Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEa_UeYyj-zQeODyGKUDbKSr73w.roa
File:                     MEa_UeYyj-zQeODyGKUDbKSr73w.roa (raw, json)
Hash identifier:          YOE4kR0KWQUT5XBYs2NmvsvfwnwSGa3rXPcWPgO19H4=
Subject key identifier:   30:46:BF:51:E6:32:8F:EC:D0:78:E0:F2:18:A5:03:6C:A4:AB:EF:7C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       7058F2F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEa_UeYyj-zQeODyGKUDbKSr73w.roa
Signing time:             Mon 07 Mar 2022 00:10:27 +0000
ROA not before:           Mon 07 Mar 2022 00:10:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884877560 (0x7058f2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  7 00:10:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3046bf51e6328fecd078e0f218a5036ca4abef7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:8d:bb:53:b8:8c:97:4c:77:9d:e7:9a:8f:
                    a0:c6:c5:76:94:1c:0b:e0:c9:9d:47:2e:8e:18:f2:
                    f5:48:46:c7:89:e4:08:23:b4:25:49:eb:ca:88:13:
                    44:7d:ee:78:1f:71:f6:35:6a:ce:c0:7c:42:bf:5b:
                    7c:47:d3:87:1d:b1:7d:be:16:b8:f7:95:ca:96:df:
                    68:6a:81:c3:d9:8d:ca:bb:a6:24:9e:27:8f:dc:41:
                    a3:10:dc:5c:de:05:68:bd:64:f6:bc:e6:52:93:63:
                    39:dc:dd:13:c3:fa:d7:2b:fa:8c:36:fa:cf:7a:9f:
                    f6:d2:7b:b5:72:08:5d:d2:92:d0:1c:57:c2:cc:1b:
                    76:8a:22:32:82:70:46:53:2b:10:b4:b7:2d:ee:d8:
                    4b:b6:09:d4:b5:52:cf:15:12:bf:85:5e:4a:aa:cc:
                    79:05:49:88:e7:ce:af:31:83:fb:84:4f:8b:86:ec:
                    b8:ce:31:41:0f:e5:59:0b:e2:5e:fe:52:fa:6b:e8:
                    bb:9e:96:e3:56:56:0d:a1:13:c9:4e:bf:6a:c8:fa:
                    a9:72:91:b6:68:63:46:f5:b3:4a:81:d4:ba:be:77:
                    77:f0:59:68:3d:d9:3c:b3:81:93:58:a7:9f:e2:bf:
                    54:7a:ae:01:38:27:41:49:82:a3:eb:58:32:b8:4c:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:BF:51:E6:32:8F:EC:D0:78:E0:F2:18:A5:03:6C:A4:AB:EF:7C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MEa_UeYyj-zQeODyGKUDbKSr73w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:91:73:86:01:cc:79:98:f8:d8:5a:8d:a8:90:21:f4:33:88:
         06:7d:f6:ba:26:cb:ab:47:d3:a1:c4:22:a5:37:90:60:22:95:
         cb:ae:85:99:95:d0:71:26:ce:0f:c6:d0:7e:04:f4:1d:dc:48:
         b4:bf:db:6d:3e:cb:53:de:cc:ac:9f:37:14:c8:88:b4:23:db:
         de:38:24:be:81:9e:4f:87:c4:62:9a:37:be:4e:0a:4f:66:2e:
         72:bd:0f:b3:9b:1b:e9:06:e0:a1:3b:be:01:3a:8b:7f:b6:44:
         bd:7e:24:35:31:57:7d:8b:1d:99:9c:1d:b4:48:34:13:e3:b9:
         ac:53:ed:41:0f:67:bc:b8:ca:d1:5f:3c:1a:5a:63:fa:8d:a1:
         26:ea:d7:4b:05:5b:e4:bc:8d:73:0e:bf:d6:f8:32:72:e6:a6:
         34:ba:d7:22:c3:36:32:68:7a:0f:e7:4f:c4:31:6d:c2:ff:fe:
         54:81:23:fc:1c:d3:b5:85:3e:fc:5d:cb:6f:75:16:a9:1d:9a:
         ec:1e:98:06:c4:01:9a:91:3d:46:d5:0e:f2:60:fc:23:7e:c2:
         d6:27:c5:c2:af:68:ec:1e:2d:d1:9e:bb:47:5b:75:f7:16:5d:
         b2:68:7f:67:5f:0f:c5:0f:3b:f9:8d:50:42:b8:e2:00:6f:85:
         fe:f9:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:05:11 2025 by rpki-client