Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/1-vStv1Q4RAXScSGsCl4rl14Jhz8.roa
File:                     1-vStv1Q4RAXScSGsCl4rl14Jhz8.roa (raw, json)
Hash identifier:          h+tjLiMvyreRVA34zydkOu+IzdJRhbsjoa4PMSuu3uU=
Subject key identifier:   FA:F4:AD:BF:54:38:44:05:D2:71:21:AC:0A:5E:2B:97:5E:09:87:3F
Certificate issuer:       /CN=19fec662638dbe92e580135140a6b2f0e93677ce
Certificate serial:       B0FA11
Authority key identifier: 19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/1-vStv1Q4RAXScSGsCl4rl14Jhz8.roa
Signing time:             Sat 01 Jan 2022 05:02:59 +0000
ROA not before:           Sat 01 Jan 2022 05:02:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210644
IP address blocks:        194.26.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11598353 (0xb0fa11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fec662638dbe92e580135140a6b2f0e93677ce
        Validity
            Not Before: Jan  1 05:02:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=faf4adbf54384405d27121ac0a5e2b975e09873f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:31:c0:6b:c4:90:48:8c:e5:c0:7f:5b:22:
                    5f:09:33:9a:d6:42:5a:a4:e7:c1:5e:23:35:1c:85:
                    9b:e1:a7:d3:da:f7:e5:e1:95:c2:2c:b6:9b:a6:3f:
                    d5:80:f8:eb:74:f7:2f:fd:d7:07:96:12:bb:ee:a5:
                    58:45:d8:d8:16:ba:94:4b:58:b7:68:97:16:51:01:
                    fb:16:46:42:1a:ec:00:a6:da:35:12:61:ca:b2:f9:
                    c0:8e:68:62:12:a8:10:78:67:2e:06:6d:3d:7c:e4:
                    ae:1c:d7:3e:18:59:bf:0b:99:0c:0d:9b:3a:c9:3b:
                    4b:10:57:e0:14:7e:d8:c3:b3:9a:3c:92:b8:ac:c2:
                    28:d4:17:75:cb:21:a5:99:d5:2f:c6:18:62:a1:fa:
                    ce:5e:98:a3:80:c8:1a:3f:76:21:d8:75:58:3b:d6:
                    f8:20:0e:f5:e1:a8:38:bf:ac:e5:f2:6c:df:fb:07:
                    89:5d:0a:81:d4:d4:ef:ff:fc:5c:2c:70:f4:5d:cd:
                    ee:36:6a:af:92:bf:58:00:89:fb:94:85:2c:d0:9c:
                    3f:d8:bf:12:0c:58:8d:b1:e5:96:82:aa:44:c5:25:
                    5c:10:12:44:a7:16:25:13:f4:2a:50:19:c2:49:dc:
                    fc:aa:f6:05:1b:34:59:0b:28:1d:1e:48:36:33:c0:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F4:AD:BF:54:38:44:05:D2:71:21:AC:0A:5E:2B:97:5E:09:87:3F
            X509v3 Authority Key Identifier:
                keyid:19:FE:C6:62:63:8D:BE:92:E5:80:13:51:40:A6:B2:F0:E9:36:77:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf7GYmONvpLlgBNRQKay8Ok2d84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/1-vStv1Q4RAXScSGsCl4rl14Jhz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/767b34-6929-4d19-b7ff-8ae129c06965/1/Gf7GYmONvpLlgBNRQKay8Ok2d84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:6d:33:9f:d2:6d:15:5b:af:87:3c:af:6b:c1:47:ae:9b:d9:
         9f:40:40:84:ae:27:58:3e:65:30:98:67:e8:8d:6e:bf:27:85:
         ba:e0:d3:d6:f7:71:b6:39:c2:42:c0:39:06:5d:62:aa:04:7d:
         90:a8:b3:6d:4b:a4:45:ff:24:5a:bc:f2:b5:3c:c5:31:68:f2:
         e9:c7:63:b6:0f:2f:aa:79:68:08:de:82:84:01:82:b8:0c:96:
         10:2e:3e:14:ae:74:25:d7:4f:54:14:04:df:37:37:ef:01:9a:
         1e:65:8f:32:cd:9c:61:56:7b:46:42:9c:0c:27:04:57:85:02:
         36:be:ff:87:7d:a3:55:a6:e1:77:60:76:3e:17:ab:22:5e:d0:
         20:07:5f:a2:25:d9:03:de:1b:3c:0b:5b:17:e8:40:67:f4:f6:
         3f:62:60:1c:28:2c:0f:55:df:f9:27:d8:13:47:13:4b:78:66:
         03:13:e1:79:a5:df:76:11:e4:2b:81:67:51:3c:37:8e:90:c5:
         6e:03:af:65:15:53:e3:f0:7f:c7:1c:4b:bd:3d:3a:c8:36:38:
         d4:e2:eb:9a:45:f2:ca:11:b2:6f:30:8a:9e:50:a2:60:2a:d7:
         b7:f6:a2:b0:e9:36:c9:c1:31:e8:23:34:4b:99:2b:ae:90:aa:
         5d:78:5f:7c
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEALD6ETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OWZlYzY2MjYzOGRiZTkyZTU4MDEzNTE0MGE2YjJmMGU5MzY3N2NlMB4XDTIyMDEw
MTA1MDI1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmFmNGFkYmY1NDM4
NDQwNWQyNzEyMWFjMGE1ZTJiOTc1ZTA5ODczZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ62McBrxJBIjOXAf1siXwkzmtZCWqTnwV4jNRyFm+Gn09r3
5eGVwiy2m6Y/1YD463T3L/3XB5YSu+6lWEXY2Ba6lEtYt2iXFlEB+xZGQhrsAKba
NRJhyrL5wI5oYhKoEHhnLgZtPXzkrhzXPhhZvwuZDA2bOsk7SxBX4BR+2MOzmjyS
uKzCKNQXdcshpZnVL8YYYqH6zl6Yo4DIGj92Idh1WDvW+CAO9eGoOL+s5fJs3/sH
iV0KgdTU7//8XCxw9F3N7jZqr5K/WACJ+5SFLNCcP9i/EgxYjbHlloKqRMUlXBAS
RKcWJRP0KlAZwknc/Kr2BRs0WQsoHR5INjPAwfUCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT69K2/VDhEBdJxIawKXiuXXgmHPzAfBgNVHSMEGDAWgBQZ/sZiY42+kuWA
E1FAprLw6TZ3zjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dmN0dZbU9OdnBMbGdCTlJRS2F5OE9rMmQ4NC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjQvNzY3YjM0LTY5MjktNGQxOS1iN2ZmLThhZTEyOWMwNjk2NS8x
LzEtdlN0djFRNFJBWFNjU0dzQ2w0cmwxNEpoejgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0
Lzc2N2IzNC02OTI5LTRkMTktYjdmZi04YWUxMjljMDY5NjUvMS9HZjdHWW1PTnZw
TGxnQk5SUUtheThPazJkODQuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCGuUwDQYJKoZIhvcNAQELBQAD
ggEBAHZtM5/SbRVbr4c8r2vBR66b2Z9AQISuJ1g+ZTCYZ+iNbr8nhbrg09b3cbY5
wkLAOQZdYqoEfZCos21LpEX/JFq88rU8xTFo8unHY7YPL6p5aAjegoQBgrgMlhAu
PhSudCXXT1QUBN83N+8Bmh5ljzLNnGFWe0ZCnAwnBFeFAja+/4d9o1Wm4Xdgdj4X
qyJe0CAHX6Il2QPeGzwLWxfoQGf09j9iYBwoLA9V3/kn2BNHE0t4ZgMT4Xml33YR
5CuBZ1E8N46QxW4Dr2UVU+Pwf8ccS709Osg2ONTi65pF8soRsm8wip5QomAq17f2
orDpNsnBMegjNEuZK66Qql14X3w=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:52 2025 by rpki-client