Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzoeC5vkOvOXu_vwh16GI58hDFI.roa
File:                     NzoeC5vkOvOXu_vwh16GI58hDFI.roa (raw, json)
Hash identifier:          5rl521OLyYpN9TPQPsrsxJubIpseGzHcBSZPAXEqEsc=
Subject key identifier:   37:3A:1E:0B:9B:E4:3A:F3:97:BB:FB:F0:87:5E:86:23:9F:21:0C:52
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       76AE371E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzoeC5vkOvOXu_vwh16GI58hDFI.roa
Signing time:             Tue 29 Mar 2022 12:11:43 +0000
ROA not before:           Tue 29 Mar 2022 12:11:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991128862 (0x76ae371e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 29 12:11:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=373a1e0b9be43af397bbfbf0875e86239f210c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:3d:d7:52:e2:a5:9a:a8:9d:d6:38:03:0e:
                    67:a1:d7:65:be:1f:fc:c3:f0:17:1c:63:60:f5:4a:
                    5e:cd:bb:1a:b2:64:58:b8:fe:c0:4b:ef:b6:54:48:
                    41:2f:2e:6c:f8:b5:55:b5:c0:fb:e1:38:ba:2a:b7:
                    86:09:aa:32:e0:33:f3:9b:f2:ea:82:f5:56:ee:30:
                    73:31:97:9d:14:6d:c5:47:91:44:1d:f0:3e:e5:25:
                    80:b0:48:d9:d9:b7:5f:3e:de:01:a9:9d:bb:99:9f:
                    b9:10:3f:14:08:42:04:7d:40:91:8d:96:a1:80:1e:
                    d9:e5:29:f8:a0:9c:b7:2f:bc:05:2a:00:a3:cd:59:
                    20:63:c5:4a:e1:87:01:5c:8a:30:b0:4f:11:28:8b:
                    45:79:31:5c:b5:3d:b6:c7:e1:a8:1a:0a:e2:b9:05:
                    8d:b4:e2:e7:f6:14:e5:1f:05:d6:74:88:0c:e7:11:
                    94:74:b9:c2:c6:ad:bb:13:e5:04:a1:3c:ca:83:70:
                    30:2c:61:23:fc:3c:21:e7:45:e6:45:94:88:1a:6d:
                    11:fd:d9:d9:fd:31:fb:e5:d6:6c:48:41:50:8c:c5:
                    af:b8:c9:db:43:a0:40:10:b6:0b:32:ef:40:89:17:
                    cb:8a:09:29:64:a0:00:5c:81:83:a5:07:6d:41:36:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3A:1E:0B:9B:E4:3A:F3:97:BB:FB:F0:87:5E:86:23:9F:21:0C:52
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzoeC5vkOvOXu_vwh16GI58hDFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:ba:b4:31:93:bf:70:25:3b:76:24:3a:f1:38:54:b2:fe:0a:
         90:85:31:dd:09:bb:aa:a8:ea:21:91:74:8f:27:d9:c5:18:04:
         6b:68:28:d0:76:15:e1:7b:04:b8:63:b2:cd:9e:b7:10:85:22:
         db:e9:4c:3e:85:08:05:ae:af:32:ab:e3:1c:1a:58:c4:52:df:
         8d:bf:f7:18:0a:97:b4:79:97:45:92:d4:a0:90:76:91:9c:78:
         1a:41:7e:b0:41:0f:6e:09:9f:c2:7c:2d:e2:23:70:1c:16:5a:
         cb:24:be:d3:ce:1d:ae:a4:0d:51:05:0a:c0:64:ca:34:03:c4:
         16:16:97:b7:42:63:7e:a1:55:79:b5:45:cb:06:79:60:99:bd:
         67:66:5c:8f:1a:0d:08:97:c6:42:b1:de:40:ba:9c:b8:5c:58:
         39:fc:f4:8d:4b:81:42:16:51:65:38:a1:cd:9e:d9:33:85:86:
         43:30:6e:2a:92:8e:98:4c:dc:e5:b6:d5:40:84:2d:81:1d:e6:
         c2:ec:e7:08:46:84:ba:35:5a:33:26:48:ec:c2:71:27:a6:e1:
         37:e0:0d:6f:7a:9a:ad:e9:d3:92:c3:0c:63:4b:40:5e:ce:a3:
         a1:25:eb:b2:50:70:92:47:13:4a:53:5e:66:0d:8e:ae:94:d7:
         ad:8d:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:05:26 2025 by rpki-client