Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQgkk2IlC32E7OURlq_-ck7j3GU.roa
File:                     KQgkk2IlC32E7OURlq_-ck7j3GU.roa (raw, json)
Hash identifier:          +BchT1rf3qfGioBQUUjeGwYuaFZvNGV02rWeN+zQ3J4=
Subject key identifier:   29:08:24:93:62:25:0B:7D:84:EC:E5:11:96:AF:FE:72:4E:E3:DC:65
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01865E3686E02DE08B423CF196A82485DFB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQgkk2IlC32E7OURlq_-ck7j3GU.roa
Signing time:             Fri 17 Feb 2023 07:11:17 +0000
ROA not before:           Fri 17 Feb 2023 07:11:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5e:36:86:e0:2d:e0:8b:42:3c:f1:96:a8:24:85:df:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 17 07:11:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2908249362250b7d84ece51196affe724ee3dc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:c5:c2:05:45:f0:f1:93:d7:d5:3b:2b:08:
                    29:06:6f:10:ba:78:5d:e7:2a:13:2b:de:2a:d6:d2:
                    7f:cc:ef:dd:41:32:a1:d7:11:0c:08:dc:b0:fa:6d:
                    7c:be:75:4e:7b:df:02:12:b7:b7:f9:67:b7:16:5a:
                    02:21:b7:fa:6d:86:4b:46:48:c5:00:68:11:83:2b:
                    52:f1:d2:8c:6c:3c:e6:9a:d5:f0:aa:d9:34:74:48:
                    b9:e5:0d:73:78:db:fa:3b:61:34:e0:a1:08:9f:40:
                    d1:f6:f3:ec:81:b0:bc:b1:cb:34:d6:74:93:e1:17:
                    7e:2f:14:6c:ac:50:04:63:0d:af:a5:90:b4:96:69:
                    54:07:3e:37:12:ed:a2:8a:0e:8a:68:36:59:95:99:
                    83:76:39:7d:49:6f:9e:44:f2:7b:7c:17:fb:bf:da:
                    dd:2f:58:d0:2e:b8:88:ce:b4:87:22:0b:c4:98:7f:
                    89:94:7c:36:dd:44:b6:db:78:da:34:06:83:42:6c:
                    f1:dd:cd:6e:c1:81:de:ec:be:c7:c3:ba:c3:77:03:
                    33:ec:78:fc:74:c6:22:1f:6e:88:7b:8b:ff:6b:c5:
                    ea:64:80:19:3c:7c:83:a9:b0:a3:64:7f:4f:49:23:
                    1b:7a:e3:69:92:1f:d8:7e:a6:13:52:5c:8b:36:20:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:08:24:93:62:25:0B:7D:84:EC:E5:11:96:AF:FE:72:4E:E3:DC:65
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KQgkk2IlC32E7OURlq_-ck7j3GU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:73:61:3c:f2:24:15:13:db:7b:b6:f9:06:b3:a5:59:6f:0b:
         3c:8a:ab:dc:bc:7f:a7:e9:3a:b1:da:34:2c:b7:0b:3b:a9:b4:
         87:93:df:07:7a:a3:76:20:de:9a:8f:33:63:76:cb:bc:d0:3d:
         44:ac:a5:b3:fd:dc:dc:cf:c9:96:9e:3e:3d:c6:ab:81:84:50:
         d9:6d:41:db:9f:82:26:2b:90:3d:69:64:3e:78:15:83:5c:bb:
         a1:7d:5b:3b:34:4d:13:a2:66:93:24:05:17:0b:11:32:1d:f8:
         5e:33:5f:7a:9b:35:f4:c9:30:6a:b4:94:06:99:c7:fe:06:5b:
         ce:9e:a3:dd:87:56:5a:49:32:c3:af:d7:b2:c3:45:ec:e1:13:
         94:ef:08:fe:19:39:ba:17:46:65:96:3f:cb:9d:16:7e:bd:6e:
         e3:40:0b:1b:ca:c1:c8:57:c7:a7:ba:f8:64:32:eb:69:15:fa:
         37:0f:cf:30:bd:6c:12:8e:7c:94:2c:18:a0:da:17:50:4a:76:
         82:d9:63:49:89:5a:eb:12:a6:3e:44:a8:48:83:1b:8c:7c:98:
         c0:04:94:db:9f:9b:90:17:e9:0f:43:d9:b5:42:4e:95:c5:77:
         8c:7e:53:92:d3:68:fb:82:65:48:c7:ae:34:83:72:d4:79:6c:
         49:38:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:26:31 2025 by rpki-client