Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/71a58f-a710-47fd-9574-ac50af4de07c/1/AI1eJ_gmiSwF26uoUvmWAqqxG-E.roa
File:                     AI1eJ_gmiSwF26uoUvmWAqqxG-E.roa (raw, json)
Hash identifier:          I++bZPqFop9GbRme4gu4Qd6wH0Gg6Xyzp+Y6K5JrBiE=
Subject key identifier:   00:8D:5E:27:F8:26:89:2C:05:DB:AB:A8:52:F9:96:02:AA:B1:1B:E1
Certificate issuer:       /CN=6bedbc9a2c97aaf4316dbef45d11ab98971cd1b1
Certificate serial:       054A7EF7
Authority key identifier: 6B:ED:BC:9A:2C:97:AA:F4:31:6D:BE:F4:5D:11:AB:98:97:1C:D1:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-28miyXqvQxbb70XRGrmJcc0bE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/71a58f-a710-47fd-9574-ac50af4de07c/1/AI1eJ_gmiSwF26uoUvmWAqqxG-E.roa
Signing time:             Thu 23 Jun 2022 06:49:32 +0000
ROA not before:           Thu 23 Jun 2022 06:49:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51684
IP address blocks:        91.213.191.0/24 maxlen: 24
                          91.217.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88768247 (0x54a7ef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bedbc9a2c97aaf4316dbef45d11ab98971cd1b1
        Validity
            Not Before: Jun 23 06:49:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=008d5e27f826892c05dbaba852f99602aab11be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:84:80:29:e0:bb:89:4d:fa:f4:95:9f:5a:
                    95:5e:f3:d5:cb:16:ff:c5:79:27:a1:43:5a:9e:6e:
                    11:46:fe:67:51:08:eb:32:fa:b7:b4:1b:71:67:b8:
                    43:1a:e9:02:7e:5b:a1:71:a4:41:1c:c3:a8:36:d8:
                    c3:b4:ea:28:d4:e4:7e:27:97:77:2d:ec:a5:87:88:
                    cf:b6:c1:05:17:fa:b4:a6:79:a7:8a:13:88:32:7d:
                    9e:44:61:87:4c:f0:52:bd:99:fd:4b:d6:4f:ef:1a:
                    09:d0:d2:10:1c:69:28:8b:a2:72:30:d3:9a:b9:00:
                    18:d1:58:16:bb:b8:ee:90:bc:c6:10:30:90:c8:ce:
                    9f:96:68:db:c7:cb:6b:86:06:af:4b:e6:99:71:f7:
                    4b:4f:5a:6c:43:88:0d:18:2b:49:09:a4:4c:7e:da:
                    2e:66:39:85:7a:09:99:1e:f6:ef:41:0d:05:1c:b5:
                    f1:91:29:ab:92:bd:3e:3e:82:b1:51:75:71:ec:6d:
                    7e:ce:e9:00:eb:3e:9d:fb:22:24:5c:ca:c9:b0:f8:
                    ab:ed:3d:5c:42:48:64:06:10:8e:e1:01:9d:b3:48:
                    ad:bd:1d:99:4d:d5:1f:b6:c6:21:fd:ca:d5:92:79:
                    75:50:9f:43:94:14:eb:0d:1b:10:2b:2b:00:9c:3f:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8D:5E:27:F8:26:89:2C:05:DB:AB:A8:52:F9:96:02:AA:B1:1B:E1
            X509v3 Authority Key Identifier:
                keyid:6B:ED:BC:9A:2C:97:AA:F4:31:6D:BE:F4:5D:11:AB:98:97:1C:D1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-28miyXqvQxbb70XRGrmJcc0bE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/71a58f-a710-47fd-9574-ac50af4de07c/1/AI1eJ_gmiSwF26uoUvmWAqqxG-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/71a58f-a710-47fd-9574-ac50af4de07c/1/a-28miyXqvQxbb70XRGrmJcc0bE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.191.0/24
                  91.217.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:c8:b9:ab:74:ad:af:3a:49:d1:03:b1:46:02:f5:92:de:b8:
         f1:5a:18:40:00:5d:e3:14:67:96:af:e1:b3:67:7b:10:6c:db:
         aa:9d:38:20:0c:56:e2:1d:b8:28:26:db:1a:c0:bd:08:53:65:
         a3:dc:9d:2b:b3:de:c8:f4:52:4b:d6:0e:6e:10:74:09:96:1f:
         ec:01:c5:c5:4c:7f:26:1e:58:f9:e9:b5:bc:25:30:f5:20:b0:
         24:62:19:a8:be:2b:da:d7:b1:c4:6e:df:8a:80:b0:89:2f:7f:
         79:3b:dd:1e:f5:05:9f:ad:a6:02:a8:70:02:67:65:a9:b7:01:
         84:2c:75:d7:0f:b1:7f:42:36:fe:ef:b4:fb:fa:88:c4:7f:c3:
         76:a0:63:26:05:0e:2e:69:3b:64:54:47:c5:17:0e:8a:39:f2:
         59:19:eb:6c:95:33:0f:70:e9:c3:29:b6:a1:46:6e:e3:56:51:
         c5:79:e1:f0:c9:36:7c:58:94:13:56:8f:7c:12:71:d7:78:cd:
         c5:73:8b:83:d3:a9:ec:03:73:02:b1:07:c0:07:5e:7a:81:6c:
         bf:a0:60:2f:0f:fa:eb:db:8f:44:0f:02:51:0c:30:1d:4a:5d:
         78:0a:c9:8a:e4:ad:29:27:ea:89:fc:ae:54:05:6a:1a:5a:6f:
         6d:bb:c5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:40 2025 by rpki-client