Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3qG7rgyJ2staawIhG77ifTJ1sPA.roa
File:                     3qG7rgyJ2staawIhG77ifTJ1sPA.roa (raw, json)
Hash identifier:          LKhtWv4fY1gMEzy+nc+XvbnDV7aN1QfpvXage2LVRgg=
Subject key identifier:   DE:A1:BB:AE:0C:89:DA:CB:5A:6B:02:21:1B:BE:E2:7D:32:75:B0:F0
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       8BB98C92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3qG7rgyJ2staawIhG77ifTJ1sPA.roa
Signing time:             Sat 11 Jun 2022 03:11:02 +0000
ROA not before:           Sat 11 Jun 2022 03:11:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
                          2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2344193170 (0x8bb98c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 11 03:11:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dea1bbae0c89dacb5a6b02211bbee27d3275b0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:fd:9d:19:b4:65:df:a0:72:9d:2c:a4:24:
                    2e:f8:0f:52:9c:5c:90:7a:33:ed:05:92:9d:3e:1d:
                    f0:82:52:6b:21:04:e5:3d:22:ef:1f:e0:95:61:fa:
                    52:c5:6b:30:1f:0b:e8:b7:9e:aa:19:26:f2:55:41:
                    0a:72:d8:b4:09:d6:31:c0:4e:f7:4f:38:c1:1a:f3:
                    af:cc:6d:08:60:8d:65:79:09:91:d6:b3:f0:1c:08:
                    60:a0:4b:06:81:ad:dd:07:92:4b:fe:93:ce:4c:83:
                    bf:87:35:96:d2:64:05:b0:b5:5d:67:b6:4f:2d:c1:
                    3f:6f:8d:73:8c:3f:c0:dc:d4:28:da:cc:20:a8:a9:
                    c4:c6:ba:14:eb:10:f4:b6:88:72:73:ab:4d:3b:6b:
                    bb:2b:4d:6b:81:1a:e7:9b:53:4e:81:d9:9e:f8:21:
                    ae:63:49:3d:67:4c:52:19:c7:9c:55:73:a0:5f:92:
                    a6:54:a3:1b:96:19:29:5a:1d:15:d4:f3:34:02:d3:
                    7d:1d:65:4f:82:51:40:50:53:50:15:5d:9a:69:3f:
                    c2:ff:d9:4a:84:85:ca:2d:9a:9c:45:d7:6c:5b:29:
                    fb:e6:00:a4:e7:c0:db:b8:0f:16:c9:4a:16:cf:6e:
                    6e:c4:99:24:06:13:f7:9e:1c:12:a9:f0:fb:3b:88:
                    a4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A1:BB:AE:0C:89:DA:CB:5A:6B:02:21:1B:BE:E2:7D:32:75:B0:F0
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3qG7rgyJ2staawIhG77ifTJ1sPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:43:b1:91:49:6a:fd:ac:2c:dc:ca:17:9f:e3:96:40:90:47:
         dd:7a:24:2d:5a:39:19:93:4c:e0:df:24:88:05:c4:1a:af:4f:
         ff:32:90:08:db:dc:c2:5a:72:26:de:03:a5:67:c1:e3:cc:91:
         c4:eb:97:68:dc:a7:60:88:f6:35:51:6d:53:16:e5:05:f4:43:
         61:5d:40:14:73:de:85:fc:35:16:49:bc:ca:c4:7d:73:fe:e9:
         c8:1b:83:e9:a0:f9:e2:37:bb:16:ca:02:17:29:28:79:43:93:
         2e:8e:49:5a:48:78:48:ba:d5:c0:0c:b1:4d:36:82:6d:fc:7b:
         56:de:0f:d6:83:0c:0a:65:e9:ea:b4:c3:e8:87:62:27:e0:f0:
         8d:55:e5:6d:93:8f:1d:b3:85:fa:aa:da:62:dc:70:51:1d:d8:
         0e:13:2d:ae:eb:6e:97:72:62:44:c4:98:40:4f:d0:68:08:d8:
         48:60:37:3e:80:d3:a5:96:26:87:5a:3e:69:99:41:54:3d:a9:
         3f:68:d6:1a:73:82:36:49:60:40:2a:61:e0:5e:2f:ec:71:1c:
         0a:7d:47:da:7c:fd:39:38:5a:cf:89:bf:0b:cd:26:f4:3d:58:
         f4:5d:64:44:a1:c5:ee:b0:f4:ed:7a:ec:5a:31:3f:28:ea:9c:
         8a:1d:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:51:41 2025 by rpki-client