Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KqtyFyQHqvkPzj4yJJ0Pvho7Kgg.roa
File:                     KqtyFyQHqvkPzj4yJJ0Pvho7Kgg.roa (raw, json)
Hash identifier:          ZfxEsWEy69+NTrS/PqFdQLYb+6FVdyAVPWt080UC+7o=
Subject key identifier:   2A:AB:72:17:24:07:AA:F9:0F:CE:3E:32:24:9D:0F:BE:1A:3B:2A:08
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1BA059D0
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KqtyFyQHqvkPzj4yJJ0Pvho7Kgg.roa
Signing time:             Thu 30 Jun 2022 19:33:02 +0000
ROA not before:           Thu 30 Jun 2022 19:33:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204374
IP address blocks:        2a06:a005:85f::/48 maxlen: 48
                          2a06:a005:1090::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463493584 (0x1ba059d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 30 19:33:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2aab72172407aaf90fce3e32249d0fbe1a3b2a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:10:65:95:0c:0d:ed:64:41:04:be:2e:57:
                    b5:a8:0f:2a:dc:8b:31:d7:bf:db:c8:d4:d1:85:6b:
                    c1:c7:f8:be:55:d1:72:4b:38:94:34:bc:84:e6:22:
                    ed:bf:84:9d:81:39:f9:9d:78:0d:63:a4:77:23:41:
                    29:3c:c5:5d:72:8c:a3:4c:64:21:43:44:ae:2d:7f:
                    07:5e:93:38:a0:fd:b0:08:3d:03:96:0c:8e:9b:86:
                    0f:fb:98:f5:76:d6:f0:7f:46:b7:ef:b1:60:b7:b4:
                    73:0f:b4:04:83:aa:94:5c:b8:a4:af:a3:51:56:05:
                    1f:a6:d4:a5:0b:00:5c:9a:09:0a:1b:bb:e6:d5:eb:
                    3b:c3:15:14:f4:15:99:61:26:84:27:5d:4a:a8:3e:
                    22:61:0a:3b:a8:38:30:2e:35:4d:77:84:1f:16:ce:
                    67:9d:a5:ea:03:f2:c4:8d:9e:61:0c:4a:69:d0:5c:
                    8b:71:83:62:5b:3b:b7:f0:af:96:7f:55:fe:d5:2c:
                    0a:56:46:d9:82:f2:8e:cb:7f:c4:de:45:0b:f2:55:
                    1f:f2:b0:c8:3e:bd:d3:9c:4d:bf:a7:64:bf:d1:b5:
                    52:ce:3d:98:74:5d:80:b1:20:39:c4:b8:a0:bc:3a:
                    d0:fa:2d:8b:7b:04:cf:59:e2:25:e2:72:26:a5:7c:
                    6e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AB:72:17:24:07:AA:F9:0F:CE:3E:32:24:9D:0F:BE:1A:3B:2A:08
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KqtyFyQHqvkPzj4yJJ0Pvho7Kgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:85f::/48
                  2a06:a005:1090::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:db:37:71:82:7e:30:7b:7e:a6:04:bb:ad:1c:d6:67:a9:2f:
         60:3b:67:a3:ff:f7:5e:e2:9f:bc:b2:16:98:4a:cf:16:15:a9:
         9a:5a:a2:9d:0a:61:3b:b6:ba:b6:ab:98:46:aa:fc:92:f8:02:
         2f:fa:c1:b1:da:5a:b7:ed:7e:35:78:c2:ef:59:9c:25:e4:46:
         66:92:03:36:eb:4a:10:92:1a:9f:19:d4:e7:b2:28:e5:79:9e:
         ff:21:5a:57:76:68:5c:b7:ae:c9:fd:49:da:82:5e:e5:d7:5e:
         f9:08:ce:cc:e1:67:82:47:81:46:f2:5d:b4:19:7d:83:8b:ff:
         5a:ce:b6:5f:93:3d:c1:ee:8d:f4:4b:0b:93:51:12:65:dc:ad:
         a4:a5:74:86:17:bc:d5:a5:1f:0b:da:89:dd:9c:5b:aa:7a:98:
         1a:12:b5:3b:66:d8:71:07:66:95:35:7c:85:56:67:97:84:ce:
         0a:c1:00:d7:de:ff:e8:fb:14:e6:af:b0:29:5a:15:50:bc:67:
         21:c5:0f:fa:e6:44:1a:ad:b8:d2:a4:be:e2:3d:b2:5d:d3:70:
         92:db:0b:36:8f:84:ee:56:0f:2f:1d:7d:b4:62:59:e0:8b:b4:
         57:91:99:05:61:11:16:a6:9a:86:24:2c:20:22:5a:80:c1:55:
         0b:4b:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:35 2025 by rpki-client