Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/SCVVj_sE2sQcMVW-U2NPYzoWK-I.roa
File:                     SCVVj_sE2sQcMVW-U2NPYzoWK-I.roa (raw, json)
Hash identifier:          qahQOO6K+IjT5rP99t8Hl+FPntgYW4AiCFDxomm3+lA=
Subject key identifier:   48:25:55:8F:FB:04:DA:C4:1C:31:55:BE:53:63:4F:63:3A:16:2B:E2
Certificate issuer:       /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial:       01BA1E8E
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/SCVVj_sE2sQcMVW-U2NPYzoWK-I.roa
Signing time:             Tue 12 Apr 2022 14:22:10 +0000
ROA not before:           Tue 12 Apr 2022 14:22:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        194.104.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28974734 (0x1ba1e8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
        Validity
            Not Before: Apr 12 14:22:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4825558ffb04dac41c3155be53634f633a162be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:01:b4:35:e5:28:38:ae:8b:68:ef:06:41:
                    5d:7c:70:ca:66:e2:f2:83:92:66:e5:c5:4a:17:f1:
                    ef:8e:72:05:35:83:91:56:6f:16:82:3b:81:d6:7a:
                    95:b6:07:80:b7:14:f5:e4:ce:43:06:20:42:29:d4:
                    95:50:39:e1:02:57:21:45:16:b4:09:77:28:00:d5:
                    90:6c:60:1a:36:ea:c2:bc:f1:20:58:df:36:e3:6e:
                    f2:66:1f:24:94:02:99:fc:0c:fd:5a:e7:90:42:37:
                    35:27:a3:62:26:df:56:47:6c:94:d2:c3:2e:0d:2c:
                    64:e2:e3:8c:eb:7a:3d:c7:a9:67:4e:99:c1:68:85:
                    a2:5a:df:91:92:08:62:4a:03:7d:8c:e5:0b:47:a6:
                    15:7e:cc:9d:a4:78:c9:43:ba:14:21:9a:a0:1c:b4:
                    1b:0a:35:95:fd:a8:ef:88:4a:14:82:bc:d2:5b:e0:
                    21:4d:6e:18:61:96:90:01:af:80:85:23:c5:9b:9f:
                    e1:bf:17:a2:5e:16:62:e4:20:3b:a4:e8:87:c4:ea:
                    5b:25:1e:bf:60:a4:6f:80:2c:83:3b:de:4e:dc:3f:
                    3d:73:98:47:d1:5b:1b:52:fe:b1:d0:55:48:17:86:
                    df:8d:a7:51:cf:ae:46:fa:71:de:3d:9d:00:bf:5e:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:25:55:8F:FB:04:DA:C4:1C:31:55:BE:53:63:4F:63:3A:16:2B:E2
            X509v3 Authority Key Identifier:
                keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/SCVVj_sE2sQcMVW-U2NPYzoWK-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:16:6f:2c:df:34:5d:21:23:5b:9d:ac:f4:da:ee:da:c7:
         3a:1c:22:59:c9:dd:a0:77:93:fc:ea:db:5e:d6:48:3e:d5:8d:
         62:0e:b9:f0:6f:6b:4b:8f:8b:9d:86:2d:13:01:d1:56:c4:2a:
         b7:b7:aa:9c:70:56:06:75:ed:6d:bc:cb:c0:18:6e:bb:fb:8b:
         84:cf:89:eb:e9:dd:13:61:4a:0f:88:f9:7a:ce:5b:37:47:0c:
         51:17:fc:2f:93:93:0a:07:d7:1a:0e:d4:79:d4:b2:20:b6:0e:
         63:c5:30:4c:8f:ab:8f:a9:4a:99:4d:2a:d8:b9:85:08:1d:15:
         90:c3:62:95:7c:8f:49:fb:6a:8e:bf:65:83:82:5d:55:1c:c4:
         d0:58:71:57:04:5c:7e:e5:bb:45:be:1b:ea:e2:85:8f:ce:d1:
         26:29:20:06:ed:54:46:1d:c4:71:e5:3f:70:22:bb:28:6e:5b:
         e6:0e:a3:8b:68:d5:3d:a2:88:38:74:db:d0:7f:2b:69:80:f3:
         e5:86:e7:2b:07:b7:69:11:8e:6e:63:fd:f6:5e:10:b4:45:25:
         21:78:d8:ce:3b:03:0e:d9:66:a5:1a:26:23:cf:84:74:a6:04:
         73:b9:6c:98:e3:92:4b:27:10:dd:a0:36:89:c9:7d:5f:ad:1a:
         93:e9:6d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:28 2025 by rpki-client