Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/gtjhVT6UjxqBZh31cIm3-yIEhGA.roa
File:                     gtjhVT6UjxqBZh31cIm3-yIEhGA.roa (raw, json)
Hash identifier:          LW6xPCZk2LsU0hVDamZgYy/ZUnE4iD/YES7gwyZet8Q=
Subject key identifier:   82:D8:E1:55:3E:94:8F:1A:81:66:1D:F5:70:89:B7:FB:22:04:84:60
Certificate issuer:       /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial:       019E25A341AB54530725E8D400DAFBB66CC5
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/gtjhVT6UjxqBZh31cIm3-yIEhGA.roa
Signing time:             Thu 14 May 2026 08:38:36 +0000
ROA not before:           Thu 14 May 2026 08:38:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202391
IP address blocks:        94.199.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:25:a3:41:ab:54:53:07:25:e8:d4:00:da:fb:b6:6c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
        Validity
            Not Before: May 14 08:38:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82d8e1553e948f1a81661df57089b7fb22048460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:e8:54:c5:17:21:31:e6:39:7d:fd:4c:bc:
                    35:1c:81:85:a0:59:69:1e:36:de:11:69:3a:b6:fe:
                    a4:53:97:34:a8:57:4d:12:5e:e0:f9:05:2a:af:0b:
                    19:f7:8f:95:dc:e6:69:ea:e9:1a:a8:bf:00:04:91:
                    73:77:2a:42:15:7c:c9:ea:eb:32:a8:ee:a7:01:73:
                    1f:67:16:70:a2:07:31:44:6b:87:30:5a:34:cc:e5:
                    65:a4:e9:47:c4:04:18:03:6a:10:b6:9e:9b:67:80:
                    8a:3b:3c:69:9b:0a:3e:62:ca:73:89:84:a3:7a:8b:
                    7f:51:fe:f5:36:95:05:bd:84:f6:16:c2:e0:5f:c3:
                    dd:cf:6d:86:2c:e6:d0:68:de:02:54:9c:04:a4:79:
                    0a:ad:9c:5f:0d:9e:37:f9:13:d1:9a:5f:09:09:5f:
                    58:e2:7c:16:70:a7:19:5d:2d:2b:c5:f1:a3:d0:96:
                    36:81:7e:51:c5:a4:02:47:90:17:03:95:1a:37:c5:
                    05:d3:a1:75:e5:32:a5:83:b5:44:ef:0d:38:ff:67:
                    dd:07:85:6e:2f:a5:31:a2:48:ba:b4:34:4d:8a:ac:
                    65:b0:d8:bc:8a:cb:49:98:67:1f:1e:49:b6:b8:67:
                    32:c0:96:6e:8b:d5:6d:62:74:30:89:32:d1:3d:43:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D8:E1:55:3E:94:8F:1A:81:66:1D:F5:70:89:B7:FB:22:04:84:60
            X509v3 Authority Key Identifier:
                keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/gtjhVT6UjxqBZh31cIm3-yIEhGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.199.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:8b:ea:39:0b:05:83:39:bb:f8:29:3a:bd:37:b7:2e:97:
         d6:21:a7:2d:ec:11:43:81:97:df:cb:3c:7d:73:ae:f7:64:93:
         ab:fb:2a:da:9b:4e:e8:46:74:c4:be:24:1a:24:2f:0a:9c:9e:
         e9:70:cb:ac:eb:3d:43:e0:d1:70:a1:e7:4f:20:00:3f:88:a4:
         49:07:1b:2b:72:cf:1f:12:e3:4e:76:5c:47:82:37:15:45:d9:
         2c:dd:fc:7c:99:5c:cc:cc:96:73:1b:4f:b6:e0:57:7d:c5:8d:
         c6:22:58:ec:f1:b1:63:ad:c9:9f:16:5f:f7:04:6c:66:12:65:
         33:2e:50:1d:7b:7e:2b:49:52:d1:1c:37:0b:e4:74:f9:b4:6c:
         01:c4:74:7f:bd:dd:5f:b5:39:e3:17:a1:85:2e:26:0e:2f:19:
         87:47:f7:ef:a8:5a:c4:23:ff:b7:1d:b4:5f:db:2b:7a:57:e5:
         43:04:7c:3c:93:a0:07:25:f3:55:bb:ec:e8:87:52:01:3b:a5:
         74:c5:e9:98:56:e6:ca:68:36:e6:51:2d:61:4e:31:8d:87:16:
         7c:9f:18:84:1b:d9:28:f1:55:83:ba:b4:43:ef:d5:c8:7b:14:
         ef:53:d9:7c:3d:82:b8:5d:72:51:2a:dd:c2:1e:14:b1:d8:3b:
         e4:25:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:56 2026 by rpki-client