Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/EDh99Dt7VLZeu30G7tzr-Iu45rA.roa
File:                     EDh99Dt7VLZeu30G7tzr-Iu45rA.roa (raw, json)
Hash identifier:          6bdc24+Nx6XXBWyWHrpTbLqz0htnQTj/c3V7YYnJSiA=
Subject key identifier:   10:38:7D:F4:3B:7B:54:B6:5E:BB:7D:06:EE:DC:EB:F8:8B:B8:E6:B0
Certificate issuer:       /CN=8e87e9a228f1e24cdd07ea44a503104d41a26fd2
Certificate serial:       011871
Authority key identifier: 8E:87:E9:A2:28:F1:E2:4C:DD:07:EA:44:A5:03:10:4D:41:A2:6F:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jofpoijx4kzdB-pEpQMQTUGib9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/EDh99Dt7VLZeu30G7tzr-Iu45rA.roa
Signing time:             Thu 16 Jun 2022 21:47:44 +0000
ROA not before:           Thu 16 Jun 2022 21:47:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207922
IP address blocks:        185.83.126.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71793 (0x11871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e87e9a228f1e24cdd07ea44a503104d41a26fd2
        Validity
            Not Before: Jun 16 21:47:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10387df43b7b54b65ebb7d06eedcebf88bb8e6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:2a:2b:2c:77:06:b6:59:73:16:86:e4:6d:
                    fa:a6:4a:2b:21:8b:d1:1e:05:41:98:ef:7a:45:6a:
                    97:23:0f:82:57:43:98:cc:20:27:37:4c:ca:43:7a:
                    e5:5d:8f:36:8d:aa:44:c9:bb:5a:95:b0:0a:11:11:
                    54:cb:b1:54:c3:75:02:73:f2:bb:aa:f7:a5:a5:95:
                    04:10:ce:97:88:36:72:16:09:94:05:a3:36:b4:39:
                    08:03:4a:99:db:02:b6:b3:d9:5a:92:6a:5a:8e:66:
                    68:98:21:65:7c:23:da:9f:8c:7d:42:49:0a:d7:6e:
                    b4:8e:b1:a9:62:12:a6:c1:31:e8:35:d9:05:78:b6:
                    4d:20:2f:d2:46:9f:f7:80:f2:ce:cd:2f:20:15:55:
                    c5:b4:34:e0:a5:8f:2d:6f:8a:16:f7:c5:47:97:f5:
                    d6:c8:a8:2b:cf:f1:f3:5b:41:3e:ed:e0:cc:a1:9d:
                    29:8c:73:1e:36:c5:56:c2:1d:dc:84:71:94:06:39:
                    2c:d7:ea:2e:95:67:e5:29:35:ad:bd:c6:0a:49:74:
                    ae:d7:40:a2:fe:31:8d:86:bc:04:c2:af:f8:a8:f2:
                    bd:fd:99:44:7f:26:be:16:cb:30:e6:a9:93:12:bd:
                    49:2d:3d:0a:d4:20:f3:54:25:ae:af:22:3a:f1:d9:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:38:7D:F4:3B:7B:54:B6:5E:BB:7D:06:EE:DC:EB:F8:8B:B8:E6:B0
            X509v3 Authority Key Identifier:
                keyid:8E:87:E9:A2:28:F1:E2:4C:DD:07:EA:44:A5:03:10:4D:41:A2:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jofpoijx4kzdB-pEpQMQTUGib9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/EDh99Dt7VLZeu30G7tzr-Iu45rA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/460f98-96e4-40bb-9fab-e320849b2a98/1/jofpoijx4kzdB-pEpQMQTUGib9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:c0:a5:68:b4:c9:bb:9c:fa:01:37:37:90:3a:d5:00:f0:
         86:3b:ec:8a:dc:2a:f4:58:a1:df:3b:91:ae:e5:99:a5:57:69:
         e1:26:d0:95:ae:eb:6e:c8:9b:82:60:54:ab:6e:42:6f:6e:ec:
         07:9f:cc:b9:e9:b8:28:d1:bb:a2:90:59:63:04:fe:ea:59:5d:
         5f:20:42:7f:d9:b0:bd:bd:2c:87:a2:f8:5f:16:4f:31:d0:7f:
         31:83:30:68:13:54:2d:67:ed:6c:e5:08:3e:ce:78:0e:ea:e6:
         9c:bf:a6:6f:53:b4:a7:8f:e4:84:77:af:93:27:98:7b:10:2e:
         b5:07:d2:a5:5a:92:9f:c3:3d:62:7f:74:0f:aa:20:d5:42:a2:
         ff:9e:b5:e4:56:5c:2a:f5:ac:45:ca:38:6a:14:b2:45:49:71:
         d1:13:e7:0e:ff:58:93:f0:c6:a5:6c:37:2f:2a:c6:2b:d4:56:
         dc:7d:72:61:81:b1:43:df:50:a4:88:34:f6:25:8c:a2:64:b5:
         96:fe:3e:2f:e3:50:a6:24:d9:65:a2:15:42:7d:93:c6:f3:e5:
         72:f8:3a:be:c9:75:55:3e:91:eb:75:f9:38:05:ce:c7:0e:85:
         01:7c:72:ea:b5:ee:9d:c8:51:4e:62:85:ec:81:3b:73:d4:24:
         5d:6d:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:21 2025 by rpki-client