Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LBpMFXhA3FHUx5tA5ZbSO53nOhE.roa
File:                     LBpMFXhA3FHUx5tA5ZbSO53nOhE.roa (raw, json)
Hash identifier:          ahQOUURShTYAO4zI5jZ8kBSDzTPdbxVstT5cvM5RhUs=
Subject key identifier:   2C:1A:4C:15:78:40:DC:51:D4:C7:9B:40:E5:96:D2:3B:9D:E7:3A:11
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188BA743CBB5665D9BD311FB4D300BA1B9F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LBpMFXhA3FHUx5tA5ZbSO53nOhE.roa
Signing time:             Wed 14 Jun 2023 15:09:19 +0000
ROA not before:           Wed 14 Jun 2023 15:09:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ba:74:3c:bb:56:65:d9:bd:31:1f:b4:d3:00:ba:1b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 14 15:09:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c1a4c157840dc51d4c79b40e596d23b9de73a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:a1:da:42:91:a5:c5:de:01:b1:f9:2a:7b:
                    1b:32:b7:30:ea:e3:71:c5:36:08:ae:ce:71:c1:2e:
                    c4:7a:64:91:47:be:69:fa:05:a7:d9:36:3c:04:e1:
                    b3:7d:a5:73:a5:77:ee:5d:5d:a9:bc:f3:8d:80:ef:
                    58:89:d9:83:b6:c7:fd:7b:9e:d1:bc:64:31:fe:74:
                    86:2e:d6:d1:a2:b0:d0:f9:c8:67:9c:36:40:4c:72:
                    fc:3a:04:42:84:8f:43:ca:35:11:9d:95:0d:bb:47:
                    21:9c:f7:fa:b5:50:f1:bb:87:cd:3a:f1:7a:dd:9c:
                    65:4c:97:75:ec:9e:5d:b0:d2:80:cc:ba:6b:d2:dc:
                    1d:48:f8:95:ed:10:38:73:0a:f1:ee:2a:be:d4:d8:
                    f7:92:cb:c0:bc:22:43:c5:93:09:d6:d4:08:5f:05:
                    e3:9c:69:d5:14:84:2b:24:08:53:16:e8:b8:d3:fe:
                    38:bc:4f:87:74:27:75:10:eb:12:e1:31:04:1c:4d:
                    75:a7:56:e7:bc:3c:9d:e1:68:a4:00:78:2d:e9:15:
                    61:ae:67:2f:fc:28:c4:d8:30:9e:cb:6d:51:05:b7:
                    1b:dd:a4:84:22:3f:a4:ab:2c:9a:e5:41:6e:6c:fb:
                    6f:60:f2:78:02:38:7f:9b:d8:3d:df:21:53:e8:14:
                    53:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1A:4C:15:78:40:DC:51:D4:C7:9B:40:E5:96:D2:3B:9D:E7:3A:11
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LBpMFXhA3FHUx5tA5ZbSO53nOhE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:ed:ec:b6:66:b0:48:8c:0c:c9:09:ce:c3:98:72:c9:03:
         ca:ef:10:65:1d:7e:ae:76:89:a3:a4:ab:cb:fd:b0:62:61:f5:
         be:34:c6:5b:c7:b0:db:af:44:33:94:9c:64:a5:ff:1b:d1:6a:
         9a:0a:ec:dc:a6:8f:2e:b7:2d:79:22:69:c5:48:67:7d:e9:ca:
         54:46:2d:4b:f4:10:1c:f7:79:8c:d8:57:29:5a:e2:30:53:30:
         1d:19:a9:15:1d:a9:8b:37:52:07:32:d1:0d:7c:06:17:9e:f3:
         47:e6:3f:06:cb:da:0c:5d:b3:fa:cd:b5:a7:97:f7:aa:27:eb:
         ad:78:3f:f1:f3:06:a5:03:83:ce:cf:0b:5f:b2:d3:ff:e2:fd:
         67:62:2a:b4:10:0f:9e:7d:5f:04:fa:d2:ae:36:12:42:95:dd:
         8a:57:46:bc:79:6f:50:b3:7e:da:75:10:2f:07:9f:4d:e6:f9:
         39:28:ea:09:9a:c0:d0:ef:91:a2:9b:8a:7b:9a:c0:68:fc:90:
         eb:36:c0:5c:96:ab:be:e6:f9:5e:db:24:d8:a0:8b:2f:b2:4a:
         8f:1d:84:2c:83:97:b2:8b:9c:24:3d:dc:69:ec:1a:8e:0f:3e:
         39:63:47:79:fa:bb:0f:fb:24:45:d7:d6:9e:12:d5:f6:4d:00:
         79:c9:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:22:35 2025 by rpki-client