Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4J54nBGa28JAdlpS81z4ZIK1Nw.roa
File:                     F4J54nBGa28JAdlpS81z4ZIK1Nw.roa (raw, json)
Hash identifier:          AOwGyrr3GQ4pah/bYRp8fAEWESnJtO7OnN04mtynUy8=
Subject key identifier:   17:82:79:E2:70:46:6B:6F:09:01:D9:69:4B:CD:73:E1:92:0A:D4:DC
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A1B42EBE294B8753C1146FEF60EE29E5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4J54nBGa28JAdlpS81z4ZIK1Nw.roa
Signing time:             Tue 22 Aug 2023 03:21:25 +0000
ROA not before:           Tue 22 Aug 2023 03:21:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1b:42:eb:e2:94:b8:75:3c:11:46:fe:f6:0e:e2:9e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 22 03:21:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=178279e270466b6f0901d9694bcd73e1920ad4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:21:82:e4:1c:ab:f3:ef:d9:17:3d:6e:a6:
                    40:51:db:72:14:02:5a:0a:eb:af:45:64:78:73:b1:
                    f3:b1:b6:96:2c:56:2b:31:21:42:17:57:de:ed:74:
                    2b:d9:a8:10:d1:4f:0c:14:6a:51:d3:b1:ff:9e:4c:
                    f9:25:6a:f0:f4:2e:f0:a8:e4:1c:a9:bf:49:28:c4:
                    98:ef:ea:12:6c:0a:17:0d:cc:44:36:b4:dd:5d:df:
                    4b:fd:bc:1f:1c:64:a8:6e:2e:df:09:fc:4b:3a:11:
                    59:46:39:19:33:5a:aa:af:2e:d9:d0:ab:3a:73:5f:
                    09:e9:dd:31:95:b4:c2:56:33:4a:24:dd:d7:9e:8f:
                    a3:51:ff:b7:00:b4:5a:4d:ae:9d:bf:36:51:b9:f2:
                    88:22:d1:65:de:be:bb:b5:0a:76:db:3f:07:b6:f7:
                    4f:43:41:88:e8:05:b8:7d:5e:c2:60:a0:8e:ab:a0:
                    5d:7e:db:73:80:c8:01:95:c7:81:26:63:57:9f:d9:
                    56:db:ee:d9:17:9e:67:d8:6b:33:5a:bd:e2:50:e3:
                    c1:19:2b:bd:bf:9d:3d:99:66:b3:c8:b5:a8:f3:c3:
                    f3:95:9d:0f:e1:da:98:14:35:d4:8e:ce:7d:f9:59:
                    8a:a3:ac:06:ed:02:08:b4:87:9c:93:c1:48:eb:5d:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:82:79:E2:70:46:6B:6F:09:01:D9:69:4B:CD:73:E1:92:0A:D4:DC
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F4J54nBGa28JAdlpS81z4ZIK1Nw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:40:86:2f:27:c6:30:83:80:27:80:fb:3f:2e:33:93:94:7f:
         dc:3e:9d:4d:20:60:f6:56:85:ba:c6:d7:7e:93:10:ed:8b:cc:
         98:db:d3:45:9b:8c:42:95:66:49:3d:34:3d:cc:32:65:26:8f:
         40:25:31:2c:a8:e6:2b:68:7f:be:24:92:8b:21:ab:a5:a2:a7:
         4b:3e:ba:a8:f5:72:b8:b3:be:a0:58:f7:ed:72:c6:f8:94:00:
         d7:b7:e8:68:e7:cf:a0:63:ae:53:af:ba:b0:f5:ab:e4:ea:d4:
         60:0b:7e:4f:bc:9d:ae:fa:32:c3:d6:8d:99:f0:98:0a:29:e7:
         ba:ab:18:84:53:e0:f0:38:43:f8:af:77:f9:82:71:fc:74:72:
         de:71:ae:5d:85:f8:66:4d:ea:63:b1:9f:38:1b:1e:65:38:27:
         2a:a9:7d:24:6c:6d:54:75:64:0a:69:41:77:ab:bc:af:5d:ea:
         16:66:7f:8d:96:48:d5:eb:e4:d6:39:b6:ab:f3:94:be:5b:bb:
         db:6f:2c:6a:35:6b:be:a3:fa:ba:25:3c:fd:3e:35:9d:50:28:
         28:38:e9:ae:5f:fc:14:1f:2d:8a:a6:98:ea:ba:2c:c9:16:29:
         7f:f0:0d:cb:2a:75:5b:62:8c:c6:91:e8:d2:d7:52:23:59:0d:
         94:60:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:43:16 2025 by rpki-client