Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/glKcb_63yH6pdfCPhZtJ3Axq-rA.roa
File:                     glKcb_63yH6pdfCPhZtJ3Axq-rA.roa (raw, json)
Hash identifier:          ovva1V7OgA417e1sRg3ZEsrM7o3Y1k2NFEcVGYUkaEs=
Subject key identifier:   82:52:9C:6F:FE:B7:C8:7E:A9:75:F0:8F:85:9B:49:DC:0C:6A:FA:B0
Certificate issuer:       /CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Certificate serial:       077499E9
Authority key identifier: 0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/glKcb_63yH6pdfCPhZtJ3Axq-rA.roa
Signing time:             Wed 30 Mar 2022 15:29:37 +0000
ROA not before:           Wed 30 Mar 2022 15:29:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49882
IP address blocks:        185.88.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125082089 (0x77499e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
        Validity
            Not Before: Mar 30 15:29:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82529c6ffeb7c87ea975f08f859b49dc0c6afab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f5:3a:22:34:be:d2:01:a5:61:b9:ca:1b:d6:
                    ce:2d:84:94:a2:3d:8a:17:8a:ba:77:ac:ee:4e:db:
                    b0:7a:78:ef:5c:0b:27:3a:c0:50:75:2b:66:74:3c:
                    18:ca:62:b3:37:c5:58:d8:24:c8:3c:0b:f1:3b:93:
                    a7:3a:4f:99:11:1f:96:25:43:7d:95:ee:4a:92:47:
                    34:7b:3d:ec:05:32:63:01:21:43:ef:a3:52:c3:7e:
                    43:fd:e4:e6:79:a3:b8:a0:1b:1c:7e:39:4a:95:dd:
                    56:55:45:07:e1:90:e1:ba:a8:ef:6c:d2:e5:24:fb:
                    65:0b:f3:71:35:cd:35:5d:79:28:2c:eb:6a:bb:68:
                    b0:61:e3:27:7d:d6:5a:d3:9e:e0:1e:fc:aa:6b:24:
                    7b:bd:47:1f:9d:a9:5b:62:be:74:97:4d:84:11:4e:
                    a9:20:f0:fc:c0:a7:5f:4c:e1:45:b0:dd:83:5f:37:
                    e1:75:77:6b:7e:d6:8a:61:3b:cc:c7:aa:25:8f:b6:
                    3a:fb:4d:b8:1d:61:19:91:e4:b7:f1:f7:f8:7f:9c:
                    ec:31:c9:6f:dd:28:2b:b2:ee:fa:8b:29:ae:98:a3:
                    05:2d:74:e8:ce:c8:db:57:19:1f:58:1a:a6:e3:e5:
                    00:70:28:92:b8:7c:c0:ff:99:11:e0:34:d9:b6:50:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:52:9C:6F:FE:B7:C8:7E:A9:75:F0:8F:85:9B:49:DC:0C:6A:FA:B0
            X509v3 Authority Key Identifier:
                keyid:0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/glKcb_63yH6pdfCPhZtJ3Axq-rA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/CxdYc63rg8jxai4OPLslHliDOoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.88.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c1:73:6c:e1:1f:c6:63:41:f0:28:55:46:f6:99:fd:bf:46:
         94:68:be:4b:f9:f3:c9:83:4d:c2:4d:33:b6:fe:df:5c:20:8c:
         98:1e:11:56:2e:fa:d9:5a:8a:32:68:48:b3:2d:1f:3f:73:29:
         e3:6a:21:16:38:fc:2f:00:85:6e:e8:e7:c2:f7:c3:48:b2:79:
         74:9b:6a:9e:44:65:43:4d:e0:f0:71:88:c7:db:f4:80:43:f1:
         b8:89:05:22:f6:e7:61:00:2d:32:2c:c4:f8:8b:9e:0c:c1:03:
         19:d7:1f:cd:75:60:55:22:1c:56:18:4a:d7:31:3f:ba:45:95:
         5a:82:34:b7:fc:68:0c:e2:fe:49:a0:0d:35:cd:ba:ff:e2:a0:
         a0:dc:73:9c:19:2b:22:d5:0d:cf:e9:73:2d:68:51:1a:ac:fd:
         e2:c8:55:2e:05:dc:06:5b:b3:01:d3:e4:38:7f:a6:3c:c2:69:
         5a:49:c8:d9:0d:d7:5d:3c:14:3d:89:44:c3:a8:78:dc:ba:bc:
         92:e9:9f:ad:fa:95:35:0e:00:82:61:0e:fb:49:e5:98:ee:77:
         67:ae:57:83:72:25:07:8e:22:c6:20:51:ec:bd:48:44:67:21:
         0a:59:f1:ab:24:b2:60:3b:43:1e:dd:3e:ed:4c:9f:96:d9:c4:
         b5:e4:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:07 2025 by rpki-client