Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/ViPn2S4OuRsdil0DIHAuDh-EP0Q.roa
File:                     ViPn2S4OuRsdil0DIHAuDh-EP0Q.roa (raw, json)
Hash identifier:          dMavdmixfqhDnoSi89Q5sZsMapgzbTmpvFyUVyLZbgg=
Subject key identifier:   56:23:E7:D9:2E:0E:B9:1B:1D:8A:5D:03:20:70:2E:0E:1F:84:3F:44
Certificate issuer:       /CN=8a6fbe22e80be7f14c1c39f848b1b80c9248ede8
Certificate serial:       081D66B6
Authority key identifier: 8A:6F:BE:22:E8:0B:E7:F1:4C:1C:39:F8:48:B1:B8:0C:92:48:ED:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/im--IugL5_FMHDn4SLG4DJJI7eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/ViPn2S4OuRsdil0DIHAuDh-EP0Q.roa
Signing time:             Sat 01 Jan 2022 14:04:55 +0000
ROA not before:           Sat 01 Jan 2022 14:04:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205614
IP address blocks:        45.89.160.0/23 maxlen: 23
                          2a0b:e880::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136144566 (0x81d66b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6fbe22e80be7f14c1c39f848b1b80c9248ede8
        Validity
            Not Before: Jan  1 14:04:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5623e7d92e0eb91b1d8a5d0320702e0e1f843f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:e2:e4:14:e5:29:3f:34:31:cb:a3:77:98:
                    dc:62:83:78:86:8d:8c:24:5e:64:97:2c:52:b3:e5:
                    9b:b6:b0:0b:1a:d5:14:bb:a9:8d:51:69:bf:a2:18:
                    8f:9f:18:83:71:e8:dd:05:b3:49:a7:cf:df:16:77:
                    2c:30:77:67:83:fd:fb:86:fa:b9:f5:1a:6d:65:34:
                    f1:4d:3c:37:07:89:a9:af:e9:b1:68:6d:ae:74:e4:
                    96:8c:ee:7d:25:c9:89:53:3f:3f:bc:21:7b:92:ff:
                    4a:ee:ae:ae:fd:30:f5:85:ea:46:03:e1:9d:22:69:
                    79:db:3d:00:2a:a8:26:49:f4:47:2f:a0:d7:eb:8c:
                    a1:d4:52:b3:2c:da:bd:12:01:a1:c8:8d:ce:1e:a1:
                    9d:76:52:de:41:6c:3a:f3:6e:01:5c:a7:49:f0:e4:
                    06:9e:a0:6b:bf:89:e0:eb:5a:56:22:a4:f9:b3:be:
                    e7:0a:36:4e:1f:8f:cb:47:7f:f2:6f:45:cb:89:0a:
                    27:33:4b:2b:a0:26:09:55:60:9a:6b:0f:87:45:92:
                    fa:7b:76:ca:7d:0d:a3:13:0a:29:84:74:4e:55:49:
                    2a:7e:06:36:2e:ea:f3:56:3a:f4:f0:1b:a9:96:da:
                    3a:94:9d:2b:a3:56:b9:40:be:d7:8f:64:22:71:05:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:23:E7:D9:2E:0E:B9:1B:1D:8A:5D:03:20:70:2E:0E:1F:84:3F:44
            X509v3 Authority Key Identifier:
                keyid:8A:6F:BE:22:E8:0B:E7:F1:4C:1C:39:F8:48:B1:B8:0C:92:48:ED:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/im--IugL5_FMHDn4SLG4DJJI7eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/ViPn2S4OuRsdil0DIHAuDh-EP0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/im--IugL5_FMHDn4SLG4DJJI7eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.160.0/23
                IPv6:
                  2a0b:e880::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:9c:cf:7a:c4:cf:a7:a7:a0:0e:01:3e:fe:fe:94:d0:09:
         47:71:35:6e:78:0d:ef:ff:47:38:44:0f:ce:ee:92:c6:56:11:
         d2:87:09:1f:68:a5:1f:68:d9:14:bf:15:56:04:25:e6:91:7e:
         00:63:58:c8:1e:b5:f5:01:b8:95:98:ee:3e:42:ac:21:f5:07:
         13:ff:db:8f:09:95:b1:d9:e5:e1:f1:30:00:bf:ac:38:76:55:
         78:20:93:cd:a4:44:7f:e5:f3:16:57:8f:c9:bf:df:0b:da:76:
         74:36:da:52:ed:63:2f:79:11:67:e9:77:be:75:31:00:7b:13:
         d3:59:46:f7:6e:a8:e0:2e:94:a3:a9:de:97:3f:4d:21:20:0c:
         ef:d3:77:26:ba:a7:10:19:4b:85:27:4e:5d:d9:58:3a:e0:c8:
         38:77:b5:7f:b9:82:0b:94:ab:67:46:28:3a:9a:05:9a:92:0d:
         d8:63:e6:4c:89:87:ad:9c:a9:2f:df:bf:32:74:35:29:e5:9e:
         fe:67:09:6c:e7:9a:5a:07:fe:bc:f0:06:58:eb:3a:cf:91:23:
         18:f7:61:5f:c8:87:45:6d:23:97:02:0a:0c:16:85:f9:a6:8c:
         0a:6e:01:d5:7b:83:b4:c9:de:d2:4d:ba:b1:66:fd:b1:94:1a:
         2f:0e:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:53:57 2025 by rpki-client