Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UP1cjqIL-vouFTjrDBu4bdz4EA.roa
File:                     9UP1cjqIL-vouFTjrDBu4bdz4EA.roa (raw, json)
Hash identifier:          bULnVxRPbUt4BNNwYIgMBUH4HCrqrZmTJC0pGNx27Wo=
Subject key identifier:   F5:43:F5:72:3A:88:2F:EB:E8:B8:54:E3:AC:30:6E:E1:B7:73:E0:40
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A06D91630A3EF9F32A9F491928B5D0B53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UP1cjqIL-vouFTjrDBu4bdz4EA.roa
Signing time:             Fri 18 Aug 2023 04:13:24 +0000
ROA not before:           Fri 18 Aug 2023 04:13:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:06:d9:16:30:a3:ef:9f:32:a9:f4:91:92:8b:5d:0b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 18 04:13:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f543f5723a882febe8b854e3ac306ee1b773e040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:65:e6:c7:7f:4a:f5:fd:f1:73:ec:8d:f9:
                    7c:f2:47:90:f7:0a:7b:83:89:1f:c3:07:64:ca:c5:
                    58:d4:c5:b0:d5:11:ef:3b:13:ce:9b:4b:e8:76:7f:
                    3e:fb:55:e5:36:fa:4a:48:4b:c9:15:6a:85:e8:c2:
                    fa:11:7e:28:63:fc:a0:87:0d:38:9e:ea:e3:04:9b:
                    a5:85:7b:3d:d8:7c:45:bc:21:7f:a6:7f:49:2b:19:
                    eb:dd:6d:19:ff:af:32:3a:83:29:29:ae:90:13:06:
                    24:3e:51:2f:7a:bb:3f:c6:13:0c:45:fe:01:9d:df:
                    4b:46:38:3c:aa:4b:2e:cb:95:27:3d:6c:35:86:e1:
                    f3:0a:56:44:93:83:48:4b:b2:b6:f4:f4:67:51:ca:
                    98:96:a1:93:af:2b:f0:82:f4:4d:ac:22:cb:d3:a8:
                    21:2c:cf:3e:e1:dd:2c:04:17:28:cd:4b:8d:98:7f:
                    f2:e7:3f:25:ab:ba:6d:9d:38:6d:4c:c5:99:47:a1:
                    10:cc:f1:1d:2b:01:34:8c:e2:c2:27:4c:5d:67:b9:
                    17:83:45:d0:d1:69:24:ab:db:7c:dc:cd:6f:9c:51:
                    72:b7:0f:60:4a:39:90:0c:36:2d:6a:a9:d6:ca:d1:
                    39:ba:f5:3f:1d:f6:a8:04:ef:71:76:83:f8:4a:ab:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:43:F5:72:3A:88:2F:EB:E8:B8:54:E3:AC:30:6E:E1:B7:73:E0:40
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9UP1cjqIL-vouFTjrDBu4bdz4EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:29:f6:d7:f2:ae:e1:cf:95:cb:b4:e7:33:cd:04:8f:88:
         81:b9:9a:e3:5c:b8:74:a1:e6:17:ad:db:aa:e7:c9:30:87:68:
         f6:c5:aa:91:29:6d:4b:c4:6b:6a:84:1c:97:9b:cf:f9:9f:e9:
         9e:23:a1:16:ff:ac:30:9f:82:73:25:6e:a8:61:81:8a:37:02:
         90:ab:a4:37:b7:1a:6d:71:9c:04:53:f8:a7:32:f4:62:62:29:
         df:8b:e4:96:5e:46:29:ec:76:0a:b9:ac:1c:81:e0:50:bf:ef:
         df:59:f1:7a:a2:d7:c0:25:cd:13:21:45:ec:86:2b:cb:29:30:
         a4:37:a1:81:c6:7f:48:05:ba:14:f9:b4:a1:ea:3f:57:5a:70:
         f8:76:9a:8b:17:36:a4:e0:60:36:54:06:fc:c1:85:6e:18:7b:
         ec:3a:84:30:50:d2:3f:76:15:a7:f8:51:b4:59:17:7f:85:75:
         4f:03:e4:90:6d:8c:57:8a:03:bd:a4:75:8f:6d:60:ad:2d:17:
         13:77:d5:f0:7b:3c:7b:6d:c6:78:c0:a7:93:08:cc:28:23:82:
         2e:f2:c7:cd:29:09:1a:95:91:92:69:ad:dd:7c:b8:e3:cd:77:
         e6:c1:26:d4:69:48:20:ee:e8:f1:ad:4c:ea:eb:13:89:a4:45:
         80:c2:55:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:38:57 2025 by rpki-client