Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX_sZew_JJnywsWoJroWr4lX--Y.roa
File:                     AX_sZew_JJnywsWoJroWr4lX--Y.roa (raw, json)
Hash identifier:          pSoRyCp2kGPleD3LYRMmpCkPU/JbMxxx+aoRpR+6fD8=
Subject key identifier:   01:7F:EC:65:EC:3F:24:99:F2:C2:C5:A8:26:BA:16:AF:89:57:FB:E6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       925A3D1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX_sZew_JJnywsWoJroWr4lX--Y.roa
Signing time:             Mon 04 Jul 2022 16:10:25 +0000
ROA not before:           Mon 04 Jul 2022 16:10:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2455387422 (0x925a3d1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul  4 16:10:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=017fec65ec3f2499f2c2c5a826ba16af8957fbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:04:50:5a:03:22:4b:c1:82:28:c0:db:54:
                    83:08:0c:24:60:c7:43:08:31:d8:db:3f:a4:88:9a:
                    00:41:d3:3a:10:2a:f6:82:2a:e0:e8:f4:c1:de:66:
                    03:24:ca:48:c4:fb:3e:45:72:e8:eb:53:e3:57:b7:
                    81:39:64:e9:bb:3c:67:83:6d:9c:04:14:34:89:34:
                    37:32:d0:59:26:67:57:0d:d5:1c:41:64:64:d4:1e:
                    ab:0b:36:3a:a2:95:5e:cb:0c:80:c3:58:a2:09:93:
                    73:4d:b8:7c:b9:9a:ed:f3:b9:34:ba:75:d4:c0:20:
                    49:61:cd:00:e0:66:ac:75:91:1e:d1:f9:b5:f4:b4:
                    d2:af:c0:90:08:af:a4:5e:64:8c:c5:66:82:d3:ac:
                    59:79:d5:8b:2a:87:02:3c:54:33:c5:ce:29:5f:53:
                    86:dd:ab:e5:cb:c7:fd:79:a1:97:da:1a:07:50:00:
                    99:47:b9:cb:07:2d:3a:e7:b0:c5:35:77:19:74:c4:
                    4a:3e:cb:45:ab:2d:9d:e8:18:74:13:58:0f:63:36:
                    ea:06:99:4a:f2:b6:9a:58:32:9c:48:92:61:97:8f:
                    8f:12:98:17:40:7b:54:8b:a9:11:40:a2:08:5e:72:
                    ae:b5:1b:ce:ee:54:9b:b6:52:31:cf:c9:4a:5e:89:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7F:EC:65:EC:3F:24:99:F2:C2:C5:A8:26:BA:16:AF:89:57:FB:E6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AX_sZew_JJnywsWoJroWr4lX--Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:b1:05:24:53:c4:41:33:e4:1f:21:9d:88:e3:3d:3c:74:e2:
         81:12:bf:b9:a9:3b:bd:07:e3:64:20:47:b9:fc:1a:0c:3f:13:
         b4:56:5a:57:fb:e3:8b:00:7a:5b:aa:04:a1:e2:e3:8f:f4:2c:
         6c:f8:85:04:0a:01:d5:43:75:74:88:5b:2a:ca:c0:6a:95:a2:
         44:3c:e7:66:e1:b0:a3:07:8d:61:2f:87:f2:37:e9:2b:03:05:
         a8:99:72:a1:08:a5:f9:5c:41:a7:02:5e:15:b9:ea:77:8e:de:
         67:8d:15:7f:58:d8:5e:35:80:24:2f:9c:bc:9f:ef:fa:97:e8:
         9f:70:fb:ff:7e:18:4a:a5:4a:34:d2:86:60:1e:11:c4:22:a6:
         02:c3:9d:c1:68:55:d7:19:35:be:10:2d:b3:47:25:d9:33:a7:
         24:47:d1:fc:24:6a:b4:da:ce:f1:8b:64:15:26:4b:f4:0b:21:
         41:83:1d:74:c3:cd:0c:d9:cf:a4:c1:db:92:8e:5d:d6:56:71:
         65:3c:a5:0f:6a:03:4f:e0:02:85:21:88:0e:88:19:8f:8a:3e:
         0a:9b:a7:45:7b:d7:c3:27:af:b6:d8:f6:64:5e:45:2d:3b:1d:
         50:47:24:95:fb:fd:35:af:ac:b1:12:93:07:92:93:a6:01:e3:
         33:aa:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:39:44 2025 by rpki-client