Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTV1jBgkLB8WnefmkP9AirpMzY.roa
File:                     LwTV1jBgkLB8WnefmkP9AirpMzY.roa (raw, json)
Hash identifier:          1Wji6/4T8zKauBdaxK9vdDsFMnjCLOjKPU8huVshpXI=
Subject key identifier:   2F:04:D5:D6:30:60:90:B0:7C:5A:77:9F:9A:43:FD:02:2A:E9:33:36
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A3B02E37AFFEAE2EF5E0108A312750FC9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTV1jBgkLB8WnefmkP9AirpMzY.roa
Signing time:             Mon 28 Aug 2023 07:19:19 +0000
ROA not before:           Mon 28 Aug 2023 07:19:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3b:02:e3:7a:ff:ea:e2:ef:5e:01:08:a3:12:75:0f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 28 07:19:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f04d5d6306090b07c5a779f9a43fd022ae93336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e3:c0:1d:06:3f:2b:ec:d6:16:fd:f4:b1:e0:
                    f3:a6:f6:e9:2d:a8:8d:23:22:b7:44:ac:a5:41:b2:
                    8e:4d:53:fa:64:f6:d2:ff:39:e1:74:fe:ad:c2:41:
                    e1:b3:e0:9c:f6:65:bb:24:8f:af:15:d0:96:14:69:
                    d7:17:e2:8c:c8:60:d7:e7:27:20:20:e3:4b:19:fa:
                    db:44:2d:c5:c2:e6:9d:d8:a5:6d:30:f6:6c:f1:bd:
                    e4:02:3d:cc:6e:88:07:82:74:69:d8:d3:f4:54:1a:
                    f8:94:96:1e:33:0c:a4:97:69:36:e5:23:cd:26:66:
                    99:98:76:a3:15:78:42:3c:5e:bf:a8:34:8d:eb:d0:
                    20:05:3f:bb:1b:a0:06:6d:f8:f1:0d:04:7a:f0:4b:
                    86:fa:fd:73:99:e9:31:c2:c8:76:c1:db:01:08:7b:
                    1e:08:2b:b9:b6:40:eb:26:31:e2:a6:65:1c:ce:dd:
                    9b:31:8a:a3:3d:1e:ee:60:da:81:d4:bf:1c:e8:7a:
                    60:18:9d:e0:9e:44:77:15:f4:c5:14:06:56:0e:81:
                    70:c6:be:0b:7c:0e:90:c1:d0:97:4d:9e:43:71:c0:
                    de:84:0d:85:f1:b8:1a:5f:b3:21:7f:6d:6b:e3:1f:
                    5a:34:a8:a8:a5:a8:29:4c:f7:65:48:c2:09:a3:94:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:D5:D6:30:60:90:B0:7C:5A:77:9F:9A:43:FD:02:2A:E9:33:36
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LwTV1jBgkLB8WnefmkP9AirpMzY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:c6:2e:93:7c:a3:01:16:83:3c:77:13:28:42:32:0b:19:e6:
         9d:fb:c0:36:a3:e3:ed:cb:58:b5:dc:53:a8:be:56:d3:d7:17:
         e6:01:59:83:6f:a6:2d:05:49:e1:8d:bc:24:36:c2:0a:5e:9c:
         db:e7:8f:ca:22:0e:2e:ee:3f:45:3d:33:68:bc:09:a0:5d:91:
         97:4e:0a:d4:0e:fc:3c:3a:fd:49:9b:1d:64:6e:6e:54:42:04:
         b4:65:91:eb:4a:b4:cb:03:ee:50:2c:88:86:b5:22:df:0d:ed:
         c3:d1:96:f7:75:55:78:90:4a:02:21:45:b2:d1:a2:5c:53:61:
         6e:b9:15:58:fa:a6:24:44:9c:ab:ad:ea:58:8d:c4:90:8c:e2:
         d1:22:3f:d1:ef:48:9e:76:30:24:86:a9:6b:12:0f:35:a0:dc:
         c4:9d:87:bf:8c:db:e4:37:0b:a1:c3:3f:9f:aa:fa:d5:80:ef:
         e7:af:db:52:b5:a9:42:fc:73:fb:b4:72:eb:86:12:a9:16:92:
         35:56:b7:7f:76:e3:f7:91:99:cd:c7:a2:64:20:51:0f:12:c1:
         1b:d7:d1:84:ae:01:6f:e6:b2:e7:3c:01:e6:ad:fc:06:ac:71:
         b5:16:2e:93:98:05:85:00:a1:88:54:63:5c:97:49:46:0f:22:
         c7:2f:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:55:59 2025 by rpki-client