Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VGUGvG0qTS8iHMPUrj4OcoPN-CY.roa
File:                     VGUGvG0qTS8iHMPUrj4OcoPN-CY.roa (raw, json)
Hash identifier:          qbRjkxT58X4PO0MBrv3/oQ9QbRzJ3JABLm/z75dpcoQ=
Subject key identifier:   54:65:06:BC:6D:2A:4D:2F:22:1C:C3:D4:AE:3E:0E:72:83:CD:F8:26
Certificate issuer:       /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial:       0185F01380485357DB4E5393E8CB25717A22
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VGUGvG0qTS8iHMPUrj4OcoPN-CY.roa
Signing time:             Thu 26 Jan 2023 21:54:47 +0000
ROA not before:           Thu 26 Jan 2023 21:54:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54339
IP address blocks:        194.53.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f0:13:80:48:53:57:db:4e:53:93:e8:cb:25:71:7a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
        Validity
            Not Before: Jan 26 21:54:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=546506bc6d2a4d2f221cc3d4ae3e0e7283cdf826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:e0:cf:1b:29:c5:8c:bd:98:17:6c:f9:df:
                    92:07:ca:62:05:86:30:ab:57:08:1a:18:7c:e4:ba:
                    30:28:5f:75:a3:3c:42:93:e0:fa:00:8b:5c:5e:f2:
                    15:47:56:fa:c4:a7:1c:8d:41:d8:07:81:21:6c:c4:
                    05:6f:70:9f:ee:0e:6b:05:84:17:b0:f9:01:b1:05:
                    64:5c:c9:6c:a3:25:eb:cb:87:f3:fb:32:8c:27:3b:
                    5c:18:96:62:d2:ea:de:9e:b2:16:2a:dc:46:59:2a:
                    79:f3:e2:95:33:e2:aa:38:27:36:de:ce:27:01:86:
                    ad:26:96:c6:d1:03:95:f6:fa:25:58:21:c7:d7:04:
                    fd:a9:d0:69:a6:f0:3c:c5:a5:88:3b:69:10:67:01:
                    b7:84:7c:ce:bc:07:3a:c1:0f:1f:48:c9:02:53:76:
                    02:b7:5c:7d:e0:91:8b:ce:b2:53:84:fd:01:8f:86:
                    56:6b:c1:ee:a3:66:92:58:0d:2e:27:7b:25:f3:af:
                    2b:09:67:5a:85:c4:f8:c5:fb:6c:43:a6:10:af:db:
                    6a:f3:87:c6:0d:fb:5b:b9:ca:29:ab:af:65:ef:71:
                    f4:75:5a:b1:d2:07:22:52:96:e7:40:a9:7c:dd:d7:
                    1d:16:d3:f7:70:e1:8f:67:dc:fd:2c:ac:a8:79:e8:
                    b6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:65:06:BC:6D:2A:4D:2F:22:1C:C3:D4:AE:3E:0E:72:83:CD:F8:26
            X509v3 Authority Key Identifier:
                keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/VGUGvG0qTS8iHMPUrj4OcoPN-CY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.53.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:dc:ab:8e:70:ee:11:30:09:12:fd:eb:a9:12:d9:e3:71:
         58:79:44:85:12:d7:32:1f:bf:93:94:32:df:99:b1:57:33:33:
         69:e8:7b:a7:79:0b:4e:3c:77:ea:57:73:9c:d5:b2:e7:51:ba:
         a6:f0:af:25:de:53:ba:8a:8a:9b:f2:91:44:79:24:ea:8c:c1:
         d2:80:dc:51:d5:8e:49:9c:49:b9:23:bb:f7:07:b8:71:1d:60:
         14:96:fc:9a:d2:77:b4:5f:cf:15:d6:38:7b:12:75:40:2c:fd:
         0e:44:30:d6:fc:17:89:d7:6d:69:df:09:a5:48:74:d0:c4:09:
         8d:38:04:5d:45:a2:35:43:81:6a:71:c6:68:d2:71:2c:fd:d7:
         ed:97:7a:e3:20:a3:5e:6a:eb:1d:5f:f9:b9:de:95:77:e2:76:
         c8:78:60:0b:95:e6:50:a0:e5:1a:f9:c2:53:a3:20:c1:08:44:
         2f:0d:1b:00:5d:6e:e5:fb:01:88:b4:e3:a2:10:57:66:d4:ae:
         d7:c4:66:9e:95:2a:92:cf:16:d3:80:0f:ac:1f:57:0b:7b:f5:
         98:23:00:82:66:f4:86:15:73:55:43:95:9b:18:87:a4:c5:37:
         81:d0:94:76:2b:2e:9d:53:4c:d7:34:37:ea:e3:6e:fd:0c:d4:
         f7:1e:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:21:13 2025 by rpki-client