Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/8rSCjBPuxAHFBQogJPdZ8DYAcio.roa
File:                     8rSCjBPuxAHFBQogJPdZ8DYAcio.roa (raw, json)
Hash identifier:          PrEkDTaA/mI+xPuQgYAzV4Ss8HowIIe+OYlXBRjtATw=
Subject key identifier:   F2:B4:82:8C:13:EE:C4:01:C5:05:0A:20:24:F7:59:F0:36:00:72:2A
Certificate issuer:       /CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
Certificate serial:       366321
Authority key identifier: E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/8rSCjBPuxAHFBQogJPdZ8DYAcio.roa
Signing time:             Mon 21 Feb 2022 15:24:49 +0000
ROA not before:           Mon 21 Feb 2022 15:24:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     396356
IP address blocks:        91.227.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3564321 (0x366321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96c63b494b0d08a55aaa1805f620db8dad2557f
        Validity
            Not Before: Feb 21 15:24:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2b4828c13eec401c5050a2024f759f03600722a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:8c:89:cf:ba:dc:55:81:be:1f:5f:a5:e6:
                    53:12:18:b0:d0:81:f0:a8:9b:b0:a4:55:2b:10:ec:
                    59:a8:e3:f9:39:64:bd:50:77:40:f0:48:4e:01:9d:
                    fc:f8:4f:92:7a:ec:7e:97:95:18:5c:95:2e:4f:64:
                    13:0c:35:85:a4:b5:aa:ec:71:b9:2e:3d:72:67:6f:
                    b5:64:39:43:ee:a4:6b:93:2e:24:37:c7:1b:a6:d3:
                    fa:99:97:18:fc:b2:15:3d:95:6d:02:19:3d:12:63:
                    70:c7:83:d0:cc:24:01:05:b4:7a:c8:5a:7d:64:30:
                    2c:4d:be:10:5a:b9:95:60:c3:54:d0:7b:5c:67:3a:
                    97:89:72:d8:1e:5f:f8:7b:5b:ad:33:84:5f:cf:bf:
                    b9:90:b7:0b:73:55:8f:b7:d2:11:f1:24:40:72:aa:
                    1b:c8:0c:3b:66:15:b7:ea:7f:6e:6e:90:dd:dd:46:
                    75:3f:02:34:8a:e9:87:1e:21:d7:c6:f3:e9:ee:2b:
                    d7:47:65:ec:11:58:d9:67:04:69:c3:90:7d:a0:9e:
                    e2:4d:a2:00:4f:bc:eb:6e:76:88:01:7d:cc:3b:e0:
                    fd:9a:95:ec:f5:b9:21:5e:9e:9b:31:da:b7:3e:41:
                    b0:da:bb:ca:c3:bd:24:51:21:45:bb:e4:53:df:2e:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:82:8C:13:EE:C4:01:C5:05:0A:20:24:F7:59:F0:36:00:72:2A
            X509v3 Authority Key Identifier:
                keyid:E9:6C:63:B4:94:B0:D0:8A:55:AA:A1:80:5F:62:0D:B8:DA:D2:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WxjtJSw0IpVqqGAX2INuNrSVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/8rSCjBPuxAHFBQogJPdZ8DYAcio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/342f39-cdb0-4d50-9c72-3a3862118a0f/1/6WxjtJSw0IpVqqGAX2INuNrSVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:95:d3:51:f9:55:05:c1:ee:d5:f9:a6:98:2e:ab:cf:0b:62:
         1e:0e:98:f3:a7:a7:5a:e7:b5:18:6b:ba:50:8d:58:19:2b:a9:
         93:f2:f3:e1:f8:ad:34:6b:7c:db:fc:d2:34:13:03:19:8d:db:
         a5:68:f3:2c:d3:9c:41:72:87:5e:98:26:49:cb:d0:b8:aa:e0:
         97:90:04:4b:9d:5d:6f:a0:56:02:0d:41:51:a1:7a:7b:e9:2a:
         15:8a:2f:57:e3:49:41:d8:ba:07:24:a1:aa:c3:8d:7b:e6:18:
         b8:6f:fb:74:a6:77:63:fd:fc:62:65:9e:8f:71:50:8c:8a:12:
         6e:af:4e:9f:41:66:b0:25:9d:12:02:49:68:80:99:71:13:e5:
         aa:de:a3:9e:10:93:0e:6a:9f:78:e5:86:c1:cc:82:6d:6b:09:
         81:bd:74:01:18:7c:a2:68:38:dd:3b:6e:55:b4:5e:dc:d6:db:
         56:82:e2:37:59:3e:15:f9:51:5b:9f:61:40:9c:9d:f8:03:a2:
         b0:b9:f4:33:ca:aa:80:4c:8d:43:d7:c9:81:08:2a:0f:01:94:
         03:07:4d:c7:1b:25:ab:1d:9c:50:3a:52:dd:f0:83:46:81:1d:
         df:c6:07:7b:dc:0c:0c:ad:43:9a:d5:0d:66:e4:19:42:f9:89:
         ce:7a:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:10:59 2025 by rpki-client