Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/NVJf-5Gx0foqJa85FP-HPGtN5wk.roa
File:                     NVJf-5Gx0foqJa85FP-HPGtN5wk.roa (raw, json)
Hash identifier:          s/IHZ+Grwn0n0cxFSQF8OC1Yd8wC2AZzIQiJGNSSJB8=
Subject key identifier:   35:52:5F:FB:91:B1:D1:FA:2A:25:AF:39:14:FF:87:3C:6B:4D:E7:09
Certificate issuer:       /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial:       01A01E235432C7F1826B72EE977829B8D781
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/NVJf-5Gx0foqJa85FP-HPGtN5wk.roa
Signing time:             Thu 20 Aug 2026 07:47:06 +0000
ROA not before:           Thu 20 Aug 2026 07:47:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60472
IP address blocks:        185.128.11.0/24 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1e:23:54:32:c7:f1:82:6b:72:ee:97:78:29:b8:d7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
        Validity
            Not Before: Aug 20 07:47:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=35525ffb91b1d1fa2a25af3914ff873c6b4de709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:35:b3:bb:44:f8:92:0a:24:fa:35:d7:e0:
                    9b:0b:d3:6f:94:14:c4:69:4e:74:5f:e3:d5:99:b4:
                    e3:22:9e:9d:15:c4:e0:9a:28:88:86:c4:4d:c7:81:
                    99:db:fe:72:46:bc:4d:1b:40:80:ce:1d:cc:30:0d:
                    7f:ad:53:3d:59:27:3d:0e:81:4c:d7:81:35:30:24:
                    47:5b:d3:a2:c8:25:6c:64:f1:2f:7a:29:b0:25:62:
                    44:25:14:70:02:98:79:20:fa:41:92:6e:e3:7e:35:
                    3b:7b:b8:e5:8b:79:6c:e8:4f:79:b3:39:2c:c5:46:
                    bf:90:fd:94:02:12:13:c3:b0:98:ad:6c:84:dd:52:
                    52:c2:bc:86:7f:44:31:9e:fb:07:04:e2:f7:66:67:
                    fa:de:03:66:2d:8b:1a:14:28:f7:26:84:9d:da:b9:
                    77:f8:0b:49:92:02:d3:f9:f9:6a:cc:c8:7a:07:cd:
                    2e:85:83:c0:79:66:cf:ce:fc:c7:5e:99:70:97:dc:
                    f1:e2:3d:6c:e0:c7:e1:40:39:3b:02:8b:a7:b6:4d:
                    72:1e:e2:e6:89:02:7f:26:65:4b:95:7d:31:c2:fe:
                    f6:39:ac:d7:d0:1e:81:ff:97:99:16:10:67:49:d3:
                    8a:4a:de:6f:1f:c2:c4:27:ec:b1:3b:09:fd:4e:89:
                    17:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:52:5F:FB:91:B1:D1:FA:2A:25:AF:39:14:FF:87:3C:6B:4D:E7:09
            X509v3 Authority Key Identifier:
                keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/NVJf-5Gx0foqJa85FP-HPGtN5wk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.128.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:86:0e:7d:91:9d:2b:a6:e8:48:47:76:98:8c:ea:51:3d:69:
         3b:50:bb:08:79:9d:14:28:e6:cd:fe:75:4e:da:9e:7e:05:19:
         7b:a4:b5:2d:10:77:c0:59:14:a6:6c:7d:4f:eb:0e:a3:02:41:
         7f:6c:6d:06:cb:96:5d:14:1a:40:0a:91:4b:7f:ba:fa:ea:5b:
         b6:8b:b5:7b:b2:12:50:38:53:6c:49:e4:84:78:e2:8f:9a:b7:
         96:35:b3:53:c1:b3:f1:97:a5:32:3b:75:5e:f3:ec:34:ae:c8:
         f3:bc:ca:30:7b:c5:78:18:5a:56:c3:73:b4:34:b0:47:38:0a:
         0b:38:37:06:7e:81:d5:45:1d:90:c0:f5:a7:73:e2:8c:ea:46:
         28:64:ee:1d:60:f8:31:70:b3:6d:d8:65:1f:05:db:47:f1:7e:
         39:04:a9:25:36:59:e5:9c:26:e3:e5:f7:47:c6:0f:51:0c:88:
         7b:a1:12:e1:16:4d:f7:dc:9f:52:0e:07:1b:f0:55:7e:bf:3f:
         10:1e:42:e0:ba:7e:a7:4e:97:64:da:c4:ae:e0:63:e7:65:2e:
         c3:cf:f2:89:9d:e3:cd:5b:48:c8:0d:98:c8:fb:33:6c:a5:67:
         ac:b6:38:9b:03:d7:6b:e9:23:19:64:5f:b9:8d:fc:d1:1a:5c:
         ba:1e:75:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAeI1Qyx/GCa3Lul3gpuNeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi
OGZhMjYwHhcNMjYwODIwMDc0NzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTUyNWZmYjkxYjFkMWZhMmEyNWFmMzkxNGZmODczYzZiNGRlNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Io1s7tE+JIKJPo11+CbC9NvlBTE
aU50X+PVmbTjIp6dFcTgmiiIhsRNx4GZ2/5yRrxNG0CAzh3MMA1/rVM9WSc9DoFM
14E1MCRHW9OiyCVsZPEveimwJWJEJRRwAph5IPpBkm7jfjU7e7jli3ls6E95szks
xUa/kP2UAhITw7CYrWyE3VJSwryGf0QxnvsHBOL3Zmf63gNmLYsaFCj3JoSd2rl3
+AtJkgLT+flqzMh6B80uhYPAeWbPzvzHXplwl9zx4j1s4MfhQDk7Aountk1yHuLm
iQJ/JmVLlX0xwv72OazX0B6B/5eZFhBnSdOKSt5vH8LEJ+yxOwn9TokXswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVSX/uRsdH6KiWvORT/hzxrTecJMB8GA1UdIwQY
MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt
MDVkOWMxY2Q3NDI1LzEvTlZKZi01R3gwZm9xSmE4NUZQLUhQR3RONXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1
LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYALMA0G
CSqGSIb3DQEBCwUAA4IBAQC9hg59kZ0rpuhIR3aYjOpRPWk7ULsIeZ0UKObN/nVO
2p5+BRl7pLUtEHfAWRSmbH1P6w6jAkF/bG0Gy5ZdFBpACpFLf7r66lu2i7V7shJQ
OFNsSeSEeOKPmreWNbNTwbPxl6UyO3Ve8+w0rsjzvMowe8V4GFpWw3O0NLBHOAoL
ODcGfoHVRR2QwPWnc+KM6kYoZO4dYPgxcLNt2GUfBdtH8X45BKklNlnlnCbj5fdH
xg9RDIh7oRLhFk333J9SDgcb8FV+vz8QHkLgun6nTpdk2sSu4GPnZS7Dz/KJnePN
W0jIDZjI+zNspWestjibA9dr6SMZZF+5jfzRGly6HnUx
-----END CERTIFICATE-----