Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JOBERo-vgg6dldBoWViTCfV7X-A.roa
File:                     JOBERo-vgg6dldBoWViTCfV7X-A.roa (raw, json)
Hash identifier:          ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=
Subject key identifier:   24:E0:44:46:8F:AF:82:0E:9D:95:D0:68:59:58:93:09:F5:7B:5F:E0
Certificate issuer:       /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial:       01961E7A95F4E59C35F71708429F0825E50F
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JOBERo-vgg6dldBoWViTCfV7X-A.roa
Signing time:             Thu 10 Apr 2025 06:54:32 +0000
ROA not before:           Thu 10 Apr 2025 06:54:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     5650
IP address blocks:        213.137.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1e:7a:95:f4:e5:9c:35:f7:17:08:42:9f:08:25:e5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
        Validity
            Not Before: Apr 10 06:54:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=24e044468faf820e9d95d06859589309f57b5fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:1e:eb:40:1d:d7:17:71:42:b2:81:56:5b:
                    cd:1f:54:54:d2:42:4e:33:e0:cd:61:c8:c5:b5:f9:
                    07:55:73:fe:90:c8:79:11:2d:8d:be:a4:f3:42:9f:
                    db:9d:a5:81:08:d2:09:61:4f:05:9a:3e:fb:c9:0d:
                    20:dd:b6:d5:d6:fe:9b:90:e8:02:94:31:88:bc:21:
                    82:80:ec:c2:cc:c2:e2:7b:72:20:8d:c3:14:67:fb:
                    18:37:3f:55:a8:bb:0b:58:27:d2:a0:90:2a:d6:e7:
                    d6:94:62:46:08:27:e9:66:54:8c:01:81:81:bd:db:
                    ee:c7:84:30:31:de:e5:ef:e4:5f:cb:0c:14:93:e5:
                    f8:ed:7a:a3:e0:4c:b3:66:27:1b:25:22:0d:e3:17:
                    2d:5b:e6:49:03:65:b0:27:97:b2:d2:36:0b:d5:14:
                    a5:1c:de:ef:a1:7f:41:b3:e2:52:db:e1:7e:e8:1a:
                    98:62:23:c4:36:45:6d:6b:13:a2:ab:39:d8:75:78:
                    5f:27:a7:08:26:29:db:07:e3:94:44:30:70:b9:89:
                    d8:e9:e5:a8:27:a2:fe:58:2a:77:bb:4f:74:bf:bf:
                    ef:5a:ac:aa:94:8d:4a:16:03:4f:b5:c0:ed:e1:75:
                    d1:15:0f:8d:a0:1b:b6:4f:be:75:7e:b1:52:4f:7a:
                    61:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:44:46:8F:AF:82:0E:9D:95:D0:68:59:58:93:09:F5:7B:5F:E0
            X509v3 Authority Key Identifier:
                keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/JOBERo-vgg6dldBoWViTCfV7X-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.137.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:99:ab:0d:d2:3d:a7:b2:ef:7c:3e:b1:65:4a:cf:87:99:78:
         ac:86:5a:34:8f:75:85:ca:d4:fe:07:25:df:3f:7f:30:dd:37:
         ba:51:f9:0c:22:9b:c1:ba:77:5a:d4:bc:3e:01:1c:2e:4c:a8:
         3b:de:a4:53:9e:96:91:1e:29:3d:37:47:c2:19:1e:db:d1:6f:
         f4:4a:6a:f1:8c:78:db:79:71:69:71:c5:f3:0c:81:51:1b:29:
         58:b5:01:57:12:dc:11:8b:03:7c:f8:7f:8f:7c:7d:48:1a:58:
         25:38:fb:41:d4:47:e2:aa:36:0c:98:4b:46:7b:7f:3f:79:a2:
         92:ce:75:4c:d4:8f:96:fc:26:3c:a0:b6:ee:6e:b2:2c:1b:44:
         c5:a6:9d:43:38:60:70:0e:2e:d9:86:58:e1:6b:6a:7b:7d:90:
         f8:8e:01:4a:88:c6:89:c0:ba:64:fa:bd:23:64:82:7e:08:4c:
         4f:5c:50:ab:f1:5c:69:a6:38:2c:e3:87:7b:01:3a:3b:a1:1b:
         49:f2:f2:29:4b:f1:cd:2e:80:b8:71:68:77:c5:13:ae:8d:14:
         e4:80:a0:f5:41:45:99:1f:07:79:83:08:63:6f:24:8c:c0:d3:
         53:18:9f:2b:49:bc:a3:96:6f:65:11:3c:b8:d7:ab:a2:bf:28:
         c9:93:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net