Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/t4di8BQad1o3PiH3889Mj46TCxA.roa
File:                     t4di8BQad1o3PiH3889Mj46TCxA.roa (raw, json)
Hash identifier:          679OHpQ0KXssXiIi4QZenYbhSxN8UUjTyZyBPG3Svo4=
Subject key identifier:   B7:87:62:F0:14:1A:77:5A:37:3E:21:F7:F3:CF:4C:8F:8E:93:0B:10
Certificate issuer:       /CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Certificate serial:       0183ABFF397E239393861B633F9C62D2311C
Authority key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/t4di8BQad1o3PiH3889Mj46TCxA.roa
Signing time:             Thu 06 Oct 2022 06:32:53 +0000
ROA not before:           Thu 06 Oct 2022 06:32:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.246.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ab:ff:39:7e:23:93:93:86:1b:63:3f:9c:62:d2:31:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
        Validity
            Not Before: Oct  6 06:32:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b78762f0141a775a373e21f7f3cf4c8f8e930b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:17:c2:71:c9:fd:ef:25:94:12:4c:1c:70:
                    76:29:b8:0d:c2:be:ac:f2:8c:7c:43:8e:96:50:da:
                    5e:74:f1:2c:52:69:2a:d9:ac:db:0d:76:4f:8a:f7:
                    4f:5a:b6:1f:d2:b2:6b:d4:d3:f6:98:7c:d4:3d:09:
                    85:0f:b3:95:0d:dd:51:b9:c5:cf:5a:46:71:56:5e:
                    ea:91:7b:fb:61:87:16:b7:0c:c0:14:c5:7d:5b:66:
                    fe:ce:72:63:a1:2b:9a:f8:10:d3:c8:bc:41:32:92:
                    4a:9d:8d:66:e5:d5:7f:a6:7b:95:67:58:23:ad:3a:
                    da:5f:9c:4d:23:b3:d6:56:b2:86:a8:42:b4:0d:41:
                    fd:6f:6c:eb:ce:6d:0f:91:8b:3f:75:8d:8a:31:4b:
                    7e:f0:1a:4b:95:e9:33:68:49:7c:40:ac:05:6b:ab:
                    64:e5:bf:b9:8f:1a:66:6a:d1:2f:69:76:b7:f0:18:
                    f1:57:66:2a:bd:51:d8:cf:aa:e4:68:54:d0:08:6b:
                    f7:3e:04:ef:f3:47:56:63:22:b5:b9:dc:d6:f6:e7:
                    8a:7d:1e:15:c0:c0:40:97:46:16:e9:4a:4a:6e:51:
                    53:ae:07:d4:6e:97:29:36:a0:13:49:ba:53:a1:88:
                    c1:61:ab:4c:a8:a7:39:43:cf:0e:c8:56:42:b4:96:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:87:62:F0:14:1A:77:5A:37:3E:21:F7:F3:CF:4C:8F:8E:93:0B:10
            X509v3 Authority Key Identifier:
                keyid:4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/t4di8BQad1o3PiH3889Mj46TCxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ea:17:39:09:1f:6d:75:72:08:79:22:bf:5f:6e:39:74:53:4f:
         0f:48:7a:a2:79:52:db:4b:94:22:43:0d:12:ef:02:86:27:db:
         f4:bb:92:98:95:7d:ae:59:6c:78:76:ad:15:a2:36:0f:51:f6:
         ed:09:93:48:03:ba:34:13:6a:02:79:df:e0:7b:03:a3:4a:bc:
         e9:2a:da:57:bd:2b:11:38:fd:93:4a:72:8c:30:25:ea:72:3a:
         1f:60:6b:46:18:12:ff:1e:4f:93:30:39:c0:59:6e:b1:e2:42:
         27:0c:61:91:c0:f3:40:29:d6:9e:52:b4:98:9f:44:d3:a7:d2:
         c9:dd:ed:a7:75:7b:ae:c7:d3:68:67:ef:f2:1a:0d:96:31:0e:
         f1:8a:03:85:ab:b3:86:44:42:70:f7:0d:ec:c6:b8:ef:bf:85:
         da:b6:ac:71:23:9e:f3:e0:ab:63:d2:15:46:fb:0d:d1:be:f0:
         85:08:a7:de:53:3b:cb:99:b2:f5:c3:90:05:84:19:70:7a:14:
         cc:ff:79:d9:4c:65:0c:2d:38:86:c1:78:a4:94:b7:61:da:c5:
         ab:c6:99:99:82:ef:01:f0:b0:6f:27:08:a5:7a:d7:c0:83:89:
         08:a0:c3:c7:27:ef:8d:23:27:c9:0a:dc:d7:b4:ca:cd:b8:4f:
         6a:2c:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:18 2025 by rpki-client