Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/yRsb_TbVV7gGVbtZ7PlNbQIZTU8.roa
File:                     yRsb_TbVV7gGVbtZ7PlNbQIZTU8.roa (raw, json)
Hash identifier:          VK+3R1f6a5POEIvYimRSeMz7SuNnUT/AIyaueecxZYo=
Subject key identifier:   C9:1B:1B:FD:36:D5:57:B8:06:55:BB:59:EC:F9:4D:6D:02:19:4D:4F
Certificate issuer:       /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial:       0A171047
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/yRsb_TbVV7gGVbtZ7PlNbQIZTU8.roa
Signing time:             Sat 01 Jan 2022 00:54:05 +0000
ROA not before:           Sat 01 Jan 2022 00:54:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.126.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169283655 (0xa171047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
        Validity
            Not Before: Jan  1 00:54:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c91b1bfd36d557b80655bb59ecf94d6d02194d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:43:6c:74:c7:3d:66:dd:0c:6e:d9:a9:f3:88:
                    08:7c:47:31:c8:bc:62:a4:65:ee:29:0a:99:b0:ee:
                    db:bf:40:ab:f7:e1:5d:01:11:a8:f8:25:0e:d8:83:
                    90:61:50:56:6d:61:f4:6b:0b:83:0d:04:ee:23:2b:
                    f9:3a:1b:96:0e:b7:49:fa:13:db:f0:fc:2b:cd:2a:
                    bf:1c:1a:11:65:28:66:00:77:24:af:c0:24:d5:20:
                    2a:a0:83:48:e7:01:7d:ce:30:53:cd:b9:ca:81:f6:
                    9e:53:00:46:b8:a0:71:86:d7:6b:3b:b0:2b:f9:87:
                    55:ab:99:2b:06:f2:e9:af:ff:29:f5:8a:39:8b:43:
                    57:b3:08:85:3a:2b:68:62:41:93:2c:89:5a:81:a9:
                    e4:fb:2e:82:e3:e7:a1:20:5c:78:7e:49:03:47:97:
                    04:27:11:19:f1:b7:17:50:e5:ba:9d:dd:79:06:0c:
                    f7:9c:ee:0c:3f:13:57:ce:7b:45:b9:93:14:34:af:
                    04:be:d7:ef:a6:ee:b9:be:65:33:0b:a2:86:64:ae:
                    a7:ff:db:8a:f4:81:ed:ee:d9:ff:ce:45:13:a2:67:
                    34:44:bd:15:40:7a:a6:6c:3a:12:b5:57:70:e0:07:
                    36:ca:98:12:95:58:9d:12:b8:5c:99:4e:9f:c1:54:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1B:1B:FD:36:D5:57:B8:06:55:BB:59:EC:F9:4D:6D:02:19:4D:4F
            X509v3 Authority Key Identifier:
                keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/yRsb_TbVV7gGVbtZ7PlNbQIZTU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:18:2f:ca:94:28:df:11:bb:6d:23:1b:89:8c:2f:6d:7e:eb:
         69:3b:0c:48:31:8d:b1:63:72:0d:c4:6e:4e:58:cc:91:82:cb:
         3f:bb:29:36:98:69:5f:d2:19:02:e1:06:98:69:e5:5a:76:80:
         6f:97:d0:96:b3:71:f7:2b:1b:a9:ce:36:c9:84:25:3c:48:da:
         2f:5a:fe:41:65:a3:4b:41:b2:84:7d:a9:42:62:a2:91:c4:52:
         e0:4c:6d:34:32:32:06:e7:85:64:72:44:3f:54:c2:95:3c:5a:
         9f:cb:df:63:c0:87:4b:f5:7d:88:70:66:4a:b9:1d:96:95:c4:
         cd:ca:6e:e2:8b:14:a7:f7:da:1c:5c:de:ca:14:df:1a:45:c7:
         28:71:48:67:93:ae:8e:4f:4c:f3:1a:18:16:00:20:3c:af:56:
         b7:fb:2a:47:0e:47:62:88:96:32:54:e2:59:7a:b9:d7:7e:41:
         96:ad:a1:e8:f1:3c:d1:10:95:b8:52:05:00:12:ef:2f:e9:8b:
         8a:11:c7:af:0d:f2:11:b3:44:d0:b5:6e:95:13:64:64:ca:23:
         e9:91:f3:72:02:45:7e:0e:28:01:ff:30:b7:10:38:8f:26:07:
         21:c6:00:52:9a:34:23:2b:0b:14:04:84:fd:73:ec:8e:c8:80:
         2a:ea:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:42:04 2025 by rpki-client