Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HpdFpTJUxiCpU1PkTsq88C_pgBA.roa
File:                     HpdFpTJUxiCpU1PkTsq88C_pgBA.roa (raw, json)
Hash identifier:          9acIj4nikK7A//ZK+4qovjZVNRgDiRKarNFCf7cwbvw=
Subject key identifier:   1E:97:45:A5:32:54:C6:20:A9:53:53:E4:4E:CA:BC:F0:2F:E9:80:10
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       88014F9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HpdFpTJUxiCpU1PkTsq88C_pgBA.roa
Signing time:             Sat 28 May 2022 21:10:13 +0000
ROA not before:           Sat 28 May 2022 21:10:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
                          2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281787292 (0x88014f9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 28 21:10:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e9745a53254c620a95353e44ecabcf02fe98010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:cd:7b:ff:85:23:bd:de:d1:0c:16:17:22:
                    61:bc:f4:1c:e3:1b:80:06:20:7e:97:93:6d:36:b0:
                    52:66:5e:ec:74:a7:aa:78:4d:59:bd:ea:54:7c:eb:
                    18:ce:59:39:11:9a:a3:61:0c:7c:08:cc:cf:dc:b1:
                    a9:df:82:ad:6f:70:f3:d9:34:32:d4:a6:ba:1a:05:
                    4a:bf:ab:f9:1a:fa:4b:d2:97:89:af:a2:86:52:76:
                    ad:d7:8c:aa:e5:07:3e:3d:33:40:04:38:e8:92:63:
                    2f:29:20:c9:65:c1:70:55:2e:3d:e5:8b:28:7e:ba:
                    c0:b2:00:4b:4f:d8:1a:f7:10:99:50:11:ce:cb:1f:
                    1b:26:b0:45:89:ec:10:4e:11:9c:df:26:4b:95:d1:
                    7e:e6:47:1b:f0:47:45:6a:2f:48:47:a7:a4:6f:d6:
                    52:68:57:90:bc:99:18:1f:4f:d4:dc:fb:b4:9b:41:
                    06:de:c5:c2:31:aa:fe:cd:12:52:98:7f:37:f3:c1:
                    f7:04:fc:49:5c:cc:18:d7:df:9c:85:9f:2e:c7:e3:
                    a6:b4:a8:19:62:63:fd:3c:74:74:31:02:e4:5d:f9:
                    83:12:21:8b:b1:b3:50:87:68:e3:91:72:bb:6a:54:
                    1d:77:d6:0b:02:48:5c:08:d4:0f:c3:57:5e:04:75:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:97:45:A5:32:54:C6:20:A9:53:53:E4:4E:CA:BC:F0:2F:E9:80:10
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HpdFpTJUxiCpU1PkTsq88C_pgBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:eb:3e:dd:84:aa:97:f8:97:29:fe:14:b6:5e:4c:67:99:85:
         8f:a7:db:c7:85:1d:e1:5e:00:3a:b7:95:cc:d2:cc:40:8c:20:
         54:51:26:ac:ca:28:bb:35:1a:e8:2c:9a:d0:e3:8a:77:4d:69:
         1b:5f:44:cb:c5:8f:e4:94:95:7d:b2:0f:03:d4:a5:29:ad:c9:
         29:79:9a:af:03:5b:ef:8e:a7:dd:22:77:a3:e5:dc:df:31:89:
         fc:f8:98:8e:b1:b2:db:6f:2f:06:3d:d6:70:ad:10:28:ef:f9:
         c5:77:51:6b:61:8a:ba:c4:99:e7:e7:e3:f5:66:0d:16:fc:39:
         51:12:33:43:06:63:3b:2b:09:36:8b:b3:bf:90:81:9a:65:d8:
         93:32:39:58:26:4d:92:48:2b:e6:07:a4:dd:8f:ef:4c:3d:ad:
         58:96:00:e8:88:a5:bb:65:e7:2b:34:48:a4:54:66:f0:86:65:
         dd:d8:a8:f2:e9:1c:ea:ba:2f:5b:7a:98:f6:8c:fb:55:ac:da:
         68:35:90:71:a0:88:a4:10:eb:b8:3b:6f:b3:52:a6:0d:4c:60:
         2b:b0:81:d9:16:a9:2a:14:65:f0:e3:8f:df:cf:01:a6:30:a3:
         22:70:3d:e2:4a:e6:b2:e5:dd:fa:d5:f2:ef:45:61:26:6c:7d:
         d8:74:4c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:35:22 2025 by rpki-client