Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dA2gpkyJwFQcBUA4LEy_1NFqh8.roa
File:                     8dA2gpkyJwFQcBUA4LEy_1NFqh8.roa (raw, json)
Hash identifier:          JCF9b2/LFY4UcBVpR+nR1Fia1S+BWZuKWkz8aVAbrY8=
Subject key identifier:   F1:D0:36:82:99:32:27:01:50:70:15:00:E0:B1:32:FF:53:45:AA:1F
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01867D539F4962EF320957AEE8A40823F068
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dA2gpkyJwFQcBUA4LEy_1NFqh8.roa
Signing time:             Thu 23 Feb 2023 08:11:17 +0000
ROA not before:           Thu 23 Feb 2023 08:11:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7d:53:9f:49:62:ef:32:09:57:ae:e8:a4:08:23:f0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 23 08:11:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1d036829932270150701500e0b132ff5345aa1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:e9:e7:c6:00:a8:4e:d1:cf:45:5b:27:be:
                    1e:5a:35:d1:a7:eb:90:5e:78:83:73:93:a8:5a:e3:
                    d5:53:90:a9:08:ce:1c:ee:f4:aa:33:3f:1e:2b:0f:
                    b2:0a:13:c8:e0:31:46:a1:70:52:2b:b4:c9:85:47:
                    e0:26:bd:ac:5b:77:bf:a4:dd:5a:5b:54:84:93:e1:
                    ff:28:74:7c:9a:53:9c:18:ba:4f:29:dc:f3:f9:88:
                    c1:9c:86:4a:c8:c5:df:4a:d2:25:ca:67:b1:22:99:
                    1e:55:73:de:df:7e:09:8c:f8:7d:2d:d6:aa:cb:c2:
                    95:ff:8a:4e:14:b4:7e:39:c1:c7:f0:bc:85:66:91:
                    66:f8:18:02:86:a5:16:11:cf:4c:31:06:38:03:6c:
                    87:3a:c9:1a:09:a0:fb:c9:c5:a6:af:a8:0b:c4:a1:
                    85:83:10:de:88:61:5b:13:90:f5:e9:72:39:79:82:
                    47:a7:fc:3c:01:8e:d8:61:f4:e1:e2:64:b3:e9:bb:
                    95:11:88:a2:7a:c8:99:1d:da:07:16:23:4b:0d:89:
                    1b:ac:79:3d:3a:66:60:75:d6:da:4f:4e:18:0d:fc:
                    8f:65:d4:ab:d2:eb:9a:93:f6:0c:3b:5b:17:1c:25:
                    ed:cd:db:8d:90:79:16:6b:da:67:3d:ec:da:01:bd:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:36:82:99:32:27:01:50:70:15:00:E0:B1:32:FF:53:45:AA:1F
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8dA2gpkyJwFQcBUA4LEy_1NFqh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:b2:01:32:5e:ce:f9:40:d5:d8:8a:90:f7:d2:e2:2f:f8:
         44:79:06:6c:94:18:0f:2e:57:64:9c:b3:bd:69:dc:9b:c2:0f:
         b7:1a:61:2d:cc:2b:b3:94:0e:63:22:f1:98:0b:d4:0d:90:2f:
         54:6a:8d:28:6e:ee:da:f7:27:33:f6:fe:ce:60:1d:9a:95:0f:
         8f:5f:43:a5:8a:bd:23:dc:4b:6b:3c:a8:3a:d5:12:0e:de:93:
         ec:0c:86:8e:8f:75:0e:f1:9f:68:27:cc:ad:56:2c:bc:3a:b9:
         95:f0:9f:03:2c:af:c3:49:79:e4:58:65:14:77:14:40:8d:cd:
         8f:b3:5b:d4:ed:38:26:80:a6:61:68:d7:de:5d:2d:42:f0:dc:
         00:7d:06:b4:a2:0f:6a:8d:24:52:c9:f1:46:45:dd:7f:1b:32:
         83:9d:cb:31:d0:92:a0:28:79:15:96:7a:7d:74:91:7d:f8:eb:
         9f:cf:9e:0f:0f:b4:49:84:ed:b8:d0:ea:01:84:3a:12:a4:32:
         8a:01:86:2b:5d:f6:d5:f8:48:18:89:cf:e7:11:e1:bc:43:e1:
         37:81:a5:20:91:64:56:a7:50:2b:d1:46:00:cf:60:e6:77:ec:
         24:6a:48:ae:73:9a:9e:0a:8b:63:87:f6:46:28:82:a3:8f:f0:
         7a:3d:a6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:43:45 2025 by rpki-client