Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MWCcspLyElnDyPK15mw6VhjsfpY.roa
File:                     MWCcspLyElnDyPK15mw6VhjsfpY.roa (raw, json)
Hash identifier:          B1Vggq38aij/GN2nQRVJ1uCN4b8ui7AMqaSU8glwl9U=
Subject key identifier:   31:60:9C:B2:92:F2:12:59:C3:C8:F2:B5:E6:6C:3A:56:18:EC:7E:96
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189A8DA52F51D9AC7A68DFE315637428A71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MWCcspLyElnDyPK15mw6VhjsfpY.roa
Signing time:             Sun 30 Jul 2023 22:10:27 +0000
ROA not before:           Sun 30 Jul 2023 22:10:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:a8:da:52:f5:1d:9a:c7:a6:8d:fe:31:56:37:42:8a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 30 22:10:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=31609cb292f21259c3c8f2b5e66c3a5618ec7e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:c1:e9:6c:09:ef:d6:21:8c:5d:00:4a:1b:
                    ef:5d:ba:50:cb:58:9c:b0:29:e1:a3:ca:3f:86:df:
                    be:09:ba:16:98:0e:47:f4:c5:e1:72:56:8a:dd:b6:
                    4b:dc:94:1f:cc:a8:16:e3:ab:a5:53:85:e3:64:31:
                    33:72:03:e8:cc:da:6c:fc:05:08:b9:30:08:1a:45:
                    c5:36:54:95:5d:0c:61:9d:57:90:73:5b:d5:f2:d8:
                    c4:77:aa:8e:69:ce:04:58:b9:1f:6d:77:5c:84:2b:
                    cf:cd:62:26:a6:23:cc:d5:1c:8c:cc:ae:0c:13:67:
                    04:17:7e:03:3d:3d:f2:f8:35:05:9c:cf:ff:76:34:
                    2b:92:f3:94:78:22:57:4a:f1:97:09:7e:86:ea:e1:
                    9d:6f:33:16:db:ef:00:82:59:b1:b2:63:d3:14:ee:
                    f7:b6:dd:4a:f0:76:f9:88:b8:5b:cd:00:d0:3d:c0:
                    e6:1c:6a:b9:5f:3f:84:83:3e:7d:93:fc:63:52:5c:
                    fc:eb:c4:e5:65:52:6e:d9:7f:2d:1a:d5:05:dc:12:
                    0a:75:a6:d2:29:8e:e4:b7:24:26:6d:34:df:8d:4f:
                    2a:d5:9c:db:3d:99:6a:83:83:6b:2c:a2:d6:8e:39:
                    d9:09:7d:62:2f:7e:10:01:d6:a8:ee:5d:8f:c0:c1:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:60:9C:B2:92:F2:12:59:C3:C8:F2:B5:E6:6C:3A:56:18:EC:7E:96
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/MWCcspLyElnDyPK15mw6VhjsfpY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:d5:aa:88:31:6b:bd:4a:7f:6a:2b:cf:d4:c8:3b:4a:71:de:
         77:a3:5c:78:ad:a1:e7:93:d5:10:ef:a9:75:b0:91:75:49:6b:
         91:58:5a:34:ef:c8:34:cc:ba:d0:a0:b1:7b:c9:72:4b:a1:70:
         fe:2c:e5:54:a2:4a:0f:5f:13:8a:54:b4:53:0c:21:62:97:21:
         a7:13:25:89:a1:7d:66:25:67:b2:d6:60:55:a8:f4:a6:2c:f9:
         b9:14:46:2b:68:d6:aa:be:6c:02:e8:83:16:43:78:53:a1:c9:
         7e:81:f2:bf:0b:40:92:a2:89:80:c4:48:74:cb:da:c3:d3:59:
         4e:7f:d0:dc:dc:fc:26:af:e3:f1:e9:58:68:05:4b:fa:65:25:
         5f:c2:5d:01:d8:80:32:88:dd:f9:15:4a:c3:15:62:96:4e:21:
         01:52:d5:c3:da:3f:0a:f0:ed:fd:35:da:20:48:5b:c2:ac:a5:
         03:75:66:d7:8b:3d:26:d1:9e:1f:f2:3f:a7:d7:51:71:2c:cb:
         1f:54:6c:21:57:8f:ad:27:3b:a5:7c:20:88:19:e5:53:ed:7b:
         4f:03:07:59:20:94:0c:1a:5f:57:e1:51:9e:66:90:0d:3c:5b:
         29:bd:48:21:2f:81:dd:dc:5b:1a:34:a0:e3:6e:c3:56:5b:61:
         29:5c:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:30:57 2025 by rpki-client