Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbioVge10GaTpWA4QkHsX8rCH70.roa
File:                     QbioVge10GaTpWA4QkHsX8rCH70.roa (raw, json)
Hash identifier:          QG7I3npLRmez7YjHz/2QCI73yJBv3VM7FTUX02tKOLE=
Subject key identifier:   41:B8:A8:56:07:B5:D0:66:93:A5:60:38:42:41:EC:5F:CA:C2:1F:BD
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       778557A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbioVge10GaTpWA4QkHsX8rCH70.roa
Signing time:             Fri 01 Apr 2022 14:10:04 +0000
ROA not before:           Fri 01 Apr 2022 14:10:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005227431 (0x778557a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  1 14:10:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=41b8a85607b5d06693a560384241ec5fcac21fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:11:e4:79:bc:08:a6:52:28:7e:3c:57:bc:
                    64:46:a7:27:cc:78:2a:c1:57:18:7d:ca:3b:06:d1:
                    9b:d8:3e:71:08:47:90:dc:ad:62:cb:07:d3:33:be:
                    66:e3:b8:ac:49:32:e7:e4:c3:36:c0:2b:6f:61:4a:
                    9e:5b:a0:02:e6:c1:1a:d5:24:78:1e:35:da:00:c0:
                    9b:de:0f:b2:92:fb:a1:ac:ff:80:ac:23:56:f6:eb:
                    6f:ef:01:12:f2:27:2f:c4:bb:78:3a:fa:47:73:ef:
                    5a:01:95:a7:fb:22:09:fb:52:db:6f:12:59:d8:ae:
                    c8:e4:ee:97:5d:83:1a:96:78:f3:20:7e:51:eb:28:
                    03:7a:d5:1f:3b:28:95:5c:fa:f7:20:97:a9:aa:c1:
                    fb:8f:95:11:a5:f9:67:a2:4c:29:8e:93:e3:2f:48:
                    c4:fb:4b:8c:25:cb:a1:d6:a8:43:fc:45:3f:99:c3:
                    f4:fd:f7:2e:7e:dc:db:85:c1:c9:0f:ff:51:11:13:
                    97:52:5f:42:39:1c:7e:72:df:b5:8e:f7:13:eb:de:
                    5b:16:fa:08:6e:76:c5:03:b8:82:1f:c9:6e:4d:9c:
                    f6:25:e4:a1:f2:d3:05:7c:d8:6a:25:4f:2b:f0:1c:
                    6c:03:c7:a3:53:23:24:cb:af:dc:1b:eb:b5:87:f5:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:A8:56:07:B5:D0:66:93:A5:60:38:42:41:EC:5F:CA:C2:1F:BD
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QbioVge10GaTpWA4QkHsX8rCH70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:06:a4:08:2f:25:89:3f:da:12:df:d4:38:f3:7b:89:5c:
         1d:84:8e:e8:fb:88:6d:aa:73:7c:ea:35:8c:12:df:a9:37:87:
         22:20:e1:7e:28:e7:2d:ed:32:ec:ba:de:63:0b:ad:45:34:62:
         39:7e:0f:a8:19:06:9b:0b:8c:7d:30:a8:70:0a:2f:74:38:7f:
         3e:18:d9:6a:d1:3f:1e:af:4f:b4:b9:4e:ac:11:ed:db:b3:a0:
         88:ca:bf:0a:f5:cf:ec:10:d6:0f:ba:bb:71:a4:98:c5:11:4f:
         e5:77:22:2d:70:5d:25:a6:42:49:7f:76:4b:44:8e:ea:a1:c7:
         c4:c5:22:0b:37:8f:f7:5c:7a:44:23:04:a4:e2:04:d3:ac:ea:
         3f:81:ab:19:1a:d5:c5:e9:ce:de:24:26:70:e0:1f:3b:ce:a2:
         1e:18:3e:46:a2:7f:0c:47:4f:c2:f1:ea:e1:36:93:9c:95:bb:
         30:49:9c:22:fa:8e:26:15:7a:9c:54:63:17:b3:3d:12:cc:28:
         f6:ed:19:67:90:33:a9:d6:1a:74:a7:3b:5f:58:be:9c:ba:33:
         b5:fd:09:3a:2c:33:57:bd:5e:c1:94:b0:ac:a3:54:57:c4:99:
         5b:8f:89:dd:61:70:43:9b:10:6a:c7:2a:ce:38:61:c3:8c:f1:
         ad:3b:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:04:22 2025 by rpki-client