Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qUVGVgtVM1vz9JCebcYKwFtyOE.roa
File:                     5qUVGVgtVM1vz9JCebcYKwFtyOE.roa (raw, json)
Hash identifier:          KpK+Pcya9Rp99H05Gdu+hoHKKRAmkow7hvSbCPNLRno=
Subject key identifier:   E6:A5:15:19:58:2D:54:CD:6F:CF:D2:42:79:B7:18:2B:01:6D:C8:E1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A15A75EC7F2145DA4C2E1AB4F9FB1E968
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qUVGVgtVM1vz9JCebcYKwFtyOE.roa
Signing time:             Mon 21 Aug 2023 01:13:24 +0000
ROA not before:           Mon 21 Aug 2023 01:13:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:15:a7:5e:c7:f2:14:5d:a4:c2:e1:ab:4f:9f:b1:e9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 21 01:13:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6a51519582d54cd6fcfd24279b7182b016dc8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:d4:91:63:c6:1e:55:e6:0e:cc:20:3c:0f:
                    22:4f:38:ef:12:22:5c:2c:80:17:77:87:02:89:01:
                    a6:d9:ef:88:6a:3c:1e:b9:89:9f:17:01:e7:e8:3e:
                    f9:85:99:82:f4:9e:2a:1c:24:4f:fd:33:38:70:c2:
                    b8:b3:5c:22:22:f3:27:a6:59:e0:e7:20:fc:55:f8:
                    91:14:c1:b4:c0:57:97:bd:78:56:8a:fc:72:ae:ac:
                    72:55:61:55:4c:54:43:85:3e:b2:49:29:35:52:aa:
                    e2:df:43:9a:ed:8b:7b:66:f9:61:94:7d:09:ba:a1:
                    e8:7c:51:2a:d9:a3:b4:7b:f5:7e:07:cf:41:08:30:
                    06:49:3f:24:18:9a:c2:87:41:9c:19:7a:fc:23:cd:
                    54:bc:72:7a:16:a5:b0:48:04:a4:64:07:a6:81:a6:
                    e7:0a:98:c9:e3:f2:82:aa:cf:1e:65:56:58:9b:45:
                    fc:bd:d9:35:d6:2f:d5:d9:fb:5d:a8:1b:b1:b2:3c:
                    4e:22:79:4a:aa:73:8f:90:9a:3d:4f:e5:0f:23:b6:
                    3d:44:47:ec:23:b6:1a:69:a3:59:25:ba:d3:04:65:
                    c0:85:6f:2e:d8:7d:4f:af:dc:fc:07:36:88:06:9f:
                    9f:c5:b7:75:b1:44:40:06:7c:80:b1:e5:e4:ea:48:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:15:19:58:2D:54:CD:6F:CF:D2:42:79:B7:18:2B:01:6D:C8:E1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5qUVGVgtVM1vz9JCebcYKwFtyOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:6e:a4:e1:92:fa:c7:c4:dd:02:e6:ab:28:8e:8b:b2:1b:47:
         ce:c8:d0:e2:45:a4:ae:7d:3d:5a:2e:d7:b2:4a:23:15:b7:8a:
         51:07:a4:00:45:38:94:7e:15:16:d5:30:0a:2d:d5:72:88:96:
         60:0f:2a:cf:f4:e1:4c:59:35:aa:39:bd:d3:f9:5f:e3:ca:e7:
         fa:d3:34:cc:8d:da:0c:5b:16:bd:f1:da:84:f1:48:b3:84:a6:
         69:ac:4d:d1:6b:dd:4c:58:b7:d7:06:5e:fe:aa:7d:17:0a:5e:
         84:75:58:ed:c7:7c:f1:6a:bb:68:91:2b:8d:80:f2:49:30:e5:
         52:fd:a6:40:4e:79:7b:ac:45:13:c4:e1:38:60:fd:21:1a:fb:
         d1:07:55:54:e6:1c:e6:d4:79:16:aa:d6:6c:04:46:94:b3:05:
         9d:b4:35:73:3b:70:4a:9e:a1:1e:9a:e9:59:ec:11:11:80:21:
         45:2b:9f:52:fa:06:fc:64:34:4a:c9:92:45:31:0e:b7:a3:ae:
         e6:51:9e:63:01:83:ff:96:f0:5b:c8:6f:5e:5b:c0:70:4a:c2:
         45:9e:82:0c:f9:37:9c:9c:b5:83:ea:0d:eb:80:e0:c8:be:f8:
         e3:3e:83:46:d3:fe:b7:55:52:26:34:fc:7f:e9:7a:a9:70:ca:
         c5:df:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:37:06 2025 by rpki-client