Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/EUEMGU99gvE_PoUSeXFsfrtcuoE.roa
File:                     EUEMGU99gvE_PoUSeXFsfrtcuoE.roa (raw, json)
Hash identifier:          oiLIS1IvFZNh3vL77dPZ3xbATgnUxKMMzJE615iqMLQ=
Subject key identifier:   11:41:0C:19:4F:7D:82:F1:3F:3E:85:12:79:71:6C:7E:BB:5C:BA:81
Certificate issuer:       /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial:       02DCE55C
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/EUEMGU99gvE_PoUSeXFsfrtcuoE.roa
Signing time:             Tue 25 Jan 2022 00:19:23 +0000
ROA not before:           Tue 25 Jan 2022 00:19:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25369
IP address blocks:        91.245.216.0/23 maxlen: 24
                          89.40.220.0/23 maxlen: 24
                          94.26.64.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48031068 (0x2dce55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
        Validity
            Not Before: Jan 25 00:19:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11410c194f7d82f13f3e851279716c7ebb5cba81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:3f:c2:96:8f:9c:cc:54:62:cc:4e:f2:8a:
                    f0:ae:c5:c8:f6:0e:7e:6e:13:7f:b0:f4:08:3f:ed:
                    21:1a:78:8c:37:b0:27:20:dd:99:b1:f5:39:1f:43:
                    f1:ee:e7:e3:e3:55:b2:71:76:71:25:ce:81:27:80:
                    eb:b4:45:3f:66:74:55:81:7c:43:f6:3a:fa:21:15:
                    c2:4a:e0:60:2e:39:c3:0b:90:dc:13:17:01:63:0d:
                    32:fa:b7:91:5e:ff:6b:a6:cc:16:76:e2:4f:69:69:
                    7f:3d:22:16:43:34:37:75:2c:91:29:12:e5:50:8c:
                    e5:3c:d9:ce:b4:c5:87:7e:c7:7b:54:a1:57:fc:68:
                    f3:54:a6:54:7f:55:8a:7c:fd:dc:ff:30:2d:9c:92:
                    c5:25:c8:a8:70:33:a0:11:46:6e:a3:42:b7:06:4d:
                    3c:cf:cc:2b:c5:a3:2a:ea:be:9c:2a:12:8e:cc:b0:
                    ef:8d:c8:3b:e2:f4:be:9d:09:77:cd:0e:e3:ff:6e:
                    8a:36:96:e4:c6:05:15:4d:28:a2:c5:07:3c:45:10:
                    54:6d:09:55:96:1c:d0:a4:e6:bb:6e:e3:b3:2c:b9:
                    82:20:f9:e9:f3:fb:92:95:b3:0a:a1:bb:19:f7:46:
                    fa:c2:32:f3:da:6c:00:c0:57:5e:3c:11:0a:82:92:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:41:0C:19:4F:7D:82:F1:3F:3E:85:12:79:71:6C:7E:BB:5C:BA:81
            X509v3 Authority Key Identifier:
                keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/EUEMGU99gvE_PoUSeXFsfrtcuoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.40.220.0/23
                  91.245.216.0/23
                  94.26.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:c7:dd:8f:ea:2b:f3:76:49:db:42:5e:ba:8d:2e:10:05:9a:
         48:05:72:ca:0f:92:d0:5d:19:8a:38:07:f4:2b:f4:ea:61:34:
         1a:19:62:01:95:f1:b3:3f:db:dc:40:5b:46:93:cb:68:32:69:
         d9:1c:9b:50:25:b8:e4:31:63:c5:b4:67:c1:92:79:19:5b:a5:
         eb:be:3e:8c:4b:81:d5:06:9a:3a:e6:16:c9:32:dd:10:6c:92:
         96:28:d5:fd:05:65:5f:8d:b7:3e:88:a8:1e:ca:8e:9d:02:a3:
         ad:2d:94:15:8c:90:bb:ef:f7:4c:42:e8:57:dc:20:16:2e:fe:
         f8:a7:94:66:bb:8d:b8:6e:12:30:e0:bd:be:b0:54:fb:c2:df:
         47:5b:3b:38:b1:92:38:1b:2a:e2:e7:88:72:38:e7:c3:d7:81:
         76:0c:5e:f7:8c:12:15:b8:f0:84:69:6f:a1:e4:f0:cb:b4:5f:
         28:68:48:59:19:9f:04:da:9a:3a:bf:67:95:99:2c:64:b2:da:
         cd:d4:5c:7b:38:00:95:04:c9:b2:be:e2:1f:6b:0d:07:9d:5f:
         2b:69:d3:9b:de:86:a1:df:79:b1:96:cf:90:b8:34:69:20:0b:
         be:4d:a6:b7:c6:1e:fc:30:f9:03:04:5c:36:90:a5:c0:c7:64:
         22:1b:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:05:42 2025 by rpki-client