Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Hv9sI6VGfSDeXHLhlKHfX_qeN8.roa
File:                     5Hv9sI6VGfSDeXHLhlKHfX_qeN8.roa (raw, json)
Hash identifier:          dNWLyInxsQXg7G2MYCGMDkPj/P2m0yGuyrjDP4gILxM=
Subject key identifier:   E4:7B:FD:B0:8E:95:19:F4:83:79:71:CB:86:52:87:7D:7F:EA:78:DF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01846AE8F8E793D5CFC48DAC088F04537A1A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Hv9sI6VGfSDeXHLhlKHfX_qeN8.roa
Signing time:             Sat 12 Nov 2022 08:16:03 +0000
ROA not before:           Sat 12 Nov 2022 08:16:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
                          2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:6a:e8:f8:e7:93:d5:cf:c4:8d:ac:08:8f:04:53:7a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Nov 12 08:16:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e47bfdb08e9519f4837971cb8652877d7fea78df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:78:3d:96:d5:1b:76:4a:f1:11:55:79:06:
                    59:46:65:8d:02:8c:4d:47:57:23:c9:dc:28:7c:d9:
                    93:67:8e:17:e3:28:20:f6:b0:f1:13:a4:f7:8a:89:
                    f8:95:f6:12:47:63:4f:14:68:10:42:2c:88:04:19:
                    c6:61:73:d0:c6:0d:58:b9:4e:28:d4:82:10:3f:07:
                    14:09:82:06:94:dd:05:13:04:0a:1a:30:58:08:41:
                    66:d9:ec:a0:0e:1a:32:b6:02:04:b6:ad:3e:f3:79:
                    af:08:e7:e6:57:96:cc:66:6a:d3:67:67:46:57:a6:
                    b4:ab:cb:2d:8e:76:74:2c:42:3a:d4:cb:a6:be:82:
                    1c:34:9a:06:f5:a2:33:d0:3b:e7:4a:57:d2:b4:d8:
                    91:6d:f7:66:c6:00:cc:5c:6c:92:80:01:f9:f4:f9:
                    ee:a2:46:ef:6d:55:93:ef:93:08:5b:70:50:30:22:
                    27:4a:df:6d:31:2a:9e:d5:9a:0c:98:49:22:17:86:
                    8f:92:17:3f:b9:49:a9:e2:80:a0:de:73:a7:c0:5b:
                    96:b3:21:13:11:3e:e6:72:34:ea:80:58:e5:53:55:
                    4b:f1:7c:39:cd:08:0c:e5:41:29:61:da:8a:1f:b6:
                    ef:75:5b:8e:87:6f:2b:6a:3d:50:a0:52:b0:1a:00:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7B:FD:B0:8E:95:19:F4:83:79:71:CB:86:52:87:7D:7F:EA:78:DF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5Hv9sI6VGfSDeXHLhlKHfX_qeN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:f5:87:a3:ef:f6:49:f6:e3:4a:69:0e:ee:fc:ab:93:f3:6a:
         22:53:5d:22:43:63:93:2c:b3:85:dc:79:81:bb:b1:76:83:5b:
         87:dd:d9:61:84:08:45:56:fa:1a:e4:51:ee:9e:76:46:bd:b3:
         e7:22:7e:bd:02:ec:76:7e:4f:1e:15:53:d3:a8:33:e9:6f:c7:
         fd:20:2f:18:1f:fd:23:f1:2a:1a:51:5f:6a:95:3e:27:82:6b:
         b2:2b:50:1c:a6:b3:1e:20:f7:01:99:d2:0d:77:7b:3e:ad:b8:
         c5:33:9a:ee:ce:67:df:88:34:e4:36:66:27:46:73:10:d2:ad:
         aa:b8:14:42:3f:d8:ec:21:44:36:c6:fb:02:97:c2:0e:ed:3e:
         35:ca:6a:b2:7d:ba:13:e3:40:41:85:c8:b7:42:15:61:f7:23:
         9a:69:4d:e8:70:c6:0c:cf:55:eb:34:d2:6b:62:b3:92:8f:fe:
         c3:90:d9:1a:49:7a:63:0b:2d:30:0c:f0:6c:e7:a6:7d:21:40:
         ee:a2:77:fc:60:88:62:04:87:ac:55:57:21:6c:e1:e6:7a:c3:
         f7:15:39:5b:fb:c5:e1:60:54:e2:a5:96:c4:b6:6d:e0:6f:07:
         93:8c:94:15:61:20:bb:ab:a2:dd:87:f4:49:9f:b4:07:e6:2b:
         59:bb:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:32:23 2025 by rpki-client