Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v14JD5NGbU23wwK9RtkhTSTyg0.roa
File:                     7v14JD5NGbU23wwK9RtkhTSTyg0.roa (raw, json)
Hash identifier:          5VFpOiImFuSjneLHTpG7xYZaV85AZbo95bwVrtLXa50=
Subject key identifier:   EE:FD:78:24:3E:4D:19:B5:36:DF:0C:0A:F5:1B:64:85:34:93:CA:0D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018996988DDD548C50C2F565D15ED326B456
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v14JD5NGbU23wwK9RtkhTSTyg0.roa
Signing time:             Thu 27 Jul 2023 09:05:27 +0000
ROA not before:           Thu 27 Jul 2023 09:05:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:189:9697:a354/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:96:98:8d:dd:54:8c:50:c2:f5:65:d1:5e:d3:26:b4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 27 09:05:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eefd78243e4d19b536df0c0af51b64853493ca0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:1a:e0:a4:29:6b:8f:21:44:1a:5c:d1:e5:
                    20:4f:ac:66:ca:7c:a9:92:5d:16:08:63:46:84:b2:
                    5d:c1:d8:5d:e6:95:17:91:35:5b:7d:a9:47:94:43:
                    0c:b4:29:dc:08:97:a7:d7:64:42:35:ad:ef:6e:76:
                    6f:b2:77:1c:a4:a2:90:6e:27:6e:4b:b9:a1:2f:d4:
                    20:97:eb:5a:0a:2a:81:73:ab:18:51:6a:34:61:68:
                    45:1a:67:54:e7:85:af:0a:3b:53:31:1e:4f:f2:b2:
                    55:01:04:18:8d:ac:a1:80:12:e9:1f:f7:f7:90:63:
                    d2:79:02:00:ce:c6:cd:5d:eb:ce:f1:69:48:20:10:
                    ea:43:1d:38:89:d2:9c:02:d4:bc:90:61:0c:40:fd:
                    53:a4:d9:cf:cc:80:7a:2b:42:2e:ed:e1:85:d7:39:
                    af:cd:66:84:77:9b:23:63:65:68:82:3b:7a:a3:01:
                    b8:06:57:60:d2:f0:1a:62:95:98:03:af:aa:5d:56:
                    2c:47:9e:cd:41:0e:20:7c:d8:7e:6d:c2:52:f8:8f:
                    93:f5:c6:70:d2:5f:c0:54:42:3f:a3:d3:04:6c:08:
                    64:f5:2a:db:ab:bf:d1:71:ab:bc:64:7e:71:04:96:
                    d2:09:b8:e1:83:10:ea:c1:d1:25:61:81:4a:4c:b5:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FD:78:24:3E:4D:19:B5:36:DF:0C:0A:F5:1B:64:85:34:93:CA:0D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7v14JD5NGbU23wwK9RtkhTSTyg0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:e3:56:9f:15:11:7f:b9:5f:59:8b:3f:39:5a:65:71:6d:bd:
         95:9e:dd:5b:2a:dd:53:f5:bf:c8:c9:e9:47:b6:2c:d2:74:59:
         a6:f9:f9:3f:b1:c8:ff:5a:c9:3b:c5:b2:f6:ff:88:ca:cd:e6:
         85:c6:d7:af:98:61:2f:8d:dd:0c:3a:ec:06:4c:f8:44:5e:73:
         75:10:ef:dc:88:c5:a0:2b:4b:8d:c4:1d:45:c2:3f:c2:ae:9f:
         4b:0d:ef:41:84:5e:59:a5:cb:3f:b2:d3:2b:12:d2:4a:55:80:
         c4:b2:ff:81:c3:17:3f:7a:81:cb:87:5d:f7:58:71:69:2e:57:
         d4:f5:e5:81:33:a4:07:44:b0:26:59:81:f2:d4:45:1b:87:00:
         ba:13:52:31:14:c2:5e:18:bb:c2:55:fd:3e:91:f6:ec:b1:21:
         8e:16:74:11:e3:55:9c:d0:f5:ca:2f:57:0c:f3:1a:b3:b4:89:
         59:4b:30:58:0b:21:95:92:7b:a3:3d:5d:12:1e:c5:da:2a:69:
         11:6a:3e:b8:38:f8:84:f7:08:d1:46:92:c7:d3:fc:72:57:6c:
         06:4e:7f:cd:8d:81:98:71:1a:cc:27:ab:8a:27:03:e5:a1:74:
         d6:8a:c4:e0:39:70:21:fb:8b:d2:63:03:0e:b5:ed:99:18:e2:
         0c:98:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:47:22 2025 by rpki-client