Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgoJBm1piwSEfQvkiux5cWbT654.roa
File:                     AgoJBm1piwSEfQvkiux5cWbT654.roa (raw, json)
Hash identifier:          uiHC5KCJbkRHd8iMTHZF3nNrslpZt4EyLqVKTPv/1Cc=
Subject key identifier:   02:0A:09:06:6D:69:8B:04:84:7D:0B:E4:8A:EC:79:71:66:D3:EB:9E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01874364D5A185E9792D1F84B2711593ACD2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgoJBm1piwSEfQvkiux5cWbT654.roa
Signing time:             Sun 02 Apr 2023 19:14:54 +0000
ROA not before:           Sun 02 Apr 2023 19:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:43:64:d5:a1:85:e9:79:2d:1f:84:b2:71:15:93:ac:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  2 19:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=020a09066d698b04847d0be48aec797166d3eb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:62:0e:83:66:47:a3:49:71:00:30:07:ca:21:
                    d7:0d:8c:c2:ff:7b:b8:7b:94:c8:87:d9:0b:a4:58:
                    6c:8c:35:2d:66:4d:ed:71:ec:40:19:cd:52:19:87:
                    8c:bf:cf:2c:b7:40:39:fb:b4:7f:e8:9c:b2:27:57:
                    1b:51:30:cd:ef:ef:c6:af:78:59:d9:00:d6:86:51:
                    3f:35:4c:cc:89:5c:49:83:09:2a:ce:21:17:80:dc:
                    cc:96:39:af:62:fb:8c:1f:5a:67:d8:42:0b:94:7b:
                    2c:de:0e:9e:03:bd:43:28:ec:f1:51:1b:54:ed:cb:
                    c3:c1:10:19:fa:af:e6:bf:ac:06:81:d7:e6:57:04:
                    42:e8:c4:e6:18:09:72:ec:99:67:3b:83:ea:cd:39:
                    29:de:96:70:1c:b5:d3:a2:46:54:c0:f5:7e:b1:d4:
                    59:4d:5c:17:48:40:72:1a:00:95:f8:1f:2c:34:5f:
                    44:27:fa:17:93:9a:93:e8:36:cc:4d:39:39:d2:35:
                    27:44:46:8e:7b:4e:2e:fa:6b:db:8e:65:1c:a6:06:
                    91:48:d8:be:8f:c0:c2:3c:a3:33:84:77:a1:e2:39:
                    30:7f:88:89:aa:07:16:b7:96:43:27:c4:d4:09:73:
                    d9:07:c9:2d:82:4b:f4:f4:f2:59:7a:0e:cd:b5:b4:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0A:09:06:6D:69:8B:04:84:7D:0B:E4:8A:EC:79:71:66:D3:EB:9E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AgoJBm1piwSEfQvkiux5cWbT654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:23:20:9a:81:bf:a5:14:53:4e:2f:7f:a1:cc:40:95:3c:d7:
         f2:70:84:d4:48:ea:a2:c9:b1:ae:ba:5b:5f:82:57:45:ab:71:
         99:e1:03:27:df:3a:e2:4f:fe:1c:ef:88:91:07:63:f0:ba:46:
         52:05:b3:ec:4d:83:12:85:29:50:e2:d5:60:ee:49:f9:a2:5b:
         37:c3:60:b8:dd:20:42:d7:14:1d:7f:ca:c2:1f:4e:14:ee:26:
         ce:99:d3:dc:01:57:56:a4:88:b1:19:cb:7a:d6:d3:bf:aa:cd:
         5f:ca:69:d7:c0:1d:2c:18:11:01:fb:8a:e9:40:b6:ad:90:40:
         dc:63:f5:42:95:85:1b:42:0b:95:d1:66:d4:89:24:0b:63:01:
         41:e5:23:f5:4c:43:08:de:a6:a8:3d:27:53:7b:d7:35:8c:e2:
         d4:b3:90:50:c6:12:69:6c:7c:e1:71:42:f5:13:09:af:2e:a5:
         41:58:3e:4b:e9:07:9c:20:34:f3:06:d9:96:fb:cb:3a:15:b9:
         5a:d4:94:17:95:48:8c:f0:d9:16:97:6e:6b:aa:d8:04:62:bc:
         d1:e8:ce:db:2a:c2:e9:e7:47:21:45:fe:17:5d:a8:76:23:d3:
         fa:75:a8:8d:b4:c4:2c:e2:2d:ea:98:af:74:e1:b5:17:9a:50:
         d2:23:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:18:19 2025 by rpki-client