Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/2DCi-DbHlajN__TvgqIflZIEJJE.roa
File:                     2DCi-DbHlajN__TvgqIflZIEJJE.roa (raw, json)
Hash identifier:          wTyBPja+PMH+tGuMG7VO91lj/i4IuH4FWHDVUIgmKxs=
Subject key identifier:   D8:30:A2:F8:36:C7:95:A8:CD:FF:F4:EF:82:A2:1F:95:92:04:24:91
Certificate issuer:       /CN=464266360095674d95b70730b313264232c02ba0
Certificate serial:       011F7A12
Authority key identifier: 46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/2DCi-DbHlajN__TvgqIflZIEJJE.roa
Signing time:             Sat 01 Jan 2022 01:54:54 +0000
ROA not before:           Sat 01 Jan 2022 01:54:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34665
IP address blocks:        93.157.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18840082 (0x11f7a12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464266360095674d95b70730b313264232c02ba0
        Validity
            Not Before: Jan  1 01:54:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d830a2f836c795a8cdfff4ef82a21f9592042491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:23:f5:fa:13:73:91:f9:90:99:61:32:d2:
                    63:2b:a6:97:c4:59:00:83:3f:f9:a1:0a:43:a3:c6:
                    73:f2:3c:3b:3f:70:3e:19:2b:bf:3d:41:3a:48:dd:
                    6e:fe:54:84:d6:68:a7:a0:76:80:da:1a:ca:5a:d6:
                    9a:d6:a4:7d:a4:99:3a:14:1a:da:6f:7c:38:f4:a1:
                    37:7b:50:42:4b:f8:7a:c4:a2:4e:b3:e9:0f:0d:83:
                    67:8d:70:d5:29:4b:b2:03:b2:f8:1e:91:ab:0b:02:
                    ac:fb:86:57:b7:f1:6c:61:34:67:a1:03:0a:ef:63:
                    11:42:8a:79:28:64:b0:a0:35:11:4e:d1:53:e7:91:
                    89:5d:47:69:fd:a1:f6:d2:1c:42:3d:b6:ef:42:5a:
                    f2:ef:47:aa:fb:91:3a:86:d6:13:54:4a:e9:9a:1e:
                    42:b4:8a:d6:dd:81:bd:3c:bf:40:a5:7f:f9:3a:00:
                    e6:fb:5b:0b:b4:43:ca:03:66:5a:c6:7e:ef:56:74:
                    60:58:3c:f9:55:3c:53:68:75:c3:87:bf:f0:87:9c:
                    2f:5d:12:37:70:4b:1e:68:96:c6:d4:a1:5e:98:5c:
                    0d:48:e2:32:a1:2f:a0:9e:a0:6a:0e:ac:99:c3:6c:
                    c1:dc:d5:1f:0d:87:fc:ce:5f:95:17:29:b3:6e:79:
                    d4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:30:A2:F8:36:C7:95:A8:CD:FF:F4:EF:82:A2:1F:95:92:04:24:91
            X509v3 Authority Key Identifier:
                keyid:46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/2DCi-DbHlajN__TvgqIflZIEJJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:69:36:48:e4:b6:ee:0c:21:ed:b0:74:82:fa:d9:b6:90:71:
         c2:96:81:6c:0e:79:a4:a6:0b:e3:2c:5e:54:66:5b:ff:d8:dd:
         ea:a9:6d:93:83:0a:bf:fd:69:c9:7b:84:ca:e7:90:5b:4a:4b:
         61:77:f6:9e:b3:13:32:f9:2b:45:cc:7c:9a:9b:2e:4b:70:cf:
         b4:4f:3c:b8:da:76:20:82:29:f7:3f:6f:0a:0a:39:1e:07:1c:
         05:5a:90:6c:cb:19:a7:7b:8b:7f:9a:31:7f:23:8c:31:d9:a3:
         b6:df:8f:d3:67:66:7d:92:b6:08:ca:bd:c5:42:ff:3e:29:fa:
         ca:54:30:2d:41:ec:6c:f0:77:c8:f1:71:4d:42:46:b1:02:22:
         58:22:dc:d0:df:dd:19:88:39:6a:07:47:be:da:23:3c:a5:49:
         0e:35:05:62:fe:62:fa:be:c8:3b:e4:41:e0:4f:0f:98:ab:e3:
         f5:7d:41:39:e4:cf:02:03:20:70:d7:ca:a9:c1:03:b4:5c:c4:
         41:28:e5:d5:50:b8:86:95:9e:c9:f7:21:b3:2f:d3:c5:0e:f2:
         f6:05:af:74:62:77:8c:33:93:0d:ff:9c:64:b6:0b:14:c5:f5:
         28:ce:24:92:ad:a1:17:1e:4b:16:27:6e:eb:df:0d:8b:a8:a8:
         b0:86:fd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:38 2025 by rpki-client