Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/V4Vg7FR8TvZ6BrVkuC0GV8HiVHM.roa
File:                     V4Vg7FR8TvZ6BrVkuC0GV8HiVHM.roa (raw, json)
Hash identifier:          oubk8kT7f/PCTPzMQUAjRwdm9UgIAUwosk58AH+M1/E=
Subject key identifier:   57:85:60:EC:54:7C:4E:F6:7A:06:B5:64:B8:2D:06:57:C1:E2:54:73
Certificate issuer:       /CN=aad75b18b4c580a079db0bcc2a9c8186fa9fe6a1
Certificate serial:       08AE4B
Authority key identifier: AA:D7:5B:18:B4:C5:80:A0:79:DB:0B:CC:2A:9C:81:86:FA:9F:E6:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qtdbGLTFgKB52wvMKpyBhvqf5qE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/V4Vg7FR8TvZ6BrVkuC0GV8HiVHM.roa
Signing time:             Mon 07 Mar 2022 07:49:05 +0000
ROA not before:           Mon 07 Mar 2022 07:49:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34986
IP address blocks:        193.104.166.0/24 maxlen: 24
                          193.188.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568907 (0x8ae4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad75b18b4c580a079db0bcc2a9c8186fa9fe6a1
        Validity
            Not Before: Mar  7 07:49:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=578560ec547c4ef67a06b564b82d0657c1e25473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:a5:25:4d:c1:4f:69:0d:7e:13:b9:c5:c4:
                    72:93:86:70:c4:1f:31:f8:5d:05:4d:62:83:f5:1c:
                    d2:63:1b:3e:cc:da:37:43:3d:d6:c0:fd:85:d9:52:
                    dd:50:e7:fc:9f:31:cf:1a:df:2d:24:29:db:fc:0e:
                    8d:d3:4f:22:3c:a0:68:dd:2f:3b:52:87:8b:95:26:
                    81:a4:f1:56:14:bc:b5:dd:0a:77:1f:ca:3d:9b:98:
                    44:a7:83:66:c8:8f:36:94:ff:79:c0:dc:82:c6:04:
                    f3:54:04:e0:df:ce:de:bf:04:83:85:7e:b1:37:52:
                    d9:ca:3c:58:0b:e0:56:df:89:82:f7:85:20:42:f1:
                    9a:61:c9:94:fa:fa:75:71:6d:ce:6c:f8:d4:a3:5c:
                    a7:4b:5b:04:6b:e7:61:15:9b:e9:3b:1c:5a:60:03:
                    21:ee:49:86:5d:a9:77:fc:25:94:58:cb:71:38:4a:
                    bc:74:0f:19:91:cf:70:52:0d:1a:6d:ea:e2:97:94:
                    5b:16:31:02:29:3c:d8:02:4a:3a:1c:e0:84:0d:f1:
                    14:00:b4:4b:72:00:86:bb:b5:18:f6:e4:14:81:1e:
                    b3:f7:90:fc:dc:6b:d7:2d:c1:cf:b0:32:b6:db:e9:
                    a6:bb:83:b4:4c:3a:66:36:3f:d0:74:cd:a2:00:4a:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:85:60:EC:54:7C:4E:F6:7A:06:B5:64:B8:2D:06:57:C1:E2:54:73
            X509v3 Authority Key Identifier:
                keyid:AA:D7:5B:18:B4:C5:80:A0:79:DB:0B:CC:2A:9C:81:86:FA:9F:E6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtdbGLTFgKB52wvMKpyBhvqf5qE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/V4Vg7FR8TvZ6BrVkuC0GV8HiVHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/qtdbGLTFgKB52wvMKpyBhvqf5qE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.166.0/24
                  193.188.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:71:20:cb:78:73:08:f9:32:af:4f:eb:e6:d6:9d:8b:08:4c:
         50:ad:41:89:76:1e:60:ae:cf:7e:c8:ec:68:34:06:74:38:81:
         00:9d:57:85:61:67:3f:08:7b:26:9c:aa:3b:e0:53:e4:7c:a5:
         12:b0:c2:02:a3:72:97:be:2a:80:df:ea:dc:b1:f8:e3:80:19:
         4e:2f:4a:e1:cb:d4:7b:db:8c:cd:14:a9:d0:ef:a3:68:29:aa:
         31:48:18:3d:91:ca:a2:1c:7d:33:d9:20:fb:e0:b2:83:17:96:
         66:f2:81:98:7f:65:39:20:ad:f2:70:0c:0b:e1:b0:2d:2d:9a:
         56:9e:2c:c5:f4:4d:e3:8a:89:57:eb:4a:d2:04:68:94:c3:91:
         7b:51:cb:9a:16:a1:cd:cc:93:6f:0f:07:b5:9e:1d:e8:ae:fc:
         43:ba:fc:27:61:85:e2:d2:7b:a4:99:02:b9:f8:0b:8f:19:65:
         e0:ff:c7:42:65:f3:84:d7:61:12:3b:cd:75:ea:e6:d1:f5:f2:
         b2:ff:b3:53:2a:dc:bc:16:c2:9d:e0:21:f6:61:7a:30:9f:13:
         98:93:6d:11:80:63:08:ca:31:44:24:d9:d6:c7:1e:e5:65:86:
         94:9f:1e:22:a2:c6:1f:d7:57:ef:72:af:51:e7:08:8a:bb:00:
         6b:f3:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:20:41 2025 by rpki-client