Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/338hiVTucedI3UOkQ0KPKtA1jTA.roa
File:                     338hiVTucedI3UOkQ0KPKtA1jTA.roa (raw, json)
Hash identifier:          6BDfsbyQwicrM2pzXb5BFE/5vW9BPdLA6QmgEDnDG14=
Subject key identifier:   DF:7F:21:89:54:EE:71:E7:48:DD:43:A4:43:42:8F:2A:D0:35:8D:30
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       73D13F9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/338hiVTucedI3UOkQ0KPKtA1jTA.roa
Signing time:             Sat 19 Mar 2022 12:10:46 +0000
ROA not before:           Sat 19 Mar 2022 12:10:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1943093151 (0x73d13f9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 19 12:10:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df7f218954ee71e748dd43a443428f2ad0358d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:55:98:0d:92:cc:fb:1b:7d:a0:36:53:84:
                    63:be:71:58:33:07:ab:92:a1:b4:a3:d4:a2:b6:78:
                    09:b5:fe:f7:3e:2c:0a:0a:22:b0:b5:10:43:e7:05:
                    a9:62:c6:2c:22:2d:9d:66:01:71:6b:fe:ee:18:7d:
                    ce:58:58:12:45:d4:ab:b2:74:5b:df:52:c5:45:49:
                    47:4c:1a:90:37:a1:a5:54:f9:43:ba:14:fc:cd:a4:
                    22:5f:13:45:b7:fa:cf:a2:e1:a3:83:74:3f:d9:19:
                    ee:9b:49:d6:ba:3c:bf:e2:27:c5:66:b7:2f:ed:08:
                    eb:1b:5f:72:04:35:c4:19:15:4f:e2:eb:47:56:47:
                    44:a9:90:c9:cb:87:81:53:99:11:74:40:15:a5:e4:
                    a0:09:29:86:11:f8:49:af:1f:7c:a1:0f:7e:e7:7c:
                    8d:55:21:02:a5:19:3a:7f:1a:2c:c6:18:50:4b:8c:
                    f6:15:ac:5b:9d:79:fc:7e:b1:0a:63:e1:b2:d2:3d:
                    2b:b4:4e:85:9a:44:3f:3b:79:11:ce:2b:ee:98:ae:
                    2a:1c:63:cb:8f:a4:47:5b:af:11:79:e0:3d:46:b6:
                    90:29:0d:d7:3f:c7:25:02:6f:ff:a9:19:50:98:6f:
                    be:1b:6a:4e:87:72:cd:3d:d2:20:d3:2a:51:79:ea:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7F:21:89:54:EE:71:E7:48:DD:43:A4:43:42:8F:2A:D0:35:8D:30
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/338hiVTucedI3UOkQ0KPKtA1jTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:2c:2d:1b:d3:79:8c:e1:b8:ec:6e:94:e1:7d:85:76:64:
         99:03:19:aa:fe:dc:10:ad:eb:db:1d:13:0b:a8:e7:91:35:23:
         cf:dc:30:13:fd:e3:1d:e4:e7:da:36:5e:04:fe:01:ba:e9:75:
         1d:8b:c0:b7:bd:cc:d9:b3:1f:69:0b:23:0d:21:a0:a6:04:97:
         21:f6:b1:d1:71:8a:f7:aa:77:77:9f:68:7a:09:86:29:ab:da:
         37:95:2a:ce:82:3f:0c:4b:f2:da:3c:b5:49:15:99:e2:4e:c4:
         67:c5:92:22:44:cd:2b:6d:1c:d5:a5:fb:ef:92:52:54:be:0a:
         06:93:a1:04:6b:d5:81:b2:3d:53:fe:73:a7:c0:8b:08:53:54:
         11:f8:8e:4a:75:de:3a:6e:38:0c:97:58:04:41:dc:0b:9c:ca:
         6a:99:2b:88:d8:a9:b8:d9:e6:53:26:a2:ca:bf:83:be:d1:55:
         25:4c:a9:28:5f:7a:2d:0d:68:e3:c1:e6:8d:e5:26:d0:f8:d5:
         bf:05:a6:50:58:b3:e5:b0:29:db:5b:20:67:2d:54:0d:21:7b:
         3a:61:0b:f1:47:cc:9e:74:57:d0:a7:c7:4d:92:fb:d5:ae:85:
         6e:1e:a3:77:f4:04:26:4d:36:05:32:1e:fa:8f:39:67:09:d2:
         4c:eb:80:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:58:43 2025 by rpki-client