Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/9VLXiTibLH-FBauXgTfP82wa0Z4.roa
File:                     9VLXiTibLH-FBauXgTfP82wa0Z4.roa (raw, json)
Hash identifier:          KkU73VYvJww2NABfND9TQ0LBawaJG//X0jOTaOlz9VQ=
Subject key identifier:   F5:52:D7:89:38:9B:2C:7F:85:05:AB:97:81:37:CF:F3:6C:1A:D1:9E
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       018381F08A30B0F68A4536E4A7AD177450E3
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/9VLXiTibLH-FBauXgTfP82wa0Z4.roa
Signing time:             Wed 28 Sep 2022 02:32:48 +0000
ROA not before:           Wed 28 Sep 2022 02:32:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        213.139.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:81:f0:8a:30:b0:f6:8a:45:36:e4:a7:ad:17:74:50:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Sep 28 02:32:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f552d789389b2c7f8505ab978137cff36c1ad19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:e8:c6:b9:9a:fb:9f:e7:e3:cd:c2:dc:3a:
                    31:a0:fd:29:de:e7:a5:ef:7d:d8:e4:fe:80:fa:a1:
                    f8:30:97:d7:72:79:3e:85:15:4c:f3:4c:81:7a:2e:
                    85:ad:a6:74:81:23:85:cd:06:ba:63:dc:58:68:af:
                    01:9e:dc:6f:b9:8a:91:64:eb:0b:96:56:d3:5a:15:
                    93:2d:ff:85:b3:65:96:aa:43:be:f2:f1:63:d8:c6:
                    5b:de:35:d5:0b:24:e2:b3:17:1a:b3:23:02:bc:71:
                    40:c1:17:7e:ad:70:ad:aa:98:3f:bc:4f:68:a3:01:
                    2b:59:a4:2b:46:b7:0d:89:a7:f8:09:b9:79:f6:55:
                    46:17:ea:0f:f4:bf:26:37:6f:4b:2b:23:45:a1:cc:
                    c6:37:87:31:65:5e:92:47:95:6b:bf:57:1e:d2:46:
                    10:61:a5:df:82:1b:f6:cc:13:cb:9c:0c:f2:a9:c6:
                    45:03:5d:d0:0b:e7:d9:89:36:7d:5f:cc:60:27:e6:
                    60:43:4c:52:f2:8a:81:84:b9:96:14:3f:8b:03:35:
                    12:ed:c6:3d:ea:99:e2:c1:0b:14:5a:d1:c0:19:e9:
                    d3:71:04:d3:9c:50:6c:b8:7c:94:19:22:ee:1c:ed:
                    e9:7e:e9:e1:01:b0:cd:5b:cb:63:6a:07:b3:63:65:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:52:D7:89:38:9B:2C:7F:85:05:AB:97:81:37:CF:F3:6C:1A:D1:9E
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/9VLXiTibLH-FBauXgTfP82wa0Z4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:e5:7b:f7:31:27:87:2d:d5:e3:ba:15:bc:f3:68:58:46:f0:
         e8:57:f0:8f:bb:18:46:5a:74:19:07:d5:3c:f0:29:92:8d:7c:
         ac:27:3e:ac:b5:70:be:a9:26:b3:dd:3c:64:29:bc:29:58:47:
         0d:a4:94:11:67:fd:de:bd:08:3e:e7:a5:1f:b2:5a:0c:75:a7:
         7b:d8:5b:14:e3:df:0f:4a:0e:fe:d5:77:47:91:cf:87:fe:f0:
         37:3b:1c:e9:07:e4:fa:94:c5:d7:37:48:a9:69:84:30:ec:9e:
         7f:d0:25:57:4e:45:5b:83:89:10:84:b1:14:63:76:5f:c7:ac:
         0e:45:bd:e0:60:63:b1:44:32:17:9d:dc:d0:24:ec:d9:54:4f:
         5f:60:c0:a3:15:28:30:48:43:8c:df:ce:20:6d:dd:0c:b2:5f:
         f6:64:ba:e8:e1:2a:2f:75:dc:87:e1:22:8f:4b:dc:1e:d4:a7:
         fb:0b:58:39:c0:b1:09:4f:4d:93:2e:61:f7:91:75:4c:34:70:
         36:dd:42:92:02:c2:b9:be:3a:f3:88:b9:7c:9d:d8:81:31:09:
         0b:50:99:f7:47:ba:70:7c:a1:13:0f:e4:49:c8:18:19:cb:92:
         77:00:66:9d:38:d6:79:06:95:e5:a1:7c:01:4c:f9:1e:ed:85:
         74:ec:f3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:11 2025 by rpki-client