Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bcU9Qkwuv_YfSfNZosnSVn1whM.roa
File:                     1-bcU9Qkwuv_YfSfNZosnSVn1whM.roa (raw, json)
Hash identifier:          KigNF8bL/sXU7RuuP4SS+6UH/I074/+LBFCV2g8hwzg=
Subject key identifier:   F9:B7:14:F5:09:30:BA:FF:D8:7D:27:CD:66:8B:27:49:59:F5:C2:13
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189E63B137D6148E930E7F8D854D462CEB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bcU9Qkwuv_YfSfNZosnSVn1whM.roa
Signing time:             Fri 11 Aug 2023 20:12:58 +0000
ROA not before:           Fri 11 Aug 2023 20:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:e6:3b:13:7d:61:48:e9:30:e7:f8:d8:54:d4:62:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 11 20:12:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9b714f50930baffd87d27cd668b274959f5c213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:16:f5:7b:bb:75:62:56:cd:b2:71:0a:a5:
                    1b:b4:98:18:31:79:e9:3c:22:34:ba:75:cc:4a:e1:
                    5d:07:fe:6f:24:03:5d:7f:b3:72:f8:bf:f9:5d:c4:
                    74:e4:8c:64:fd:68:a6:4a:4c:3e:cf:dc:c8:58:a7:
                    d5:87:29:07:0f:e6:6f:30:8f:52:59:c9:b4:a9:4d:
                    14:c7:2b:a6:b5:73:e2:5e:e2:b9:bf:ff:2e:c7:d8:
                    bf:72:62:7b:bb:22:44:3c:d7:3d:da:a0:db:da:2d:
                    71:68:ab:61:02:58:5c:ab:63:ec:de:a8:f4:63:c9:
                    cb:1a:14:22:9d:4d:24:8e:c5:db:78:14:ad:98:7d:
                    df:98:ec:9d:25:96:17:86:bf:52:fc:28:65:a0:66:
                    49:9f:c4:30:aa:7d:07:04:38:b0:27:8b:47:23:aa:
                    0d:63:24:e7:d8:47:a3:23:ea:2a:c0:53:59:85:33:
                    36:dc:47:e6:ab:8c:f6:f4:48:78:5a:5c:d9:ef:6b:
                    34:10:e1:07:73:6d:cf:76:72:40:1a:38:c3:35:8b:
                    1a:ff:7e:f0:6a:b6:3d:c8:e5:52:1d:be:9e:ae:d0:
                    1d:ae:c9:75:e6:96:4c:9c:be:25:ed:70:91:0f:69:
                    ae:56:0d:f5:fd:af:fd:22:cd:04:3b:17:5d:ad:08:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B7:14:F5:09:30:BA:FF:D8:7D:27:CD:66:8B:27:49:59:F5:C2:13
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bcU9Qkwuv_YfSfNZosnSVn1whM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:96:54:30:ff:64:b5:06:ee:66:27:02:35:d6:1f:a3:9c:
         6e:8b:20:aa:ac:02:90:82:59:4b:71:7f:00:2e:a6:6a:0d:87:
         c5:a4:7e:7c:dd:b3:e7:74:49:55:57:41:c9:97:94:79:85:c6:
         e6:31:71:b1:af:2e:ae:d1:a9:12:66:2c:47:e6:ba:57:18:8a:
         74:49:e6:2c:34:91:7f:ae:34:a2:cf:14:91:39:ec:77:74:b7:
         56:98:54:f5:62:81:2a:bb:36:1d:a4:8d:a3:75:9f:d5:ac:f3:
         d1:34:67:b5:34:cc:dd:a2:0c:a6:be:75:af:b5:b4:97:91:6c:
         0d:eb:36:14:3c:56:7e:b6:d8:7d:18:b6:95:e0:07:98:5d:d1:
         18:78:48:1a:cd:aa:50:8d:cf:3e:51:6a:7c:ec:73:c2:10:d3:
         eb:7b:9c:c6:fa:9d:5b:17:32:8b:24:55:5d:70:a8:4c:3a:18:
         d6:1c:01:56:90:61:13:61:18:3c:d5:80:5e:62:b7:8b:df:31:
         fa:61:48:a6:b9:b3:2d:3a:3a:43:c4:fb:06:a8:88:5d:40:6a:
         77:d7:53:40:2f:ef:55:8f:6e:83:84:c5:bd:2c:7b:8b:c2:3d:
         19:36:24:34:c8:81:6a:27:24:85:03:16:7c:f0:73:e3:50:50:
         56:82:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:15:35 2025 by rpki-client