Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VWBXmyE1D4Y8ZeLsOwgISBBVNXw.roa
File:                     VWBXmyE1D4Y8ZeLsOwgISBBVNXw.roa (raw, json)
Hash identifier:          baKuHTQ7VcYfqVz00oZXTdQm93vuV+KR30NC0bNbUaE=
Subject key identifier:   55:60:57:9B:21:35:0F:86:3C:65:E2:EC:3B:08:08:48:10:55:35:7C
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       28660229
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VWBXmyE1D4Y8ZeLsOwgISBBVNXw.roa
Signing time:             Sat 01 Jan 2022 16:10:25 +0000
ROA not before:           Sat 01 Jan 2022 16:10:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213187
IP address blocks:        31.148.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677773865 (0x28660229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  1 16:10:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5560579b21350f863c65e2ec3b0808481055357c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:04:8b:bd:bb:22:0f:10:9a:93:bd:94:f4:
                    5e:f1:de:ac:0b:c3:d6:c5:b1:37:d4:a8:a4:d2:42:
                    92:c7:e1:ff:54:ca:b9:45:71:c6:4e:3b:8c:b8:86:
                    dd:0e:da:26:ef:c2:05:b1:ce:a0:6c:09:f4:71:5b:
                    d9:a7:57:a5:7a:46:39:13:b4:73:e4:b1:ff:16:09:
                    db:a9:9d:2e:c2:c0:b8:22:95:ba:65:82:de:0b:6d:
                    7d:36:65:9a:2f:24:63:0d:89:4b:28:0a:08:02:84:
                    47:81:48:8f:a6:35:59:09:63:0d:21:68:84:b6:f3:
                    11:c1:0d:29:7a:84:33:b7:e6:74:c3:7c:21:7b:f6:
                    6b:49:48:13:b7:71:79:b3:8c:b4:f6:d0:88:26:40:
                    d6:76:da:60:eb:0f:30:e5:d6:c2:d9:ca:c1:8a:58:
                    22:a8:57:84:74:3d:ba:f2:20:03:72:57:f9:eb:23:
                    9c:b4:4d:e4:69:e6:3d:fb:67:83:5e:dd:be:60:c6:
                    03:47:2a:2f:db:07:2a:51:35:b3:2d:84:7e:01:cb:
                    7e:68:d7:e1:f2:22:b8:64:7c:93:9a:9c:37:ba:da:
                    28:5e:79:d7:0f:d0:66:1a:ec:11:ca:a6:c5:3d:5a:
                    63:88:d6:d0:77:15:0c:42:c2:d4:1d:35:06:f4:dc:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:60:57:9B:21:35:0F:86:3C:65:E2:EC:3B:08:08:48:10:55:35:7C
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VWBXmyE1D4Y8ZeLsOwgISBBVNXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.148.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:94:e7:cd:52:3c:34:75:9d:2b:6d:0a:64:39:a0:89:f4:43:
         4b:f3:9c:d9:e0:08:13:44:70:cd:a8:a0:2b:80:63:54:6b:0a:
         48:c4:ac:54:5c:67:2c:0e:41:0f:ed:6b:d5:36:22:dd:67:ad:
         b7:fd:fe:60:9f:d2:c7:0c:dd:06:f9:47:89:96:ad:76:d3:88:
         a5:70:9e:3b:2e:e8:48:34:fe:26:e1:2d:b4:e5:5d:33:c1:97:
         fe:b8:f8:6d:7a:1d:27:45:95:ba:36:e0:3a:e5:b2:6c:28:9f:
         4d:77:d4:c6:c0:0b:89:72:0f:38:4e:9d:8e:0a:0f:3e:16:18:
         fb:87:8e:9e:f9:9c:8b:5b:76:82:20:6e:e9:69:d9:40:67:4e:
         7f:76:55:0a:7c:c9:24:2d:fe:6b:fc:c6:ba:6c:9a:f5:87:b6:
         28:2d:96:9b:4a:bd:13:07:08:0d:8a:ae:ef:fc:41:f2:a0:7e:
         e6:bf:2b:8b:16:e5:38:75:44:b5:db:e5:86:be:d0:28:8d:b8:
         f5:a7:50:db:b5:ce:ce:72:a2:d9:3d:cb:fc:59:0b:83:c9:e1:
         ee:ee:a8:c6:c4:c0:56:eb:6e:43:c1:ca:19:b8:37:48:80:8a:
         88:f9:3b:32:65:cf:86:be:00:ba:4e:a3:e2:47:28:eb:03:0a:
         da:b5:08:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:19 2025 by rpki-client