Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GTdkZc49AeiXwIfbv9IOc7AMxc.roa
File:                     9GTdkZc49AeiXwIfbv9IOc7AMxc.roa (raw, json)
Hash identifier:          ms3EAC4VaRZsNfn9ifLtSBElRafAy+R4WbE2eAHKNso=
Subject key identifier:   F4:64:DD:91:97:38:F4:07:A2:5F:02:1F:6E:FF:48:39:CE:C0:33:17
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0185522EDFB04771402CA48C51D018A90F20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GTdkZc49AeiXwIfbv9IOc7AMxc.roa
Signing time:             Tue 27 Dec 2022 06:04:41 +0000
ROA not before:           Tue 27 Dec 2022 06:04:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:185:522e:ac0c/128 maxlen: 128
                          2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:52:2e:df:b0:47:71:40:2c:a4:8c:51:d0:18:a9:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 27 06:04:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f464dd919738f407a25f021f6eff4839cec03317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:53:5c:75:a7:6c:ab:b2:74:75:fd:df:67:
                    55:3f:be:27:8d:0d:77:75:95:13:39:15:a9:7e:49:
                    03:cb:4b:87:ab:f7:25:99:5f:07:b5:29:e3:28:a2:
                    da:9b:c5:2a:05:84:d2:97:94:35:83:c6:5f:0d:9f:
                    54:3d:23:b8:55:8a:dd:13:ed:d7:87:01:c2:ab:7c:
                    10:58:b6:6f:87:da:4d:bb:74:b9:7f:7b:c4:84:8b:
                    ec:98:ff:4c:19:49:89:13:a0:16:e4:ee:3f:b1:f8:
                    f6:8e:72:7a:f3:bb:c0:87:d7:b0:c7:c3:91:ab:50:
                    18:95:f0:c4:94:92:eb:75:22:a1:fe:6b:80:aa:e6:
                    c3:12:e1:7d:e9:6e:d5:fd:16:a1:15:f5:de:10:d1:
                    56:df:35:f7:7e:a4:07:2e:f2:9a:f3:d2:75:fa:97:
                    15:5a:e8:e3:e7:49:bd:32:4b:8a:e4:fd:17:27:82:
                    ba:18:c2:0e:06:41:cb:86:a1:43:92:72:59:c4:6d:
                    a1:c9:ea:65:36:1b:4c:1d:a7:1b:1a:a4:e1:3f:43:
                    55:95:88:74:af:62:29:91:21:92:15:ee:6a:7d:67:
                    fc:4f:3c:9b:1c:ed:83:66:17:ac:46:81:7d:8d:3b:
                    c3:99:77:96:b7:9c:9d:dd:24:c8:ca:21:d7:85:97:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:64:DD:91:97:38:F4:07:A2:5F:02:1F:6E:FF:48:39:CE:C0:33:17
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9GTdkZc49AeiXwIfbv9IOc7AMxc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:0d:c7:00:0e:0d:88:fa:9c:bd:25:c8:d7:3f:e6:b4:d2:0b:
         a0:48:0e:ce:91:4f:34:e2:f8:25:ec:29:12:d6:0e:49:bb:5f:
         fc:66:9d:80:0e:d9:a0:10:1e:47:e5:47:a4:3a:a1:23:12:9c:
         c0:cf:66:a8:0c:d7:43:65:8a:26:35:a6:21:a4:96:3b:a6:31:
         23:bb:f6:13:71:db:a8:a4:1e:9d:c2:3a:f5:a6:6d:7c:38:93:
         17:d9:95:15:a3:a8:72:79:59:1d:b6:22:ac:ff:c8:4a:fe:99:
         4f:d9:ef:8d:b6:fb:12:5c:f6:e4:e3:ee:a9:50:16:33:5b:89:
         aa:15:fd:60:06:6f:49:38:1b:5a:8b:18:28:dd:68:a2:c6:2a:
         9b:42:bc:79:04:ef:ad:5c:eb:c1:c6:c8:94:c4:c0:d0:d9:31:
         2a:ca:45:a4:72:b8:d3:5a:02:ba:ee:78:24:ed:82:fd:bf:f2:
         2e:55:d1:be:42:cf:ef:87:a3:d8:8d:7d:c0:6c:97:70:be:0b:
         25:79:97:89:1a:14:6c:b6:21:2f:a5:5e:5f:08:8d:0a:07:d7:
         37:81:45:47:4e:79:be:63:de:b8:e8:57:45:60:38:7a:d5:61:
         b8:06:b7:fd:92:70:26:d2:31:63:54:65:5d:1f:63:c7:ec:5b:
         d7:1e:b9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:35:32 2025 by rpki-client