Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dat6JLJG6MzLarMFSJlyg7RrBtI.roa
File:                     Dat6JLJG6MzLarMFSJlyg7RrBtI.roa (raw, json)
Hash identifier:          zVgFUsmb2X3upPcdndD7wZH0441C2ja/GRqwplOV9ps=
Subject key identifier:   0D:AB:7A:24:B2:46:E8:CC:CB:6A:B3:05:48:99:72:83:B4:6B:06:D2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018962B3E2F5E50A33E09252655D128F9453
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dat6JLJG6MzLarMFSJlyg7RrBtI.roa
Signing time:             Mon 17 Jul 2023 07:15:03 +0000
ROA not before:           Mon 17 Jul 2023 07:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:b3:e2:f5:e5:0a:33:e0:92:52:65:5d:12:8f:94:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 17 07:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0dab7a24b246e8cccb6ab30548997283b46b06d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6b:d4:8c:9d:95:8d:91:97:0f:86:d4:e7:41:
                    e3:d1:cc:c5:a0:3d:25:87:06:5f:f2:77:df:50:7b:
                    29:c7:b4:55:35:96:2f:f0:65:d4:18:98:90:59:65:
                    21:93:bc:10:18:6f:7c:2d:5a:8e:59:65:a6:d1:57:
                    b9:7a:6e:b2:ec:28:99:87:d6:55:af:d3:6d:58:c2:
                    a2:3a:c0:69:9c:fa:69:d4:81:2c:e4:3e:9d:6e:77:
                    4e:d8:dd:ff:4d:8a:9f:2d:31:ae:3b:8c:25:79:5d:
                    78:42:95:e6:e7:df:6a:3d:8c:94:6f:e1:60:75:6f:
                    c3:5a:a7:08:86:46:58:f4:7a:84:27:c0:7f:5b:a4:
                    89:ad:16:e7:2e:e4:d4:19:dd:fd:67:9a:e8:fb:74:
                    8b:5a:7e:2f:d7:67:64:3a:a5:60:9d:0c:2c:16:52:
                    bb:da:12:82:16:eb:7c:dc:6b:c1:0e:88:91:19:37:
                    97:9c:d4:e9:31:46:00:77:73:63:fe:61:d9:4f:09:
                    58:e1:c1:c4:a5:b3:e7:74:62:9b:f0:82:2c:45:6a:
                    05:3c:ae:ff:57:12:af:aa:d7:91:2d:0a:73:d6:0f:
                    4f:f3:07:00:05:6e:18:b1:8f:a0:a6:a5:de:3f:de:
                    03:d7:4b:43:5c:16:61:27:ff:8f:dd:db:1d:44:1d:
                    f8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AB:7A:24:B2:46:E8:CC:CB:6A:B3:05:48:99:72:83:B4:6B:06:D2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Dat6JLJG6MzLarMFSJlyg7RrBtI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:3f:c7:d5:96:51:a1:bb:2a:4c:50:b7:be:b6:ae:20:f8:aa:
         b1:19:ac:77:2d:f9:9e:90:6d:4a:ce:b0:1c:5a:ef:2d:73:37:
         56:18:85:45:70:34:da:a0:ab:c9:e8:4e:61:09:e0:11:47:b1:
         3e:ed:d4:08:c1:7b:14:ed:b0:a5:e2:07:cf:3b:c1:35:5e:65:
         35:e8:c7:65:3b:9f:5a:1e:fd:8f:e4:e8:15:a0:a0:4c:4c:84:
         0d:e0:8a:aa:26:fd:b6:9e:1c:f6:68:69:a6:02:ef:2b:1a:de:
         cb:8c:62:e1:10:c3:bf:56:91:8a:d5:41:6c:62:86:3d:24:4a:
         64:c0:ef:3b:d3:c4:08:15:c3:ae:c8:3e:6d:d8:2e:4f:86:d1:
         49:95:36:69:77:83:4f:06:62:09:90:cc:e9:87:0c:02:2c:f8:
         bf:83:1e:4e:1a:97:bc:d8:63:cc:8c:5b:45:6d:e7:df:2c:08:
         b3:34:08:dc:17:00:59:c5:36:68:f4:37:bf:ed:81:14:b4:bf:
         e3:89:08:be:12:aa:ce:9c:e9:09:d9:65:30:a9:5d:87:31:db:
         59:8b:19:e0:14:fe:57:08:7d:6a:0e:ba:6e:e7:f2:74:b6:9e:
         24:c9:d9:17:dd:c4:d4:dc:3f:66:b2:3d:db:8e:b6:ef:2c:57:
         0e:39:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:13:47 2025 by rpki-client