Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0BD1W1djNHl-rhPo_Fl4KZTLxc.roa
File:                     E0BD1W1djNHl-rhPo_Fl4KZTLxc.roa (raw, json)
Hash identifier:          uF8FP4Vb7G7riV8NYDIJyQ1/5Sc0PTcxKqCaDA77Cjc=
Subject key identifier:   13:40:43:D5:6D:5D:8C:D1:E5:FA:B8:4F:A3:F1:65:E0:A6:53:2F:17
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186A5438012D60EF1A83E1053B4C67CA245
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0BD1W1djNHl-rhPo_Fl4KZTLxc.roa
Signing time:             Fri 03 Mar 2023 02:18:29 +0000
ROA not before:           Fri 03 Mar 2023 02:18:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a5:43:80:12:d6:0e:f1:a8:3e:10:53:b4:c6:7c:a2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  3 02:18:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=134043d56d5d8cd1e5fab84fa3f165e0a6532f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:ab:2b:ea:a2:5e:2d:dd:42:d8:81:cc:f2:
                    5f:6c:b1:3f:89:9e:58:78:44:99:78:16:b1:e1:0d:
                    b1:31:98:c4:1c:2f:88:f7:b1:5e:25:a0:c6:ac:f3:
                    7a:0a:4e:07:6b:76:7d:94:58:1a:fe:8e:89:67:bb:
                    23:f1:55:98:3a:45:dd:26:1d:94:3d:6c:93:7a:a9:
                    08:4f:98:38:eb:c8:8c:d1:25:0b:f9:50:d7:74:1c:
                    56:8a:fe:6b:fa:0f:80:96:ef:03:b7:3d:79:1f:8c:
                    c4:43:67:47:bd:34:b9:ef:83:88:fe:eb:65:76:37:
                    6b:f6:2c:99:ab:a3:68:35:dd:f5:61:a9:64:19:6e:
                    ca:19:83:c7:eb:f6:54:9e:9c:76:13:c1:33:82:f2:
                    99:49:39:1d:81:73:4a:af:0b:21:b2:0a:75:64:83:
                    73:dd:5c:af:63:5c:93:d6:7a:c2:0b:4e:81:42:e5:
                    cc:fa:dc:dd:fa:5b:0e:96:19:4b:76:4a:1a:70:b0:
                    4d:23:49:73:96:17:5f:21:ca:f9:a3:c5:19:d1:b3:
                    40:f8:32:7f:6a:67:8a:35:e2:40:95:08:30:b9:72:
                    a7:7d:08:1e:d9:12:db:6c:3d:82:a5:90:2d:0f:42:
                    51:42:66:9e:4c:01:a1:14:44:61:4f:83:5a:c4:f3:
                    b9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:40:43:D5:6D:5D:8C:D1:E5:FA:B8:4F:A3:F1:65:E0:A6:53:2F:17
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E0BD1W1djNHl-rhPo_Fl4KZTLxc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:a1:a8:be:44:a3:5d:2a:6f:3e:21:a3:b7:d5:a4:b5:88:
         c8:f0:78:21:f1:fd:a3:d2:e8:c6:18:d9:75:d7:bd:4a:96:64:
         45:e1:2a:9f:a6:c0:b8:49:1f:e2:5c:75:0d:84:a2:d3:59:f8:
         aa:5a:8b:a3:e9:18:ab:de:f3:2a:d7:7d:30:91:cd:e0:1d:6a:
         ce:10:a5:fc:fa:73:a8:e8:70:d4:78:07:0b:66:b4:ab:55:3f:
         6e:10:d1:83:1f:12:27:ea:7a:63:6f:a3:d5:0e:60:fe:28:ad:
         5b:63:3d:e4:38:63:cd:08:0f:57:06:b4:c7:47:c8:ee:a2:0d:
         0b:1c:14:5c:40:eb:0e:38:01:18:b3:6e:77:b4:ba:5e:db:0c:
         15:3a:a8:53:3d:86:2a:ea:b7:ea:58:3b:fd:08:cc:4f:ec:e6:
         1a:d7:a7:2f:8d:c7:87:60:2d:30:e8:e1:82:25:49:c0:af:a3:
         ad:54:88:a2:da:d5:fe:d2:57:fe:30:50:61:8f:7d:1e:2d:3d:
         de:78:60:84:b6:3b:7a:3c:87:0c:d1:5e:06:b4:31:21:33:6d:
         aa:9d:e9:66:bf:04:00:a3:fe:a7:b0:9c:6f:e9:fe:0d:10:3f:
         5b:e6:01:46:55:5a:7e:cb:38:52:05:3d:02:31:d0:a5:62:b6:
         b4:e1:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:08:14 2025 by rpki-client