Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6p36if8S_poDbmRcNWB1dw1KomA.roa
File:                     6p36if8S_poDbmRcNWB1dw1KomA.roa (raw, json)
Hash identifier:          ERePJfMJO9evq+Pqj/86SdfiBJfOZKPFm5PjOoERJ40=
Subject key identifier:   EA:9D:FA:89:FF:12:FE:9A:03:6E:64:5C:35:60:75:77:0D:4A:A2:60
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188951FD9689925E61AB24C1A667142518B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6p36if8S_poDbmRcNWB1dw1KomA.roa
Signing time:             Wed 07 Jun 2023 09:11:12 +0000
ROA not before:           Wed 07 Jun 2023 09:11:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:95:1f:d9:68:99:25:e6:1a:b2:4c:1a:66:71:42:51:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  7 09:11:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea9dfa89ff12fe9a036e645c356075770d4aa260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:19:db:52:75:99:ef:85:bd:96:e0:7e:26:
                    9a:19:fe:bf:d2:74:e5:1c:32:a6:48:8c:ce:d8:41:
                    2b:32:34:0b:cb:e6:2f:e4:51:07:8d:c7:de:0a:f6:
                    28:59:37:9e:75:18:0c:48:b2:f3:aa:72:54:b5:69:
                    66:8d:4f:10:54:86:73:c6:3b:25:1e:59:dd:0b:af:
                    83:54:0b:33:77:e2:a1:6c:67:f2:95:25:31:54:23:
                    89:1b:a9:25:72:5f:8f:6d:da:7e:f6:eb:28:f9:a5:
                    64:5f:b5:55:17:cc:04:d0:d2:98:a7:4c:b8:fb:79:
                    75:8b:20:7f:22:98:21:e4:e8:36:8c:45:ef:b8:c6:
                    c1:2e:61:24:4b:e5:82:88:ed:07:eb:16:4b:8a:67:
                    b3:16:31:2b:52:76:0e:ef:35:98:15:c2:4e:c5:d6:
                    2a:40:d2:36:f9:98:3e:14:47:86:63:54:93:42:e3:
                    5b:a0:36:a4:ff:b2:db:d3:26:78:eb:05:df:fc:3d:
                    53:84:bf:46:af:e0:1b:cd:c9:18:92:f7:e5:69:03:
                    50:ec:d8:52:b8:3d:bd:ea:ad:ef:b6:8c:0e:0b:8b:
                    bd:9d:49:63:26:9d:63:27:51:fb:6f:19:ac:22:86:
                    b3:1e:55:dc:ea:21:36:b0:e8:99:b9:a8:79:00:ce:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9D:FA:89:FF:12:FE:9A:03:6E:64:5C:35:60:75:77:0D:4A:A2:60
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6p36if8S_poDbmRcNWB1dw1KomA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:fb:cb:18:ad:c3:0e:e5:32:95:d0:dd:ad:a7:0a:81:75:
         b5:54:9c:f3:6f:2c:7e:a2:5f:80:02:21:cd:da:4a:86:e5:14:
         94:f0:c2:50:86:4f:46:65:b1:4d:9c:5b:f7:22:7c:75:87:f1:
         60:af:d9:c8:50:44:b5:7d:18:41:64:85:7e:1d:16:4b:03:fe:
         0d:3b:66:d7:26:2c:95:0f:b2:18:b3:57:16:0a:45:b7:b7:b1:
         11:64:66:0c:71:9e:50:8d:2f:75:63:79:6b:79:89:68:9f:4f:
         e7:ed:3d:64:9e:14:2c:78:90:df:b0:cb:af:21:bc:99:f2:33:
         ba:95:22:f4:fb:6a:2a:d4:13:fd:e1:73:1e:c4:f5:11:04:5b:
         f8:bc:5d:43:73:1a:33:56:9b:ca:78:c8:40:96:ec:bf:1d:f6:
         52:85:2a:bd:bd:9e:6b:a4:09:2b:94:48:94:4b:e3:c8:64:19:
         30:03:ac:dc:99:41:16:f8:63:c2:87:d6:8e:34:db:22:4e:03:
         28:d9:6d:49:b3:bc:4d:15:74:bc:42:46:fc:59:f5:49:8b:34:
         bb:c9:43:71:f3:93:dc:5a:4e:2e:97:32:0d:c6:30:e1:ec:18:
         13:f5:52:e3:f4:2e:a6:42:05:aa:0c:ec:37:0a:99:35:cd:31:
         50:13:40:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:15:22 2025 by rpki-client