Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/bxPtegb79Lay7hYujNlQsodzr6Y.roa
File:                     bxPtegb79Lay7hYujNlQsodzr6Y.roa (raw, json)
Hash identifier:          JAEDYPmti8Y9wqxwD0JB8PfozhvO8j/qz80KWtxOMQs=
Subject key identifier:   6F:13:ED:7A:06:FB:F4:B6:B2:EE:16:2E:8C:D9:50:B2:87:73:AF:A6
Certificate issuer:       /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial:       02BE59E3
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/bxPtegb79Lay7hYujNlQsodzr6Y.roa
Signing time:             Thu 31 Mar 2022 08:08:49 +0000
ROA not before:           Thu 31 Mar 2022 08:08:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29405
IP address blocks:        93.93.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46029283 (0x2be59e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
        Validity
            Not Before: Mar 31 08:08:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f13ed7a06fbf4b6b2ee162e8cd950b28773afa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:81:67:88:15:7a:44:3d:b9:48:aa:70:e4:
                    d5:79:a2:82:64:80:41:7a:6a:19:12:cb:21:bc:45:
                    19:33:2d:42:44:42:b1:c0:64:da:62:60:3d:4f:c7:
                    6b:84:e6:92:40:80:db:45:69:b9:be:51:f0:3c:9c:
                    ea:f3:7d:bd:f6:ad:ab:92:98:39:87:ac:79:fe:2e:
                    15:89:e5:cd:63:cc:c7:f7:03:47:16:b7:0f:b3:ad:
                    f0:34:49:0d:3a:71:e3:1b:b6:1f:5c:d7:8f:cf:6f:
                    f6:cd:09:67:fc:fe:de:bc:df:ea:6e:96:8c:21:33:
                    72:e9:a4:bd:b2:fe:33:c0:e2:b6:9e:b1:d3:1e:8d:
                    09:6a:3e:84:1c:38:dd:0a:43:02:71:e4:cd:b4:bb:
                    93:27:8b:dc:a1:f5:83:ad:43:55:de:7d:02:66:a7:
                    9c:15:4b:0a:fb:f7:29:71:55:b0:68:16:f3:e7:f4:
                    d1:aa:8e:66:17:27:7a:d7:be:93:07:50:9c:65:b4:
                    9a:d1:93:c0:9d:4f:b4:cb:03:ef:04:23:0b:e5:f5:
                    dd:df:c1:a4:fe:65:78:c6:6d:19:10:d0:72:d5:a0:
                    b5:6e:cb:67:09:d9:d6:db:8f:2c:f5:f8:8e:ff:5a:
                    97:81:2d:2e:95:5e:eb:7d:1c:6b:22:03:b6:aa:8a:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:13:ED:7A:06:FB:F4:B6:B2:EE:16:2E:8C:D9:50:B2:87:73:AF:A6
            X509v3 Authority Key Identifier:
                keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/bxPtegb79Lay7hYujNlQsodzr6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:86:d4:38:d6:32:7a:48:0d:6d:41:e0:f8:11:80:ef:2f:11:
         90:d5:5e:b8:26:cd:88:eb:cf:27:e0:67:86:a7:17:aa:c8:9f:
         63:83:c2:f9:08:0a:0e:a0:5b:30:61:f1:05:a6:36:9e:f7:87:
         6d:d2:fb:a9:a9:61:96:8b:67:95:7c:da:64:8b:71:d8:7b:98:
         31:60:ab:22:45:92:87:4d:76:91:a9:07:0f:fe:49:9b:82:ed:
         c8:8c:c8:c7:af:db:58:55:4c:52:99:33:a5:96:1e:5d:78:55:
         6d:5b:8d:f1:16:34:83:7c:e6:03:9f:24:76:38:21:bd:3d:c3:
         d7:e0:d8:6d:8c:e9:fa:49:47:59:51:7d:22:39:cd:e1:cc:f8:
         c4:79:6e:2e:f2:30:ab:66:d5:37:79:20:53:7e:fe:f0:1f:01:
         42:ff:40:d6:cf:f9:0d:b5:a9:89:dc:f1:86:b6:02:e5:b0:f1:
         29:bc:fd:16:7d:11:60:7d:77:9d:19:d4:d1:28:44:88:5e:95:
         61:f7:96:a2:fc:7b:7a:a7:b1:d1:e6:e1:16:82:e3:48:9b:5d:
         d9:4a:ce:47:87:39:aa:8a:ee:2b:64:b8:25:25:2c:4f:06:5e:
         77:be:89:d3:6c:4d:58:de:f4:1d:de:58:ce:f1:96:e9:40:b0:
         3c:73:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:37 2025 by rpki-client