Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUxm-UZjUwVoam6sf4PE34XATlk.roa
File:                     EUxm-UZjUwVoam6sf4PE34XATlk.roa (raw, json)
Hash identifier:          Xia4Q8DtvY29RSCYaXgkpBb17Ka6O4T71PldW+MnYpU=
Subject key identifier:   11:4C:66:F9:46:63:53:05:68:6A:6E:AC:7F:83:C4:DF:85:C0:4E:59
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186413EA292831ABAEA71B33CA9389E0C11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUxm-UZjUwVoam6sf4PE34XATlk.roa
Signing time:             Sat 11 Feb 2023 16:11:08 +0000
ROA not before:           Sat 11 Feb 2023 16:11:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:41:3e:a2:92:83:1a:ba:ea:71:b3:3c:a9:38:9e:0c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 11 16:11:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=114c66f946635305686a6eac7f83c4df85c04e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ac:c9:8a:0a:c7:4f:b5:aa:53:8e:8d:af:5d:
                    16:68:76:01:4b:cc:41:af:9a:39:08:3d:6e:53:58:
                    70:a4:6b:1e:20:34:e0:15:ea:50:51:3e:82:53:df:
                    45:f9:7a:96:46:9d:83:be:20:a4:a2:87:12:e8:1f:
                    04:85:87:08:7d:02:9b:34:5b:0e:7b:18:e9:be:80:
                    84:16:bc:b2:58:7b:05:61:36:d2:0e:0b:ee:c2:d5:
                    41:75:6d:25:eb:d6:03:61:b1:15:87:0f:bc:1a:da:
                    8a:89:b4:38:a8:65:1a:bd:60:55:ac:f5:47:f6:62:
                    bd:bf:58:6a:dd:1e:ce:56:0b:00:dd:34:c3:c1:74:
                    8c:0e:41:17:e8:a2:6f:99:d3:0d:30:1f:a0:0c:83:
                    25:24:18:42:27:11:70:60:38:b0:4f:a6:5e:27:b4:
                    0e:eb:06:d1:81:b0:97:27:9f:27:3a:e0:16:0e:ee:
                    5c:d3:a9:4d:09:cd:db:aa:4f:af:a1:7c:1a:12:fb:
                    9b:8a:6d:8a:be:8c:4b:a6:2b:3f:31:05:a1:a0:29:
                    c8:a5:66:2c:34:92:de:fd:10:dc:cb:02:92:37:83:
                    73:42:1c:87:f7:07:c3:af:7b:77:8b:37:bd:bb:69:
                    40:f6:59:5c:53:02:80:84:51:14:6b:cd:c5:fe:54:
                    3a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:66:F9:46:63:53:05:68:6A:6E:AC:7F:83:C4:DF:85:C0:4E:59
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EUxm-UZjUwVoam6sf4PE34XATlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:0a:47:90:b1:c0:7f:7d:29:f0:e4:26:00:e5:91:af:7a:8f:
         6f:0d:b2:64:22:eb:89:ec:a0:b7:c3:3c:5a:70:9f:e4:40:7d:
         1c:f7:34:9e:c5:29:c2:91:9e:78:19:46:bd:cf:dd:98:fd:e2:
         d8:e9:e2:64:10:ef:01:af:a7:0c:42:22:c7:dc:14:0c:99:5f:
         e0:27:ab:a2:59:d0:1d:ff:3c:09:e2:d1:fe:28:f6:85:b5:c8:
         bb:e8:1c:70:61:9a:0e:ab:02:86:ba:e2:69:9c:ec:78:bd:c5:
         98:37:2a:79:13:56:c9:37:18:5b:6f:e8:13:7d:34:a6:80:64:
         a2:20:6a:08:1f:19:7c:21:50:df:6d:24:06:9a:9b:b4:eb:d9:
         b0:6b:dd:43:ea:9d:44:02:35:58:35:ed:e4:db:bd:f5:e9:13:
         24:1d:77:f0:b7:65:57:cf:86:10:32:f7:e9:d3:3f:76:a1:21:
         bc:e3:89:a7:a3:08:e5:e6:c6:0a:51:8b:7a:20:51:60:38:04:
         5a:ad:cb:29:5b:cd:6c:f5:0d:4c:e5:07:79:32:41:33:74:fe:
         99:3b:13:d3:14:ff:5c:e3:1e:9a:26:e0:e6:f7:f1:79:a7:9d:
         7b:33:67:9b:0b:e7:90:2d:7d:34:7d:57:da:00:6e:f3:fb:98:
         04:66:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:12:14 2025 by rpki-client