Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/62qkG-4vDnh_zqDKcM9Xf-dK_RM.roa
File:                     62qkG-4vDnh_zqDKcM9Xf-dK_RM.roa (raw, json)
Hash identifier:          UjWmETspIHrrP3ZXSYoqxMrWIYoLFeGnqI1cjyjrrtg=
Subject key identifier:   EB:6A:A4:1B:EE:2F:0E:78:7F:CE:A0:CA:70:CF:57:7F:E7:4A:FD:13
Certificate issuer:       /CN=20354e2015ee0c179bf03aed3373314fde6f11de
Certificate serial:       0189654A8E2C5F7A0BD32267E03C5232A121
Authority key identifier: 20:35:4E:20:15:EE:0C:17:9B:F0:3A:ED:33:73:31:4F:DE:6F:11:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDVOIBXuDBeb8DrtM3MxT95vEd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/62qkG-4vDnh_zqDKcM9Xf-dK_RM.roa
Signing time:             Mon 17 Jul 2023 19:18:52 +0000
ROA not before:           Mon 17 Jul 2023 19:18:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        31.41.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:65:4a:8e:2c:5f:7a:0b:d3:22:67:e0:3c:52:32:a1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20354e2015ee0c179bf03aed3373314fde6f11de
        Validity
            Not Before: Jul 17 19:18:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb6aa41bee2f0e787fcea0ca70cf577fe74afd13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ff:d8:64:fa:58:47:4c:16:5f:3c:9a:06:93:
                    a0:0c:8e:72:dc:95:df:1c:d8:f1:a9:29:55:d8:26:
                    ce:03:7b:1b:e7:39:9a:49:c0:68:bc:32:7b:78:30:
                    72:ad:5c:7d:da:cc:9b:e7:22:f3:55:d7:01:fd:85:
                    83:f0:a3:bd:7c:1a:66:61:91:b7:ed:30:03:aa:97:
                    36:38:76:fa:25:3a:cb:f9:df:45:56:33:2e:5c:dd:
                    a5:0b:c6:fd:53:fd:00:26:31:11:b5:97:37:81:e2:
                    e6:29:cf:c3:79:2c:6e:5f:e0:b6:9e:23:f2:c8:d4:
                    73:10:1a:00:ab:aa:73:5a:2d:a5:72:7c:e0:a0:be:
                    c8:27:92:4b:63:c5:39:b4:9d:bb:1e:d7:f0:58:35:
                    16:ce:9b:c5:51:b9:b4:21:1d:a4:88:30:5c:e7:f4:
                    ca:8f:c6:1a:18:be:7c:a8:ad:4a:c9:40:16:4a:f4:
                    c6:2b:22:d0:e4:9d:2a:d1:10:51:30:cf:b7:32:01:
                    b6:48:73:7a:39:db:c8:83:0b:65:3f:bc:97:95:53:
                    99:fb:dd:78:f8:57:61:51:b7:37:d5:6e:b3:b3:a5:
                    e8:0e:c9:9c:d7:97:13:a4:8f:3a:f7:26:aa:51:44:
                    d1:49:0c:76:c8:cb:6f:9a:4c:ae:27:f5:6a:b9:68:
                    fd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6A:A4:1B:EE:2F:0E:78:7F:CE:A0:CA:70:CF:57:7F:E7:4A:FD:13
            X509v3 Authority Key Identifier:
                keyid:20:35:4E:20:15:EE:0C:17:9B:F0:3A:ED:33:73:31:4F:DE:6F:11:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDVOIBXuDBeb8DrtM3MxT95vEd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/62qkG-4vDnh_zqDKcM9Xf-dK_RM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/IDVOIBXuDBeb8DrtM3MxT95vEd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.41.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:26:66:96:dc:24:8d:98:cc:ea:fb:fe:bd:8e:3b:bb:66:d7:
         38:dc:2d:de:fd:60:e1:ab:ca:98:42:34:85:b3:40:68:c8:9b:
         a5:66:b4:ea:2a:d6:19:11:82:16:46:2b:94:75:74:9a:25:6c:
         7a:ca:56:1d:b5:f2:0b:c2:00:12:6c:50:cf:21:b1:ac:32:cf:
         04:9d:85:f0:ef:b2:f0:f5:6a:13:b9:c7:92:bc:23:13:90:ac:
         26:ab:d7:d3:dc:57:41:36:44:50:9b:3e:74:fa:5f:bb:74:85:
         61:8a:70:af:bd:a7:39:4f:bb:49:34:10:37:e0:7d:cc:3e:b8:
         3f:0e:a1:dd:0b:22:e2:2d:81:99:db:38:c6:a8:10:32:30:40:
         92:0d:4b:ca:a0:01:ea:32:15:c0:6a:b1:3b:33:c9:b3:cb:43:
         85:66:76:8f:ed:ed:0c:8a:bf:6e:98:50:91:d0:ea:eb:98:93:
         f7:f0:8e:cd:2a:fa:a7:94:84:f5:67:9d:8a:e8:20:6e:e3:ca:
         14:db:28:b0:a3:87:52:7d:26:5c:5f:d8:89:8a:9a:83:b8:0f:
         f2:c6:6a:a5:b9:61:69:3e:67:75:4b:0b:cb:d6:25:be:a4:d3:
         88:c2:13:8f:04:32:f0:e6:be:c2:b3:d2:92:21:a3:9b:6b:54:
         26:4b:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:44:19 2025 by rpki-client