Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/86QOIGeMM0FH53BQJAH1oN1qmDg.roa
File:                     86QOIGeMM0FH53BQJAH1oN1qmDg.roa (raw, json)
Hash identifier:          Jsj7N/zTNhs6zNIVE+xYyWPspmJMDMSSvX7cctBiQUE=
Subject key identifier:   F3:A4:0E:20:67:8C:33:41:47:E7:70:50:24:01:F5:A0:DD:6A:98:38
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01854E1B2CA85D6DE8415F20B96918CD195E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/86QOIGeMM0FH53BQJAH1oN1qmDg.roa
Signing time:             Mon 26 Dec 2022 11:04:41 +0000
ROA not before:           Mon 26 Dec 2022 11:04:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:185:4e1a:d2e5/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:4e:1b:2c:a8:5d:6d:e8:41:5f:20:b9:69:18:cd:19:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 26 11:04:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f3a40e20678c334147e770502401f5a0dd6a9838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b8:26:8d:7c:9a:66:52:af:af:a8:37:91:f8:
                    49:9c:f2:4e:cd:14:7e:5a:36:4a:8b:2f:49:ee:4b:
                    10:41:85:d5:ab:ba:e2:63:64:c9:e2:c1:cb:dd:19:
                    01:46:65:6a:ba:13:6f:45:26:bf:06:81:d0:e9:bf:
                    1c:58:04:8a:93:a1:f5:5d:6a:57:70:c0:95:d8:b0:
                    f5:7a:2b:25:39:9f:58:8e:52:eb:b1:55:42:0b:5e:
                    e2:98:0d:5b:9b:71:70:79:e9:8e:30:f7:60:94:82:
                    e6:25:b0:63:9b:fe:57:c9:7d:cd:f5:d0:37:2e:69:
                    24:57:80:5a:2e:e8:3a:f6:41:d9:e4:10:17:a0:09:
                    63:05:2e:1e:38:ee:50:23:f0:db:8f:70:e4:3e:04:
                    6a:35:09:be:f6:59:f7:e2:70:f7:38:3f:be:c4:72:
                    d0:1f:30:08:41:47:02:fc:db:ea:76:e5:7d:24:98:
                    7f:53:e9:7a:9c:e2:4f:a6:14:0c:50:a7:47:f2:17:
                    60:11:e9:35:da:06:9b:bf:e6:d5:1b:f5:ce:93:01:
                    1c:8c:39:eb:e7:cd:c4:bb:4c:0f:a7:bb:44:ee:40:
                    29:1a:8d:7f:55:4f:87:67:b9:5d:60:df:31:2f:79:
                    5b:a0:2a:e3:2a:3b:32:38:a1:c3:44:cf:0b:f2:d9:
                    00:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:0E:20:67:8C:33:41:47:E7:70:50:24:01:F5:A0:DD:6A:98:38
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/86QOIGeMM0FH53BQJAH1oN1qmDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:0a:df:a7:82:6e:10:90:65:dd:2f:59:f1:ce:d0:28:38:84:
         ac:ad:97:03:8e:d1:67:22:ff:e5:a1:fb:b8:92:d9:2a:7c:46:
         de:e9:32:02:cb:f6:b3:78:2f:4b:d5:a8:5a:28:d6:60:57:63:
         8a:e9:8c:1c:5e:e3:bb:57:04:ba:8a:ec:da:5a:3e:61:05:28:
         73:54:0f:7d:b4:55:21:d2:eb:8a:a5:44:30:43:71:4e:c2:2b:
         00:ee:50:06:a1:c7:ae:3f:fd:73:82:ba:ef:8f:b0:7d:93:bf:
         78:3c:51:23:58:72:c0:0d:8b:1d:72:8b:9b:b1:9b:2d:4d:5d:
         a6:c6:ca:29:d0:81:e4:e5:64:83:a9:11:da:48:bf:f7:45:68:
         8d:66:87:df:8b:9f:73:46:06:a0:98:26:0b:df:dd:ce:27:a6:
         81:cb:80:b8:81:c6:56:89:5c:2b:06:99:17:fb:98:7d:e5:37:
         fe:6d:62:f8:90:0a:07:c4:0f:94:de:6f:fe:9f:7e:e5:2e:a2:
         56:1a:06:8e:96:a5:eb:38:c6:61:69:f3:86:41:ee:9a:14:6d:
         e0:c8:a2:0c:b8:ad:b4:43:b9:ca:68:1a:2a:1e:1a:0a:3c:f2:
         da:7b:52:ec:75:cd:b5:a5:98:66:76:9a:b7:59:0e:46:86:25:
         a5:dd:18:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:37:47 2025 by rpki-client