Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fe5bb3-52b4-4025-a547-642722d76fe1/1/E9xp2aoH3K7X6SREZ9vv42UHfy0.roa
File:                     E9xp2aoH3K7X6SREZ9vv42UHfy0.roa (raw, json)
Hash identifier:          vWpGgmZrVjRBKxfD/C8tGxw+SDcJUfDh7685+kxparQ=
Subject key identifier:   13:DC:69:D9:AA:07:DC:AE:D7:E9:24:44:67:DB:EF:E3:65:07:7F:2D
Certificate issuer:       /CN=5e1b43d5a238bba726fee505e584da7b9b5d576a
Certificate serial:       0156E9
Authority key identifier: 5E:1B:43:D5:A2:38:BB:A7:26:FE:E5:05:E5:84:DA:7B:9B:5D:57:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XhtD1aI4u6cm_uUF5YTae5tdV2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fe5bb3-52b4-4025-a547-642722d76fe1/1/E9xp2aoH3K7X6SREZ9vv42UHfy0.roa
Signing time:             Thu 30 Jun 2022 13:08:27 +0000
ROA not before:           Thu 30 Jun 2022 13:08:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44066
IP address blocks:        91.217.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87785 (0x156e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1b43d5a238bba726fee505e584da7b9b5d576a
        Validity
            Not Before: Jun 30 13:08:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13dc69d9aa07dcaed7e9244467dbefe365077f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:80:db:88:3c:40:ef:5d:ab:e8:e9:02:5a:
                    f3:d1:fe:26:7a:ba:c4:66:70:69:4b:10:4e:40:1e:
                    2f:47:5d:c2:3c:0d:ba:14:55:46:e8:16:43:08:71:
                    34:42:27:6a:88:e6:53:91:c9:49:4d:c1:5d:7b:15:
                    cf:ca:8b:87:52:5d:95:ae:80:f0:e5:b5:67:7a:c9:
                    a6:e8:88:36:02:1e:85:2f:44:53:c9:a0:72:63:fb:
                    6a:8d:63:17:10:58:8c:25:2a:92:73:e6:9b:f2:47:
                    ef:8a:b4:c0:c9:40:81:5e:44:be:68:3d:a9:4f:d1:
                    41:76:0b:d5:a1:63:b9:50:00:41:a7:b8:0b:e8:35:
                    c1:fb:b0:28:46:e3:47:c6:37:47:64:1c:25:0f:58:
                    02:06:0f:8d:47:d4:b5:59:6f:e7:f5:76:e4:89:1d:
                    4d:05:07:de:fb:e4:64:df:ba:8e:a4:6f:04:3c:2d:
                    5c:3c:fd:e4:00:06:67:82:c6:70:8e:37:7c:5e:d8:
                    eb:9a:78:6c:43:1c:04:5c:22:c2:bb:61:b2:87:0c:
                    f9:23:7c:7d:06:40:50:cf:85:69:81:f3:1c:28:77:
                    b2:ae:c2:03:ec:30:13:e5:a3:50:1b:21:55:61:ce:
                    f3:4d:c7:13:c5:17:2e:1f:27:65:0a:b7:4a:79:9f:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DC:69:D9:AA:07:DC:AE:D7:E9:24:44:67:DB:EF:E3:65:07:7F:2D
            X509v3 Authority Key Identifier:
                keyid:5E:1B:43:D5:A2:38:BB:A7:26:FE:E5:05:E5:84:DA:7B:9B:5D:57:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhtD1aI4u6cm_uUF5YTae5tdV2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fe5bb3-52b4-4025-a547-642722d76fe1/1/E9xp2aoH3K7X6SREZ9vv42UHfy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fe5bb3-52b4-4025-a547-642722d76fe1/1/XhtD1aI4u6cm_uUF5YTae5tdV2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:89:b8:bc:32:12:55:ff:33:37:e2:bc:82:db:cd:f1:b5:52:
         e7:19:30:5c:89:e8:ea:ae:a6:97:1f:a2:7d:fc:36:ac:b9:48:
         4a:91:4f:cf:a6:91:80:ca:e4:06:36:b3:55:7c:65:2b:54:52:
         fb:5c:b0:5a:e1:1a:80:4d:a0:24:00:08:f1:ae:41:55:d9:dc:
         ad:3c:a1:4e:e4:58:a3:c5:d0:33:20:a7:e3:f2:0c:dd:0c:04:
         8b:71:47:48:42:8d:cc:65:d8:dd:c3:19:d4:3d:bb:17:6c:38:
         29:b6:8a:54:e0:62:b0:3a:1d:0c:65:fc:fc:9e:1e:0e:70:ff:
         19:c3:9f:76:47:37:fb:db:71:2e:70:38:7b:8b:28:e2:ad:cc:
         09:5b:c7:46:18:b2:c9:94:34:54:c8:a5:e3:a6:10:09:18:9e:
         f6:92:74:27:0d:a9:60:62:e2:80:32:43:34:4c:54:29:27:2d:
         4a:aa:b9:e7:a0:19:b7:a7:11:9d:43:43:cf:40:bc:d1:ef:9f:
         1c:95:55:bb:36:cd:60:af:93:6c:4b:84:c7:e1:49:da:13:5d:
         f6:f9:99:1e:4e:97:be:3b:e3:bc:e3:69:98:74:42:d5:61:b7:
         01:d3:10:18:18:92:44:73:6a:a3:cc:08:02:45:41:d1:20:6b:
         70:54:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:18 2025 by rpki-client