Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/M9mOomCl_qyvXDCIClsIIKsI4Mg.roa
File:                     M9mOomCl_qyvXDCIClsIIKsI4Mg.roa (raw, json)
Hash identifier:          bKWGu6D6LeXt6n7NYPoWLfg8lOZHfXnylI+PSVGMyyU=
Subject key identifier:   33:D9:8E:A2:60:A5:FE:AC:AF:5C:30:88:0A:5B:08:20:AB:08:E0:C8
Certificate issuer:       /CN=243603eff76daf94542f23d560f9fca579ac97ed
Certificate serial:       018220782DA33E437EF70024C23979D4793E
Authority key identifier: 24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/M9mOomCl_qyvXDCIClsIIKsI4Mg.roa
Signing time:             Thu 21 Jul 2022 11:15:23 +0000
ROA not before:           Thu 21 Jul 2022 11:15:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        62.106.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:78:2d:a3:3e:43:7e:f7:00:24:c2:39:79:d4:79:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243603eff76daf94542f23d560f9fca579ac97ed
        Validity
            Not Before: Jul 21 11:15:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33d98ea260a5feacaf5c30880a5b0820ab08e0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c2:23:f3:c6:21:94:c8:be:d7:ea:38:e7:ee:
                    31:60:d6:3e:57:a4:a2:6f:08:71:e2:ba:48:f3:b8:
                    54:88:68:46:54:65:05:d8:9c:36:ae:97:82:b3:19:
                    2b:57:87:06:5f:9e:27:56:4a:53:07:69:e6:7b:ad:
                    cf:4e:42:c9:af:5a:bb:65:e3:27:0a:39:41:24:8b:
                    81:57:07:60:c2:56:22:f4:b4:6a:a8:d4:9c:f5:96:
                    d1:f5:bf:33:9c:5b:70:29:7d:f0:60:ff:1c:04:3d:
                    23:3a:fe:93:f6:2a:aa:57:3e:98:7e:49:c9:3d:73:
                    42:44:71:38:f1:30:d0:ca:fd:56:7a:3d:5f:9d:d1:
                    de:00:c1:c7:64:ca:3a:09:cc:8d:da:8b:02:44:77:
                    e7:e1:ad:cd:b3:41:d9:d2:35:8e:78:3b:11:4a:e7:
                    49:f1:e5:68:d0:06:dc:2e:b4:f6:ba:95:24:a9:2c:
                    9c:be:84:ea:a9:8d:d1:54:a8:34:91:96:57:a2:5d:
                    e0:f2:ee:b7:cc:7b:45:4e:14:40:38:3b:48:29:3f:
                    ad:08:f0:eb:d1:78:70:ef:55:ca:ac:88:09:7c:c1:
                    33:77:a9:6b:08:0e:3b:29:37:f3:15:25:91:9d:14:
                    9c:f5:3c:c7:cb:ac:6d:4c:ec:69:02:f3:e0:17:ed:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D9:8E:A2:60:A5:FE:AC:AF:5C:30:88:0A:5B:08:20:AB:08:E0:C8
            X509v3 Authority Key Identifier:
                keyid:24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/M9mOomCl_qyvXDCIClsIIKsI4Mg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/JDYD7_dtr5RULyPVYPn8pXmsl-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:97:39:4b:07:8e:6c:01:ae:43:77:0d:62:c6:6c:60:77:d7:
         bc:4a:34:d4:2a:bd:2d:2b:e6:a2:8b:b1:96:0e:12:d6:84:49:
         e1:e0:1a:90:be:e3:a8:8d:8b:f7:56:c7:0a:52:1b:6a:71:e3:
         d9:1f:38:99:0a:a2:62:0b:71:b2:df:9e:f7:54:c3:c7:4b:d8:
         e3:ca:c3:da:cd:c6:b2:60:c3:9d:e9:47:fa:4b:b6:79:8c:54:
         5c:0a:9c:66:dc:19:64:98:de:6a:fa:3f:9c:67:97:0a:72:8a:
         6f:b5:0c:b3:89:0f:b8:96:ff:0b:ea:58:01:d9:1e:a4:b5:67:
         72:6e:bd:99:d3:25:d6:e2:be:af:73:f7:ab:32:07:8d:af:da:
         c4:a4:76:02:c5:ef:79:7b:cb:a2:23:16:da:95:b1:42:cf:25:
         f3:d3:80:b4:93:67:0b:4a:77:f0:ac:11:25:cb:3b:f8:5c:5f:
         b6:ae:29:76:c5:9e:f5:d0:a0:ac:0f:d3:b0:69:02:63:54:7a:
         b0:88:83:72:9a:a6:8c:82:83:9f:58:cc:78:ae:8c:8c:c0:a9:
         ca:0b:6a:34:95:7e:74:54:98:71:63:b8:59:71:27:14:71:29:
         a4:e5:aa:7a:66:54:00:39:c7:fc:4d:5b:47:c1:47:96:1c:46:
         70:8f:ee:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIgeC2jPkN+9wAkwjl51Hk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzYwM2VmZjc2ZGFmOTQ1NDJmMjNkNTYwZjlmY2E1Nzlh
Yzk3ZWQwHhcNMjIwNzIxMTExNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2Q5OGVhMjYwYTVmZWFjYWY1YzMwODgwYTViMDgyMGFiMDhlMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcIj88YhlMi+1+o45+4xYNY+V6Si
bwhx4rpI87hUiGhGVGUF2Jw2rpeCsxkrV4cGX54nVkpTB2nme63PTkLJr1q7ZeMn
CjlBJIuBVwdgwlYi9LRqqNSc9ZbR9b8znFtwKX3wYP8cBD0jOv6T9iqqVz6YfknJ
PXNCRHE48TDQyv1Wej1fndHeAMHHZMo6CcyN2osCRHfn4a3Ns0HZ0jWOeDsRSudJ
8eVo0AbcLrT2upUkqSycvoTqqY3RVKg0kZZXol3g8u63zHtFThRAODtIKT+tCPDr
0Xhw71XKrIgJfMEzd6lrCA47KTfzFSWRnRSc9TzHy6xtTOxpAvPgF+2V1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPZjqJgpf6sr1wwiApbCCCrCODIMB8GA1UdIwQY
MBaAFCQ2A+/3ba+UVC8j1WD5/KV5rJftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRZRDdfZHRyNVJVTHlQVllQbjhwWG1zbC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOGE0Y2UtMDExNy00Y2M1LTk4MjYt
N2VmNmUxNzA0OWU1LzEvTTltT29tQ2xfcXl2WERDSUNsc0lJS3NJNE1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mOGE0Y2UtMDExNy00Y2M1LTk4MjYtN2VmNmUxNzA0OWU1
LzEvSkRZRDdfZHRyNVJVTHlQVllQbjhwWG1zbC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpaMA0G
CSqGSIb3DQEBCwUAA4IBAQATlzlLB45sAa5Ddw1ixmxgd9e8SjTUKr0tK+aii7GW
DhLWhEnh4BqQvuOojYv3VscKUhtqcePZHziZCqJiC3Gy3573VMPHS9jjysPazcay
YMOd6Uf6S7Z5jFRcCpxm3BlkmN5q+j+cZ5cKcopvtQyziQ+4lv8L6lgB2R6ktWdy
br2Z0yXW4r6vc/erMgeNr9rEpHYCxe95e8uiIxbalbFCzyXz04C0k2cLSnfwrBEl
yzv4XF+2ril2xZ710KCsD9OwaQJjVHqwiINymqaMgoOfWMx4royMwKnKC2o0lX50
VJhxY7hZcScUcSmk5ap6ZlQAOcf8TVtHwUeWHEZwj+5T
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:00 2025 by rpki-client