Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8TpOUyZ_omKp8vlEZ0lblaaHjMc.roa
File:                     8TpOUyZ_omKp8vlEZ0lblaaHjMc.roa (raw, json)
Hash identifier:          YD56tIwWtY4P7OHVp5gWY+lrHo0gsPX8uZ2bkDpQHFg=
Subject key identifier:   F1:3A:4E:53:26:7F:A2:62:A9:F2:F9:44:67:49:5B:95:A6:87:8C:C7
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189C2657E17C3200CA4ADA50A18C0E13A07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8TpOUyZ_omKp8vlEZ0lblaaHjMc.roa
Signing time:             Fri 04 Aug 2023 21:12:58 +0000
ROA not before:           Fri 04 Aug 2023 21:12:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c2:65:7e:17:c3:20:0c:a4:ad:a5:0a:18:c0:e1:3a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug  4 21:12:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f13a4e53267fa262a9f2f94467495b95a6878cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:c0:21:f8:24:3a:65:81:95:1f:eb:18:a8:
                    72:b6:f2:23:da:4a:ec:b8:d8:07:06:7b:3a:e2:31:
                    04:b9:cd:8d:27:ad:31:ba:25:e6:5c:88:04:50:0d:
                    9e:ea:05:72:6d:98:91:c9:72:c1:ff:a6:2d:c8:3e:
                    9b:59:c2:51:15:dc:e5:78:ce:5a:7d:e3:ba:93:f8:
                    e4:3f:02:85:6d:cb:34:51:d0:e1:e2:ac:62:bd:60:
                    eb:f1:bf:a4:d6:36:5d:91:46:8a:10:00:a5:b8:18:
                    8c:0e:a7:40:62:b0:1a:b2:50:74:e6:8e:4d:d8:78:
                    35:db:40:c1:93:27:54:0f:53:e4:90:65:46:c9:41:
                    4c:8b:78:8f:62:f9:76:56:7d:fc:6f:bb:5c:7e:a2:
                    da:2e:1b:08:ce:eb:6b:92:b1:3d:a5:82:2f:f9:cd:
                    30:63:05:fa:7d:ff:c2:a3:40:e8:bf:f3:26:1c:5e:
                    96:0c:6f:3e:df:6a:46:08:3f:c5:e8:f9:db:bb:3d:
                    a6:cd:d0:02:77:2f:ff:e6:71:86:46:1c:4e:08:8d:
                    69:ca:0d:5e:14:99:f8:ea:48:5c:7e:c7:36:e1:b5:
                    a3:52:e9:ec:0b:08:94:36:f6:0a:10:36:61:85:7a:
                    39:aa:87:58:2d:58:5f:8f:8f:50:04:c1:f5:b2:77:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3A:4E:53:26:7F:A2:62:A9:F2:F9:44:67:49:5B:95:A6:87:8C:C7
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8TpOUyZ_omKp8vlEZ0lblaaHjMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:58:04:61:d8:27:ce:83:8d:51:d8:29:c3:6b:74:c4:49:
         03:81:e2:d7:10:9b:a3:d2:66:57:45:3c:a4:db:19:38:9a:b3:
         c4:89:bd:2b:ea:88:a3:93:b0:0a:89:ad:5f:50:39:ef:9d:b1:
         3f:26:cd:69:fb:f8:07:25:7a:ea:65:cf:84:d6:5d:71:6e:85:
         ab:f9:a6:71:c0:39:65:ac:ff:76:83:e8:f7:a2:8a:72:93:e7:
         0e:67:6c:8b:6a:fd:42:da:ab:9c:3a:4b:80:40:75:fb:a7:42:
         5f:4d:cc:29:94:62:55:8e:ca:60:ef:db:1f:6c:f5:43:3f:e9:
         4b:e1:1e:c8:43:e3:1a:98:b4:f6:c5:b1:fd:7a:b0:dd:f8:02:
         93:af:32:33:ca:74:89:73:7c:44:99:85:37:9c:fc:e5:0a:f0:
         4f:1c:4b:df:b7:23:c6:13:f8:78:88:15:fb:31:78:66:1a:87:
         67:eb:05:29:97:77:87:81:3f:89:08:b4:a2:6a:5d:b2:ac:5e:
         14:39:32:bc:00:f8:dc:9e:ef:04:cd:b7:b1:55:b1:ec:8a:bd:
         f0:2f:aa:83:a0:d5:a7:82:9f:8a:60:65:48:2f:bf:b9:57:22:
         3f:08:e6:b4:c6:e1:14:69:a9:34:1e:0f:ab:20:09:ac:d7:a3:
         58:0a:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:35:55 2025 by rpki-client