Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/VImWjmCZ9j0FOxosDrKDqDScYO8.roa
File:                     VImWjmCZ9j0FOxosDrKDqDScYO8.roa (raw, json)
Hash identifier:          weX2mATKDm0yjl9elTK/Sz/X79BxuvPSdFx1B+M4qOE=
Subject key identifier:   54:89:96:8E:60:99:F6:3D:05:3B:1A:2C:0E:B2:83:A8:34:9C:60:EF
Certificate issuer:       /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial:       D59290
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/VImWjmCZ9j0FOxosDrKDqDScYO8.roa
Signing time:             Sat 01 Jan 2022 07:00:25 +0000
ROA not before:           Sat 01 Jan 2022 07:00:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        194.104.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13996688 (0xd59290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
        Validity
            Not Before: Jan  1 07:00:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5489968e6099f63d053b1a2c0eb283a8349c60ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:62:ca:00:49:a1:fa:d3:9a:61:c5:01:c3:
                    89:d0:7a:ee:4d:08:18:bf:11:1f:ec:81:67:c6:2c:
                    f0:bc:a1:8c:c0:10:83:c4:15:7a:7c:8e:ea:30:ee:
                    85:78:cb:e5:bc:a1:d0:9d:a9:4f:e6:45:0a:b5:6c:
                    68:a5:4b:04:40:fc:85:32:94:5d:66:6f:0c:88:67:
                    2e:45:d4:10:7f:33:09:ba:0e:41:d3:d2:5c:d8:ab:
                    a8:8b:f0:1e:7b:80:68:3e:a6:ed:f2:5d:fd:6f:7f:
                    e3:e2:b9:fb:32:82:15:38:a3:35:f7:38:85:5b:d4:
                    ed:6d:47:3f:27:ed:97:ae:54:56:05:a1:a6:29:0f:
                    bf:bb:76:d6:86:cb:f9:88:e6:5a:df:62:ee:ea:17:
                    45:45:5a:4b:0d:2e:ad:7a:1e:9e:24:c5:5c:25:3e:
                    ed:dc:6d:11:a1:e6:f6:fd:e2:9f:f5:7c:b7:6f:20:
                    88:66:62:67:2e:27:25:89:ec:03:6b:ad:91:d6:9d:
                    79:74:e2:fb:01:35:e8:30:57:73:76:36:24:bc:68:
                    53:f1:1a:70:1f:48:3c:e2:e0:44:a8:08:26:0f:73:
                    67:e0:a1:1f:25:91:80:1f:c7:08:f8:92:cc:a6:6d:
                    37:b4:04:97:f7:f4:3b:37:3a:95:25:ac:da:49:82:
                    d8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:89:96:8E:60:99:F6:3D:05:3B:1A:2C:0E:B2:83:A8:34:9C:60:EF
            X509v3 Authority Key Identifier:
                keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/VImWjmCZ9j0FOxosDrKDqDScYO8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:a8:e9:7e:6b:81:01:8a:26:6c:4d:22:87:b8:de:4b:c2:
         87:b8:dd:2a:26:91:65:ef:c5:98:78:97:05:c4:20:ec:00:be:
         e9:d1:69:b6:76:f0:e5:61:45:30:e9:06:23:93:fe:68:6e:76:
         3d:02:1e:11:20:49:aa:04:5c:40:da:53:66:55:45:aa:dd:a7:
         8d:9a:a6:fc:ab:21:c5:7a:a0:07:12:96:6f:a9:c8:68:58:5c:
         b7:11:15:42:da:8c:98:da:32:a4:c9:14:d0:1a:80:c0:26:31:
         f6:8b:12:85:03:6a:ef:0c:27:21:ff:1d:49:fd:39:29:9c:40:
         c2:6e:bc:36:21:da:e8:4e:bc:9e:08:0b:61:52:19:ee:66:89:
         12:c7:f8:96:44:2a:b6:12:5a:8d:5b:63:40:cc:ff:88:d4:55:
         a2:95:bd:ef:93:d4:44:5e:d3:d4:b9:9e:f6:c1:23:fc:13:a5:
         46:a1:22:c6:e2:75:96:9f:f6:7e:61:97:7c:47:58:1a:de:e8:
         b8:17:13:e0:9a:bf:d9:d6:a0:ac:40:41:b4:44:ce:35:90:96:
         4f:96:e2:6b:f5:a6:36:eb:1f:30:55:f9:54:18:36:68:22:9b:
         36:79:d0:e7:81:ba:01:0b:6c:42:56:58:e9:38:98:47:2f:6d:
         23:d8:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:24 2025 by rpki-client