Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/_jlBiE7O0eaXuvKKOMYHsdQXqnY.roa
File:                     _jlBiE7O0eaXuvKKOMYHsdQXqnY.roa (raw, json)
Hash identifier:          oWKKB2sRk4IOXOCQEBV2cawhfw8fQHgzKjTy0CJvom8=
Subject key identifier:   FE:39:41:88:4E:CE:D1:E6:97:BA:F2:8A:38:C6:07:B1:D4:17:AA:76
Certificate issuer:       /CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
Certificate serial:       018A5F0A58862EA8DB368EEA7DEDA2C7D47A
Authority key identifier: A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/_jlBiE7O0eaXuvKKOMYHsdQXqnY.roa
Signing time:             Mon 04 Sep 2023 07:13:48 +0000
ROA not before:           Mon 04 Sep 2023 07:13:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1942
IP address blocks:        129.88.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5f:0a:58:86:2e:a8:db:36:8e:ea:7d:ed:a2:c7:d4:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c1bb101a814b9e2ee8264f81352a5bf2f2d025
        Validity
            Not Before: Sep  4 07:13:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe3941884eced1e697baf28a38c607b1d417aa76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:46:c4:f7:5c:30:95:2b:70:87:83:5c:65:
                    c5:4b:7f:ad:eb:76:81:c2:1e:7f:f6:8d:57:ed:95:
                    6c:67:45:70:d7:f7:9f:33:ed:37:d5:1d:dc:1e:46:
                    6e:9f:00:78:2e:b5:d9:a3:78:3e:42:5d:7a:f5:fe:
                    32:0a:1d:fa:21:7a:64:09:58:e2:e2:35:a5:01:94:
                    20:91:49:4b:f9:11:ad:b1:4d:b1:4d:d7:fb:c6:74:
                    b7:6e:59:e8:af:14:b1:1d:81:9d:90:71:17:71:78:
                    98:c0:d3:b4:a8:fa:cb:6a:30:53:04:76:d4:38:d2:
                    68:8e:ce:52:b3:7a:0f:dd:69:8b:10:bb:f5:e8:31:
                    10:f9:4d:43:2b:47:4f:77:2a:e8:48:82:30:93:9e:
                    91:a3:f3:35:32:e5:69:e5:76:9a:bf:0a:da:61:68:
                    ce:25:e4:da:c9:4f:d7:bc:79:78:dc:d3:2c:44:8f:
                    d9:f5:ad:37:31:f3:37:dd:d8:12:05:a4:9f:67:bc:
                    15:7d:0f:f9:92:b6:ed:f6:bb:67:26:1a:1e:6f:1f:
                    44:14:8b:75:80:00:67:e6:d4:69:cf:6c:19:13:9e:
                    4a:54:ea:ad:d1:63:6a:a4:f1:52:9f:ff:8f:5e:98:
                    5d:a1:dc:82:03:86:41:b8:ca:eb:12:a4:c9:5f:8e:
                    64:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:39:41:88:4E:CE:D1:E6:97:BA:F2:8A:38:C6:07:B1:D4:17:AA:76
            X509v3 Authority Key Identifier:
                keyid:A4:C1:BB:10:1A:81:4B:9E:2E:E8:26:4F:81:35:2A:5B:F2:F2:D0:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMG7EBqBS54u6CZPgTUqW_Ly0CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/_jlBiE7O0eaXuvKKOMYHsdQXqnY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5ba610-25bb-45c9-8af7-8c38b690762f/1/pMG7EBqBS54u6CZPgTUqW_Ly0CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:bd:10:ec:cb:d7:31:ad:36:2c:9e:f2:e6:33:66:55:98:
         55:bd:f8:26:5e:eb:7c:99:5c:4e:5e:da:7e:85:9a:47:4d:ce:
         ae:d7:0b:bc:3b:3f:65:d8:73:02:8a:63:3e:e6:6b:cd:fc:c9:
         29:f4:51:e0:fa:96:da:f0:ae:63:d1:ea:35:a4:66:c0:c2:f9:
         66:0f:a1:02:39:91:86:fc:9d:53:65:5b:14:91:39:16:5b:3e:
         72:0b:98:06:91:1e:d3:9c:aa:52:d2:f5:df:ab:fd:62:f3:fb:
         1d:74:b8:87:36:6a:59:dc:ab:8e:2d:8c:d8:f6:43:84:29:be:
         a6:fa:9f:a4:a5:82:a4:2d:bd:d8:1f:80:c5:a1:8b:a8:7f:3a:
         c2:20:04:37:b0:2f:23:bf:95:93:1a:ec:ba:ea:d0:70:2d:1d:
         27:0b:a5:f0:39:99:77:38:6f:57:0a:33:2c:bd:85:a5:49:f6:
         51:a9:68:50:95:c8:a9:a0:84:e0:72:35:36:91:85:e0:da:9d:
         7d:c6:d3:75:30:9b:83:42:1c:72:b6:6a:08:77:b2:b7:3d:2a:
         cc:2f:70:b0:ad:ec:e5:74:9a:ee:df:d4:f3:f4:60:8f:05:42:
         8e:ff:f1:2d:8d:6d:97:99:bd:e0:90:40:d6:32:cb:ab:bc:35:
         32:05:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:50:49 2025 by rpki-client