Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VN9W9fxQTN0wKdTU52OqtjgegMg.roa
File:                     VN9W9fxQTN0wKdTU52OqtjgegMg.roa (raw, json)
Hash identifier:          Tt30297gDpuMHcIcVzIagARfPGURfQI1xBEsd2JSbqA=
Subject key identifier:   54:DF:56:F5:FC:50:4C:DD:30:29:D4:D4:E7:63:AA:B6:38:1E:80:C8
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       019480D84C0AD214E431431F32A5999C249B
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VN9W9fxQTN0wKdTU52OqtjgegMg.roa
Signing time:             Sun 19 Jan 2025 23:14:06 +0000
ROA not before:           Sun 19 Jan 2025 23:14:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:80:d8:4c:0a:d2:14:e4:31:43:1f:32:a5:99:9c:24:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jan 19 23:14:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=54df56f5fc504cdd3029d4d4e763aab6381e80c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:22:a7:00:84:c3:dc:b4:56:59:e3:cb:92:
                    cf:88:0a:23:89:58:bc:2c:3e:f9:0a:b8:26:3a:bb:
                    60:91:87:7c:75:5c:d8:5a:f2:0d:f2:62:62:66:88:
                    6b:95:6a:21:02:6a:53:7c:b0:99:7a:53:da:9e:44:
                    f5:46:26:ea:a5:4f:22:6d:a9:99:08:ce:c0:15:49:
                    f7:3f:06:b0:9e:7a:15:91:d9:9f:c8:a0:09:fe:38:
                    5c:1b:77:9d:d2:77:b9:83:02:da:43:29:3b:32:a6:
                    d1:30:6c:78:78:5d:9d:7b:13:2a:7f:1a:b6:e3:20:
                    4e:83:0e:99:8c:48:28:f5:89:4b:23:3e:1b:df:46:
                    12:98:8b:93:3a:8d:03:6b:f7:4d:ce:61:f1:05:56:
                    45:f4:bf:e2:5c:63:dd:2c:0b:e5:45:06:70:b4:71:
                    d0:87:fc:a0:b3:ed:b1:2e:3a:ed:63:f9:1f:c5:0d:
                    b6:cb:20:ef:63:0b:b6:b1:a7:12:b9:ef:20:86:19:
                    e4:e1:8b:51:1f:a6:fe:b0:e8:cd:cf:85:e6:f2:e7:
                    33:12:4a:10:18:3a:4a:1a:3e:e8:05:08:d1:37:9b:
                    75:bb:06:0e:58:a9:2d:71:59:79:a9:73:db:b9:ca:
                    b0:30:fb:fc:08:72:c6:1e:58:da:f1:5d:a4:45:37:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DF:56:F5:FC:50:4C:DD:30:29:D4:D4:E7:63:AA:B6:38:1E:80:C8
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/VN9W9fxQTN0wKdTU52OqtjgegMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:194:2c0d:6680/128

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:5b:fe:77:66:aa:af:36:41:bf:b3:71:7e:e6:6f:79:da:
         09:48:68:46:08:f4:da:01:ee:68:29:6b:f1:67:e2:2a:fd:c6:
         70:2b:e4:24:32:f4:b1:c7:d2:99:26:8c:16:01:60:72:33:d8:
         c3:e7:83:12:a6:f2:32:4c:7e:b8:57:29:50:79:eb:09:12:c1:
         17:04:cd:19:c7:90:db:0e:2e:ee:8c:b6:5e:0d:bc:7b:42:f6:
         b8:d7:53:c0:8e:80:3b:64:64:d0:8a:a8:6c:32:19:ef:ec:fc:
         3e:a5:82:00:b9:c6:14:ff:77:21:ab:f2:25:2f:03:12:99:a0:
         02:1e:3c:56:9a:d7:0a:52:03:f3:c5:a0:3d:e4:78:0a:2d:0c:
         60:4f:f2:2d:05:98:68:e9:c3:a2:39:dc:b1:e8:36:74:ad:81:
         05:47:68:2b:48:39:e0:4e:c2:82:91:e5:79:3c:ab:92:22:db:
         1c:bc:80:cf:41:d1:e8:2b:ba:5a:cd:cf:19:db:48:5a:07:9f:
         fa:f4:76:8f:09:8d:42:a7:4c:6f:96:9b:2b:b1:23:1c:ab:01:
         cd:65:58:34:a5:67:76:c7:34:e6:04:38:47:bf:cd:4c:da:98:
         a9:65:7e:9b:64:0c:5e:1c:7c:b4:90:f4:da:c3:7e:e5:fb:21:
         36:7c:12:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:09:50 2025 by rpki-client