Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8erj6KfGt00cEDnxHA6WFbzI5nk.roa
File:                     8erj6KfGt00cEDnxHA6WFbzI5nk.roa (raw, json)
Hash identifier:          PkC+GVB3fqjWmJkS/xIoP6Bllk8FGXrTbxs8BRJXDiM=
Subject key identifier:   F1:EA:E3:E8:A7:C6:B7:4D:1C:10:39:F1:1C:0E:96:15:BC:C8:E6:79
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018761D85E92BF477D4EBA887BCE5663E7FD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8erj6KfGt00cEDnxHA6WFbzI5nk.roa
Signing time:             Sat 08 Apr 2023 17:09:42 +0000
ROA not before:           Sat 08 Apr 2023 17:09:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:61:d8:5e:92:bf:47:7d:4e:ba:88:7b:ce:56:63:e7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  8 17:09:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1eae3e8a7c6b74d1c1039f11c0e9615bcc8e679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:3d:8e:ca:e2:75:1e:5b:ba:2b:cf:67:72:
                    de:ce:c9:3a:c2:85:4e:b3:77:3c:21:d6:12:0b:8b:
                    b0:40:cd:33:a0:0c:8d:6b:15:d7:0c:a0:b7:00:b5:
                    32:69:28:45:b8:60:05:96:d9:7a:1f:3a:8c:72:da:
                    27:fa:2b:e6:b3:e3:42:9a:d4:2c:38:2c:28:40:4f:
                    c3:af:35:30:bc:66:27:0a:c3:b1:f9:c7:c5:8a:ad:
                    eb:bc:9c:29:0b:23:95:43:a3:cb:33:6b:f1:9a:ad:
                    d9:a3:7b:59:d4:76:d9:40:49:51:78:de:5a:92:bc:
                    75:23:7e:a3:e4:e2:25:91:6a:04:1c:a7:6b:42:c1:
                    16:5c:da:a1:54:df:81:ff:16:39:78:af:2c:1e:56:
                    25:01:9d:90:60:62:7a:6c:9c:87:38:72:d1:72:1c:
                    59:33:17:30:e1:3e:5e:8b:42:11:01:85:82:7d:eb:
                    2b:a1:4c:d6:85:0f:cf:7e:d4:88:fd:65:bd:5f:85:
                    a8:32:b0:f0:e6:75:36:d6:57:68:77:a1:89:c1:e2:
                    2e:c6:d7:d4:98:6c:98:b5:48:ca:6d:9f:be:87:ce:
                    6e:91:24:a0:d3:03:e5:f9:a0:e5:f2:3f:98:ab:e9:
                    a0:46:ee:6e:02:56:71:b1:66:9d:68:a2:7b:80:04:
                    80:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EA:E3:E8:A7:C6:B7:4D:1C:10:39:F1:1C:0E:96:15:BC:C8:E6:79
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8erj6KfGt00cEDnxHA6WFbzI5nk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:c7:c7:9f:04:f9:e2:62:0f:c2:1d:4e:cd:c9:3a:3e:29:
         e2:f9:f5:0d:bb:cb:43:b1:f9:df:49:01:19:34:51:7d:1f:68:
         13:d6:c4:6f:ba:e7:57:45:14:aa:d3:a9:b8:70:3e:a1:41:08:
         86:f8:28:82:01:b2:33:92:00:94:06:4e:c8:4c:25:72:0f:ce:
         48:e0:5b:48:71:f5:3b:85:4f:a3:cc:0e:d9:54:32:aa:ee:67:
         45:be:72:45:33:2e:8b:1f:98:2b:4f:b6:01:34:75:77:23:c7:
         32:12:00:fc:ff:09:c8:eb:a0:17:8f:0f:bb:39:3c:d7:68:b1:
         ce:f7:82:c2:01:4c:2b:88:66:9d:de:5b:40:e9:66:4c:ae:a6:
         38:07:60:24:b8:f7:fc:b7:eb:b8:f6:3d:e4:e1:7a:9e:be:12:
         af:83:e7:f4:45:d1:de:5c:53:8b:98:14:ae:80:3a:57:9a:2c:
         9f:a7:59:11:30:6a:92:b2:60:24:c7:b1:04:ee:75:af:c9:e4:
         16:6c:41:8c:e6:f5:24:d4:f3:30:cf:05:23:e2:d8:cf:2f:8e:
         cf:60:38:99:1c:6e:83:51:d2:ad:49:f1:09:cb:93:d4:7e:4d:
         91:da:b4:72:67:45:b3:c4:ef:43:1c:ce:9d:87:fb:9a:f1:c9:
         88:4e:39:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:28:03 2025 by rpki-client