c:2f:77:70:
                    e6:e7:8f:62:45:94:00:0f:aa:c2:b6:8d:ac:0f:6d:
                    a4:eb:6a:5c:2c:82:fc:87:f9:f5:5b:4c:2c:f5:ac:
                    ab:e2:f8:d4:2a:fd:a8:c5:9b:0b:9e:81:26:e9:52:
                    e0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:64:CE:B9:B3:F5:A5:63:40:CD:15:2C:21:7E:65:5D:B5:2B:C5
            X509v3 Authority Key Identifier:
                keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/Yehkzrmz9aVjQM0VLCF-ZV21K8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:76:fd:0a:e0:78:75:74:e4:b2:8c:fd:44:a8:a8:a2:2f:82:
         2c:00:da:2e:ba:7a:54:19:fc:04:c1:81:5e:6f:a7:e8:44:a7:
         4b:07:33:10:16:16:5b:1f:95:3e:a4:0b:0e:2f:45:5b:63:87:
         33:2b:fb:6d:70:78:b2:6f:97:9b:75:88:a8:c6:be:bc:eb:8f:
         5c:43:23:94:20:72:70:21:a4:e6:77:d3:d6:c4:d5:d6:87:7f:
         98:9f:a1:62:d6:c3:52:65:5a:7e:5f:1e:4b:57:a7:b2:8d:d2:
         a5:74:d2:82:ea:29:a3:f6:16:18:e3:2b:07:5d:28:a9:d5:7c:
         83:19:54:29:c8:22:5c:66:22:d2:74:9e:34:8f:10:89:4e:2b:
         51:fc:d1:29:26:20:f1:af:c8:5a:19:cb:90:eb:30:0e:b3:0d:
         09:08:22:70:97:47:f1:b9:0a:7b:dc:15:ff:36:ba:f3:4a:ba:
         17:e2:f5:d0:a7:23:42:17:c0:72:49:3c:f6:ef:06:d3:0c:13:
         3e:0b:9e:3a:dc:2a:fe:cb:6e:dd:6f:3a:5d:79:e9:33:03:3a:
         37:b2:f3:75:2f:c9:d1:9f:a6:5c:24:94:94:a9:e0:c0:a6:93:
         23:00:06:60:33:90:bb:9a:39:8b:db:5b:76:68:3e:ad:12:27:
         5d:6f:04:a8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvQ7EDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MmY0OGY3ZmFlMDEyOTE2YTc3NWQ1ZTNiNmZhMjMxMDk4MzQzZWEwMB4XDTIyMDEw
MTA0NTc0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjFlODY0Y2ViOWIz
ZjVhNTYzNDBjZDE1MmMyMTdlNjU1ZGI1MmJjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALR1zqEYty5Wy9+3sUARNDJ+sbGDOC57Od/hRNedvBYcLZWm
3N8XtOkta8F/63Q0698eUzj/2HSyEej2ktnwztGkNhssU9Y027zNPr/1mj+YEyOj
l+/TbPMDSVbdxZwNNn2gk6Xwjzg2ZHC7zVrYE4POIPdm5juSa4fc2F5dKwauBUly
sB7qL5yK8EqzXNezbNtyiw1ynp1MItUmRBvIW53gqiQKv9kzuTbDnesWD+nn4pRQ
Misj/jAQOnAfK9UqpIqJ6n05lmELSGivz0gcL3dw5uePYkWUAA+qwraNrA9tpOtq
XCyC/If59VtMLPWsq+L41Cr9qMWbC56BJulS4OcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRh6GTOubP1pWNAzRUsIX5lXbUrxTAfBgNVHSMEGDAWgBRC9I9/rgEpFqd1
1eO2+iMQmDQ+oDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1F2U1BmNjRCS1JhbmRkWGp0dm9qRUpnMFBxQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvNDk0NDU1LTFkMmUtNGUyYi04ZjBlLTlhMGNmY2U4NzhhNC8x
L1llaGt6cm16OWFWalFNMFZMQ0YtWlYyMUs4VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
NDk0NDU1LTFkMmUtNGUyYi04ZjBlLTlhMGNmY2U4NzhhNC8xL1F2U1BmNjRCS1Jh
bmRkWGp0dm9qRUpnMFBxQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF1xmzANBgkqhkiG9w0BAQsFAAOC
AQEAq3b9CuB4dXTksoz9RKiooi+CLADaLrp6VBn8BMGBXm+n6ESnSwczEBYWWx+V
PqQLDi9FW2OHMyv7bXB4sm+Xm3WIqMa+vOuPXEMjlCBycCGk5nfT1sTV1od/mJ+h
YtbDUmVafl8eS1enso3SpXTSguopo/YWGOMrB10oqdV8gxlUKcgiXGYi0nSeNI8Q
iU4rUfzRKSYg8a/IWhnLkOswDrMNCQgicJdH8bkKe9wV/za680q6F+L10KcjQhfA
ckk89u8G0wwTPgueOtwq/stu3W86XXnpMwM6N7LzdS/J0Z+mXCSUlKngwKaTIwAG
YDOQu5o5i9tbdmg+rRInXW8EqA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:56 2025 by rpki-client