Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1drxEPLnfb9huwHUvmlnNZB_P1U.roa
File:                     1drxEPLnfb9huwHUvmlnNZB_P1U.roa (raw, json)
Hash identifier:          huAh8VXnd0q0kr9r5u2x7hLFjBqaiox2dDoSfS+MUig=
Subject key identifier:   D5:DA:F1:10:F2:E7:7D:BF:61:BB:01:D4:BE:69:67:35:90:7F:3F:55
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01824483C77F33CC85CF0964768C2CC40206
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1drxEPLnfb9huwHUvmlnNZB_P1U.roa
Signing time:             Thu 28 Jul 2022 11:14:23 +0000
ROA not before:           Thu 28 Jul 2022 11:14:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:44:83:c7:7f:33:cc:85:cf:09:64:76:8c:2c:c4:02:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 28 11:14:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5daf110f2e77dbf61bb01d4be696735907f3f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:c3:48:79:9a:fe:53:ab:c3:cf:99:b7:a2:
                    2c:a1:d6:82:a3:f7:c6:6b:66:93:76:a9:06:e7:db:
                    54:11:43:dc:94:83:fc:01:68:5a:b3:74:6b:1b:c1:
                    b8:a8:f1:68:84:57:04:83:c6:17:9f:35:f3:aa:f4:
                    53:ce:70:77:cc:c9:84:01:87:ac:ad:3e:e0:66:d7:
                    bf:b3:80:e7:3d:05:09:0a:b4:e1:af:f0:f6:ba:e7:
                    05:15:00:62:00:b7:a4:ba:76:6f:5c:a9:68:1d:23:
                    04:2a:df:85:85:8e:e1:17:f9:06:ba:4d:b0:e3:82:
                    f5:1b:52:16:9d:b2:f7:61:60:b1:fc:8a:a4:e9:c7:
                    44:63:83:99:f7:dc:e8:3e:c7:39:85:ae:59:a0:4f:
                    7b:8c:9d:4b:19:cc:06:a9:c3:a2:94:96:48:a9:f5:
                    d9:57:f8:03:bb:50:33:4e:35:bc:b2:d6:19:ad:f7:
                    9e:ab:2b:49:70:a5:ad:5e:6d:ea:08:b1:09:42:bb:
                    db:3e:91:ee:cb:56:31:78:c4:a5:95:96:f7:6c:ed:
                    90:9b:6c:63:40:d3:6a:e7:95:64:aa:ca:fd:5f:a1:
                    c5:42:a8:f1:5d:35:d3:50:6f:84:d1:b8:5b:b6:11:
                    2a:57:b6:96:9b:cc:2a:66:61:5f:14:56:63:d7:d3:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DA:F1:10:F2:E7:7D:BF:61:BB:01:D4:BE:69:67:35:90:7F:3F:55
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1drxEPLnfb9huwHUvmlnNZB_P1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:5d:81:89:55:21:ae:96:a7:0c:08:21:22:d2:06:60:a0:76:
         0f:47:c9:76:25:ad:68:22:98:d8:73:48:33:db:82:d5:96:b8:
         6d:33:ac:ba:58:db:e7:ce:f7:3a:24:37:ea:ee:1f:98:ed:1d:
         a5:fd:1b:57:1d:40:1f:3f:42:40:d7:5d:d1:b1:56:dd:76:b4:
         80:87:aa:41:a0:e5:c7:fd:3b:69:46:11:21:b9:76:80:60:13:
         c4:c2:6f:2a:45:a3:1c:3d:4e:91:76:4c:93:14:56:7b:ad:93:
         20:78:65:66:97:d9:7f:b7:a1:10:e9:39:0b:d3:8e:f6:18:f8:
         55:cc:3d:33:a9:77:bd:42:a1:dd:fd:06:d0:32:cf:78:ce:3c:
         94:6e:90:ec:d1:5f:c2:a7:e0:2a:df:ca:7f:23:5d:6d:e0:09:
         5a:ac:94:b2:73:67:ab:1a:7c:5f:01:95:e8:87:48:61:46:c9:
         8a:99:05:57:e1:e2:39:77:8c:af:d0:e3:f0:5b:08:da:76:f8:
         56:4d:b6:96:da:4d:1f:9e:10:66:88:5e:25:92:e0:b4:58:df:
         16:ee:1a:fa:4e:e0:94:7e:03:ef:35:90:f8:04:0e:85:66:b4:
         eb:8a:c4:26:8e:0a:6f:a7:ca:d5:21:32:5f:90:e1:ca:a6:dd:
         d6:52:eb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:00:48 2025 by rpki-client