Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-7-V8LYlQnhMnPulTdiHHv6BCY4.roa
File:                     1-7-V8LYlQnhMnPulTdiHHv6BCY4.roa (raw, json)
Hash identifier:          fSOrsE3SH/z11XVyt6PLxwqz33+9HeDxyosJHCgWtSA=
Subject key identifier:   FB:BF:95:F0:B6:25:42:78:4C:9C:FB:A5:4D:D8:87:1E:FE:81:09:8E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018827B0C98615FE00D14D76FA540EA8B3E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-7-V8LYlQnhMnPulTdiHHv6BCY4.roa
Signing time:             Wed 17 May 2023 03:11:17 +0000
ROA not before:           Wed 17 May 2023 03:11:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:27:b0:c9:86:15:fe:00:d1:4d:76:fa:54:0e:a8:b3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 17 03:11:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fbbf95f0b62542784c9cfba54dd8871efe81098e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:22:70:6f:6e:c2:33:78:e0:4e:a5:da:43:
                    af:8a:77:48:62:56:f3:8e:15:9a:30:b5:b4:e3:e3:
                    df:92:e7:4a:20:9c:de:aa:66:e1:75:95:31:a4:5e:
                    b9:53:46:3b:f5:9b:21:84:51:c6:55:e0:a6:95:9a:
                    a6:2f:33:8a:17:37:08:23:11:64:a8:e1:ec:ea:b8:
                    e1:35:5d:cd:27:fe:12:da:96:4a:96:c4:92:fe:cb:
                    a4:77:97:3d:32:14:a7:1c:d3:6f:5b:4f:47:da:11:
                    8e:fc:42:1e:7c:c5:6b:79:c9:a3:08:30:fb:34:a8:
                    8c:c7:39:b9:38:7c:52:53:3b:b0:c6:61:01:2a:43:
                    75:83:60:4c:48:54:cc:0c:9a:2a:0d:9d:4b:16:01:
                    b8:55:b2:65:66:d8:3c:3f:f6:df:05:dd:b5:df:fe:
                    52:87:03:e3:74:e0:33:82:c3:82:ca:6b:93:58:09:
                    48:68:17:01:9a:fe:8b:ca:99:58:f6:b6:75:a0:72:
                    ce:6e:ad:f6:c2:98:c6:83:a0:cb:66:06:d3:f5:c8:
                    3d:e3:90:3e:a6:61:75:65:a7:e5:9a:ac:f4:47:c3:
                    31:c7:f7:19:5e:f0:72:18:55:16:74:ef:35:ad:4a:
                    e9:b9:73:c0:2d:bb:c3:6d:7e:3b:0b:27:e9:fc:b3:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BF:95:F0:B6:25:42:78:4C:9C:FB:A5:4D:D8:87:1E:FE:81:09:8E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-7-V8LYlQnhMnPulTdiHHv6BCY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:03:cb:7c:58:d6:73:61:45:77:5f:0d:d5:b5:ba:41:b9:9e:
         fe:96:7e:ca:ca:85:3b:63:3e:85:bb:c8:2c:82:6d:ae:f6:9b:
         ec:79:b7:ac:69:48:8c:10:e4:b1:a1:d6:2a:d4:14:7e:63:38:
         4c:ae:d8:21:62:64:7c:7e:8b:fe:91:16:58:80:47:b1:9a:6e:
         cb:b8:2d:97:d1:87:8f:83:db:86:41:21:69:9d:75:a6:cb:a0:
         80:3c:ef:f7:e3:68:d6:1f:e4:26:0e:f8:9e:2c:83:fc:47:d1:
         16:04:a5:35:68:63:96:d7:ad:60:96:b5:3c:10:e4:2a:2e:b0:
         55:a2:22:a2:42:85:c7:20:69:38:d9:86:7b:d9:b1:8b:7d:70:
         58:f8:87:14:ba:91:c7:9d:1e:ad:ee:a0:81:fd:aa:93:cc:1d:
         fc:c2:5b:10:c0:d0:26:54:65:85:13:89:9a:7f:75:ed:5d:e6:
         d7:bc:31:86:87:14:88:81:ce:b7:10:3f:27:03:ec:ed:8d:f3:
         24:57:4b:dc:3f:bb:56:95:20:8d:5b:bd:a4:c3:27:0a:85:13:
         cd:f0:c6:09:cb:8e:7a:7d:44:f6:2d:e8:fe:e7:3f:5b:1d:3d:
         8b:d6:3b:35:78:47:38:3b:30:95:67:b8:55:12:0f:71:9c:eb:
         5d:c1:50:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:53:03 2025 by rpki-client