Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/TuD8Zq47eNCkMaIoO_Fk3Sik7xg.roa
File:                     TuD8Zq47eNCkMaIoO_Fk3Sik7xg.roa (raw, json)
Hash identifier:          zPyy36LfLVhmfnJeEg+5eZ29A45A9z0QS0AVun7gWIk=
Subject key identifier:   4E:E0:FC:66:AE:3B:78:D0:A4:31:A2:28:3B:F1:64:DD:28:A4:EF:18
Certificate issuer:       /CN=94b21640a951055dfe9c09e345739cb820054dd4
Certificate serial:       78C6D5
Authority key identifier: 94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/TuD8Zq47eNCkMaIoO_Fk3Sik7xg.roa
Signing time:             Sat 01 Jan 2022 03:00:18 +0000
ROA not before:           Sat 01 Jan 2022 03:00:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46573
IP address blocks:        62.3.62.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7915221 (0x78c6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94b21640a951055dfe9c09e345739cb820054dd4
        Validity
            Not Before: Jan  1 03:00:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ee0fc66ae3b78d0a431a2283bf164dd28a4ef18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:ec:bc:1a:7f:be:cf:81:a8:93:89:13:8f:
                    35:e6:85:79:2e:a4:e4:6d:b2:d0:cb:a1:44:b2:91:
                    5c:9d:3d:0c:ff:7a:67:cb:c6:b4:1a:e8:91:45:a3:
                    9a:eb:8f:f4:e1:b0:30:4f:21:6b:bf:e5:f5:82:e1:
                    72:34:76:d7:ec:d8:93:f2:5f:c8:f8:3e:23:1f:c7:
                    13:c2:6b:1b:2f:bc:40:f9:0b:da:30:c0:d8:0d:a5:
                    df:de:24:4d:7c:31:a4:03:b0:c1:bc:82:8b:ab:90:
                    47:42:a5:43:b7:b2:a8:92:b7:5e:be:fa:f4:d6:26:
                    01:d8:72:36:35:6e:48:d9:cd:a1:90:66:67:1a:3a:
                    a5:e7:58:32:fd:d7:87:35:86:00:6f:8f:5b:1b:0b:
                    ce:8e:16:8c:b2:ca:49:ed:8a:f6:9a:57:38:d5:e9:
                    1f:e1:1b:b1:8d:70:46:5f:70:7a:bd:f5:b6:b5:f3:
                    30:2d:5a:45:20:5e:da:88:5e:e1:02:cb:29:e8:bb:
                    cf:3d:20:76:fe:ec:46:63:21:d6:e1:df:8e:4d:ff:
                    be:f6:72:4f:84:34:66:7c:43:bd:0e:91:ee:25:f4:
                    2d:34:e7:eb:af:32:38:f7:94:22:f5:e1:05:5f:a1:
                    1c:2f:8c:c9:58:eb:9d:b3:1f:a7:75:34:5e:45:6c:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E0:FC:66:AE:3B:78:D0:A4:31:A2:28:3B:F1:64:DD:28:A4:EF:18
            X509v3 Authority Key Identifier:
                keyid:94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/TuD8Zq47eNCkMaIoO_Fk3Sik7xg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:00:ac:f7:48:ac:65:8d:89:e8:ae:2b:58:e6:5a:62:f1:37:
         bb:1f:44:52:73:d4:cf:d4:1a:3e:9d:93:dc:fb:b9:8d:7b:e2:
         09:27:8d:ea:e2:be:6a:45:d2:a5:c9:63:fc:61:c2:48:06:51:
         a9:8f:d0:46:13:45:46:1c:30:07:4a:8c:11:a8:49:70:32:fd:
         53:63:bb:89:12:69:0b:0b:93:11:97:b6:8b:45:2a:b7:c4:74:
         79:bf:c6:68:97:5f:59:e0:d1:2f:22:6d:f8:e4:b6:11:23:dd:
         3d:bc:ca:62:c4:8e:67:95:6e:3d:f4:2d:a1:7f:13:d3:7b:73:
         83:9a:e7:41:0d:c3:45:a4:7b:f6:13:dd:6e:a2:f1:d8:96:68:
         5f:8d:98:43:a3:c9:b1:cc:4b:72:f9:44:68:45:7a:91:1f:9e:
         fb:54:6b:64:8a:ec:b2:75:3a:ce:93:97:fc:00:1c:17:d6:09:
         35:c1:04:38:d4:91:ae:7b:20:1b:36:ae:10:82:6a:eb:71:7d:
         c8:93:7b:ca:de:0d:a8:a3:92:a9:07:2e:c6:82:0f:b0:2a:e4:
         d6:e6:b0:6f:f1:84:c9:a6:a7:c0:72:86:80:06:6e:a1:83:59:
         03:5d:b3:21:a8:e5:91:70:95:08:58:43:b3:fc:62:34:8f:4b:
         9e:57:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:04:53 2025 by rpki-client