Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3w_igASpOsCtIdbGWsaTIJlocoA.roa
File:                     3w_igASpOsCtIdbGWsaTIJlocoA.roa (raw, json)
Hash identifier:          NRRsx622dWd2fIJysL+fHT6PI5HH9Av0Jwz537ApSok=
Subject key identifier:   DF:0F:E2:80:04:A9:3A:C0:AD:21:D6:C6:5A:C6:93:20:99:68:72:80
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A3F1696FB60DEF8F72B88119BD73B012C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3w_igASpOsCtIdbGWsaTIJlocoA.roa
Signing time:             Tue 29 Aug 2023 02:19:19 +0000
ROA not before:           Tue 29 Aug 2023 02:19:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3f:16:96:fb:60:de:f8:f7:2b:88:11:9b:d7:3b:01:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 29 02:19:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df0fe28004a93ac0ad21d6c65ac6932099687280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ae:e8:45:67:13:fb:3b:6f:90:7a:e7:e9:46:
                    56:06:10:15:a4:1e:bc:e0:99:39:5b:2b:6f:29:f1:
                    5b:9c:eb:a6:fe:d8:b2:ce:6a:9c:54:ab:46:99:00:
                    cf:3e:bb:cb:4c:2a:f7:e6:b2:56:70:4d:6f:b7:16:
                    e1:4c:a7:c0:b8:ea:6e:79:4b:5d:aa:02:9a:f4:7e:
                    49:de:91:34:be:d4:39:9e:a3:93:fc:ef:35:0f:b4:
                    b1:f3:7d:6c:85:7a:b0:3a:b2:0f:e0:ab:cc:46:3d:
                    bd:08:ed:65:2f:5f:b3:08:97:bf:9a:66:ef:e0:51:
                    cd:05:64:65:6d:16:02:39:9b:53:bd:f6:a0:eb:61:
                    b5:a1:cd:5f:a7:ac:f0:a7:30:b2:5d:1f:4c:7d:91:
                    88:c7:f9:22:e5:19:1f:d8:d6:3a:41:34:49:1e:86:
                    e2:d4:b4:29:84:d7:c9:c1:55:62:1c:84:bf:48:9c:
                    f6:38:d2:b0:48:b2:22:12:84:de:23:1e:34:39:95:
                    57:27:60:e0:6d:e6:6a:11:29:55:d3:72:66:f8:b8:
                    15:b7:56:0f:fe:e0:2a:91:d9:a2:df:86:86:c7:7b:
                    f1:aa:d1:57:c6:0d:28:b3:15:a5:8c:2b:44:1d:95:
                    99:4e:31:a4:9b:0d:c0:b7:ec:a3:ff:f9:70:18:08:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0F:E2:80:04:A9:3A:C0:AD:21:D6:C6:5A:C6:93:20:99:68:72:80
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3w_igASpOsCtIdbGWsaTIJlocoA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:c3:64:48:04:9a:5d:04:26:3e:2f:66:b1:32:f7:a0:54:
         f3:28:ef:8c:ee:ea:cd:77:41:49:05:4f:b0:1f:8d:44:9f:3f:
         66:bb:d6:b2:28:39:d7:d5:b4:3a:8d:30:3f:28:a5:e7:3b:1c:
         3b:ba:74:d2:ab:fb:74:02:90:74:1e:43:b0:80:d7:31:bd:d4:
         5d:a4:a3:b8:2d:63:d0:a0:30:c4:73:21:06:11:5f:c6:81:5f:
         2a:a7:61:b7:1d:6d:86:19:d2:64:40:b2:5c:94:58:d5:59:30:
         72:67:62:90:92:5f:e8:2c:ac:22:00:34:2a:07:b2:a4:0a:39:
         7c:44:92:8a:19:53:b0:ea:d1:e5:79:d1:8f:ab:56:c3:bd:f7:
         92:1b:38:cb:d3:c6:e1:96:00:fc:c7:1d:61:2e:16:68:f8:24:
         b1:72:de:ec:6d:79:2f:9e:2c:c7:f0:8d:ad:e8:bb:a8:9d:98:
         a2:f9:24:01:c9:b4:fc:e4:5e:84:ad:ff:55:00:34:34:fc:8b:
         2b:4c:4e:82:25:93:d9:35:69:af:34:9f:a6:3e:45:59:fb:be:
         d2:d3:59:a1:25:09:d7:02:1b:f4:03:2d:aa:01:20:fb:b3:90:
         4a:2e:9f:2d:a3:69:db:78:76:9b:18:e6:2f:c7:b1:10:23:d3:
         ef:7a:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:50:42 2025 by rpki-client