Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EGem8CrQFQAWAu5pYlFHSV_5dx0.roa
File:                     EGem8CrQFQAWAu5pYlFHSV_5dx0.roa (raw, json)
Hash identifier:          VopgkNtimuuSQ15xQThSn5UWKwMIT9DY7Q5OPfYjRYU=
Subject key identifier:   10:67:A6:F0:2A:D0:15:00:16:02:EE:69:62:51:47:49:5F:F9:77:1D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187F2AAFF7A5A0E01FACA7A80E0CEDB3560
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EGem8CrQFQAWAu5pYlFHSV_5dx0.roa
Signing time:             Sat 06 May 2023 20:05:05 +0000
ROA not before:           Sat 06 May 2023 20:05:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:f2aa:3359/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:f2:aa:ff:7a:5a:0e:01:fa:ca:7a:80:e0:ce:db:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May  6 20:05:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1067a6f02ad015001602ee69625147495ff9771d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:09:39:e5:32:5c:9e:12:7d:68:d7:33:2d:
                    50:cb:3b:73:fc:ba:b3:f7:25:d3:57:52:30:bf:70:
                    41:4e:3d:96:c8:6a:f4:7c:59:c7:c8:98:43:53:27:
                    e3:ed:a7:f8:ce:3b:b6:0a:d2:4e:97:93:3d:63:d3:
                    9e:45:9e:c8:43:03:50:9d:28:4c:29:10:8c:3f:32:
                    11:fd:80:af:30:fc:f8:b8:4e:eb:2b:58:a0:ce:20:
                    ac:56:4c:90:ac:19:20:ea:54:07:9f:19:b8:61:07:
                    e6:ef:f4:8e:e4:6c:c7:c4:df:0e:dd:e2:a1:d3:64:
                    8e:d2:67:12:37:f5:ed:bf:1a:2b:9e:c0:22:0c:ac:
                    40:03:a2:74:c3:26:da:74:b5:af:10:82:d4:8d:f4:
                    4e:8f:05:84:be:20:c0:62:57:92:90:06:8d:91:81:
                    31:49:cb:32:f4:05:99:46:69:d8:ce:6e:09:b4:96:
                    4d:ec:a6:c6:5d:c0:4b:e1:19:0f:5e:8f:3b:6c:44:
                    05:de:47:5b:74:40:ef:3e:41:b0:48:2b:dd:3c:4d:
                    39:a1:2a:50:9e:14:f4:9b:01:e8:a6:32:fb:ff:7a:
                    b8:b8:6e:0d:a6:72:ab:11:f4:da:70:e8:1c:32:de:
                    00:14:f9:6e:5f:52:d3:9f:6f:5a:cf:65:bb:70:90:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:67:A6:F0:2A:D0:15:00:16:02:EE:69:62:51:47:49:5F:F9:77:1D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EGem8CrQFQAWAu5pYlFHSV_5dx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:15:f5:3c:6e:6e:49:ca:b1:10:1b:a7:0f:7d:f9:d0:cf:ba:
         8f:10:f9:65:29:5d:76:f2:f1:a7:65:45:45:fe:d8:bb:b3:5e:
         6d:5c:cd:5c:31:dd:8f:42:17:b5:51:85:f3:62:47:b1:ff:ab:
         dc:67:e0:51:fb:c0:fa:1e:45:2c:82:b0:40:98:e8:0f:9e:36:
         0d:b1:fa:64:fa:ad:7f:f9:68:5f:5b:56:36:4c:64:a6:8a:01:
         c2:45:fc:38:09:a6:0f:6d:e4:5b:02:0d:af:f4:33:d0:91:13:
         51:9d:77:2f:a1:18:c0:e8:37:b8:c7:72:41:e5:22:78:3a:a7:
         39:56:5d:b0:12:ac:14:fa:ce:1d:4a:ea:a2:ca:04:84:65:5b:
         ae:1b:d6:da:47:87:97:9a:95:72:c4:87:f7:0a:51:5e:48:4b:
         12:ec:09:5f:6f:c2:f3:2a:d6:4d:60:44:f5:39:5d:9e:a0:9d:
         f6:eb:c8:4c:ce:00:3f:4a:69:b6:41:43:a9:9a:f6:e7:e0:31:
         23:9c:70:c8:ff:3d:ed:e4:e7:53:a5:96:d7:af:39:44:77:ba:
         cd:eb:11:02:81:7a:6f:0f:c6:75:37:e7:c9:e8:47:8c:c4:f7:
         6a:e2:05:27:63:6e:05:b2:d6:e2:e5:4c:79:19:9f:bf:f4:7c:
         b1:4b:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:23:03 2025 by rpki-client