Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1jaqSphsnTAbngnuAu4M-0bftgY.roa
File:                     1jaqSphsnTAbngnuAu4M-0bftgY.roa (raw, json)
Hash identifier:          XqMeB19MUnpGbIHlt1Xym4bC2IdFde3bU45KCd4r3Fc=
Subject key identifier:   D6:36:AA:4A:98:6C:9D:30:1B:9E:09:EE:02:EE:0C:FB:46:DF:B6:06
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01896FFE5820B2B2FA70DD04309B8B77F0A3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1jaqSphsnTAbngnuAu4M-0bftgY.roa
Signing time:             Wed 19 Jul 2023 21:11:26 +0000
ROA not before:           Wed 19 Jul 2023 21:11:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6f:fe:58:20:b2:b2:fa:70:dd:04:30:9b:8b:77:f0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 19 21:11:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d636aa4a986c9d301b9e09ee02ee0cfb46dfb606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:74:0b:19:2e:80:f6:84:fc:fd:e0:91:1e:
                    e3:6e:97:8d:38:36:1d:e7:7f:fe:81:54:51:4b:dd:
                    d0:d1:b1:2e:ea:38:2a:13:a3:c0:3e:46:bf:87:0a:
                    b9:62:41:ee:98:ca:ae:a8:46:06:7b:f1:5b:ca:24:
                    63:71:40:fe:2d:30:bd:53:71:14:52:18:8c:be:d5:
                    1a:d3:fa:54:eb:60:16:86:fd:75:a1:8d:41:6a:b5:
                    99:5e:78:9c:95:3c:03:57:9f:01:a4:f4:2a:c7:b9:
                    79:96:58:09:ac:12:97:3d:bb:c6:19:df:58:3f:a0:
                    0b:84:87:d4:93:2e:dc:0f:54:2a:cd:72:80:0a:ca:
                    28:36:b8:a6:f1:18:fe:cf:1a:bc:6c:cf:19:44:80:
                    41:0b:d9:56:d3:b7:a4:b7:96:ab:e2:bc:2c:08:c2:
                    43:76:e5:b4:b9:85:70:bb:06:e6:51:a2:10:b9:2c:
                    d5:c6:1d:aa:5d:44:b2:cf:b1:50:2b:0d:f5:e4:80:
                    b5:ed:e7:80:28:30:9b:d4:87:19:91:f7:50:6e:1e:
                    22:51:c9:54:01:fc:15:9b:b1:b5:e2:0a:a6:9b:31:
                    7d:ee:3b:1b:4e:3c:27:91:96:5c:ed:9d:fd:c4:d5:
                    e7:08:d5:ef:98:ce:b7:d5:b9:e3:eb:2b:e1:e7:06:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:36:AA:4A:98:6C:9D:30:1B:9E:09:EE:02:EE:0C:FB:46:DF:B6:06
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1jaqSphsnTAbngnuAu4M-0bftgY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:ab:46:fd:45:c1:ed:c9:f4:80:a8:09:87:37:79:11:04:98:
         f1:1f:83:2a:1b:a7:25:ae:1e:29:ff:9d:5f:6a:12:d8:77:5a:
         89:ef:16:20:91:39:f7:44:80:67:32:35:0f:09:fe:9b:db:a9:
         e3:59:81:d7:8c:b2:9f:eb:ef:a7:d5:b5:16:9b:64:c4:7b:80:
         20:73:b6:f0:2b:5d:22:e3:41:30:37:6d:67:4b:e8:1d:7f:75:
         f5:af:50:e7:6d:66:48:1f:da:77:c7:a5:c1:4d:a5:64:97:ef:
         d5:1a:6a:d7:13:43:67:bd:d5:9d:a3:7f:6a:46:e8:fe:d2:87:
         f0:29:0c:69:de:fd:f3:68:e8:c5:a8:8b:97:98:55:c9:04:01:
         f9:75:78:ca:f0:b1:31:1c:58:db:61:c7:97:9e:08:40:4f:84:
         be:8c:81:33:57:f7:08:fd:1b:75:30:49:78:c2:f2:44:96:59:
         69:66:93:a5:5d:31:82:25:b8:7f:d3:19:44:dd:21:c5:b9:b2:
         f0:31:e8:c2:d4:14:22:e1:4f:1e:b3:5c:1f:96:56:82:90:fe:
         c7:fd:37:e1:74:72:2c:79:d6:a0:49:d7:0a:70:f0:47:2d:8d:
         16:74:3f:f3:4e:19:53:d7:67:12:38:8a:5a:43:db:68:d0:c4:
         27:a0:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:58:30 2025 by rpki-client