Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_S3chkgHrN7BbSjAhP_3AAjIWY.roa
File:                     S_S3chkgHrN7BbSjAhP_3AAjIWY.roa (raw, json)
Hash identifier:          /GUjaV2VmfHSI0ifUh/HGbxPB37Jykpm5LkQeW38zUc=
Subject key identifier:   4B:F4:B7:72:19:20:1E:B3:7B:05:B4:A3:02:13:FF:DC:00:23:21:66
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018238B85F497C54FDA3039ECA4CC195C17B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_S3chkgHrN7BbSjAhP_3AAjIWY.roa
Signing time:             Tue 26 Jul 2022 04:16:23 +0000
ROA not before:           Tue 26 Jul 2022 04:16:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:38:b8:5f:49:7c:54:fd:a3:03:9e:ca:4c:c1:95:c1:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 26 04:16:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4bf4b77219201eb37b05b4a30213ffdc00232166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:47:38:d1:34:81:45:cb:56:67:1f:d7:1d:0e:
                    c7:56:35:63:cb:d7:99:1b:3d:3d:42:d7:b2:44:6c:
                    74:c3:dd:86:73:39:b4:79:cc:78:c9:03:df:7e:88:
                    b5:fd:2d:21:e3:b3:91:99:c9:6b:19:63:05:be:e7:
                    43:81:88:db:47:59:8a:41:19:e6:89:40:0d:44:ff:
                    09:23:8f:a5:d7:89:b8:d5:39:d8:53:e3:5d:ad:75:
                    18:f4:e0:d6:e6:24:f7:33:89:b0:7f:81:40:55:73:
                    24:fc:d3:fe:d5:2f:c2:be:da:2d:50:ac:14:0c:02:
                    08:fe:9e:06:f9:25:24:46:7b:19:f0:fe:98:4f:d7:
                    a7:af:6c:05:01:4f:3b:70:3c:2c:1d:c9:3b:5a:a9:
                    42:2d:71:39:a2:c5:69:62:b3:2d:48:28:e1:39:b8:
                    32:47:09:ea:f2:46:93:7d:7d:48:ec:e8:2e:30:03:
                    b0:44:c7:d6:84:4b:45:8a:e9:bd:b1:90:d2:f1:c1:
                    cc:42:fb:14:ea:e6:3d:f5:52:ca:0a:f0:53:c9:87:
                    03:f2:91:49:86:1b:c0:9f:01:34:3d:3f:c8:99:bd:
                    c7:dd:e1:56:a8:c7:7b:dc:8a:d1:11:df:45:d5:e4:
                    e0:08:d5:bd:67:09:70:d1:64:00:df:3f:b6:cc:ce:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F4:B7:72:19:20:1E:B3:7B:05:B4:A3:02:13:FF:DC:00:23:21:66
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/S_S3chkgHrN7BbSjAhP_3AAjIWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:d1:90:a3:5b:ab:4b:e3:b0:cb:07:ad:2e:90:ec:49:0a:e4:
         36:1d:0c:e0:cf:c7:de:30:44:88:6c:c4:63:34:f4:c6:30:fd:
         bd:8b:8d:2f:49:cd:57:50:38:fa:77:6d:91:ad:6f:66:b0:31:
         2a:66:d4:77:21:15:40:29:0d:f4:e2:1e:38:7e:22:f0:3e:50:
         65:9b:63:07:46:52:1a:9f:3d:7e:3e:e1:a7:61:41:47:f0:ad:
         fd:f8:10:e9:e3:5e:f5:6c:49:1f:c0:68:97:2e:22:00:1e:0f:
         10:fb:39:79:83:0a:f8:75:3b:e5:48:d7:87:79:ab:13:4c:c7:
         1e:18:a4:4b:26:95:10:14:81:01:e4:e0:a1:61:ad:ca:23:1a:
         6c:98:f4:af:0b:44:84:9f:26:0a:ec:6f:42:c0:56:8a:f2:81:
         e5:74:03:f6:e4:f9:95:23:c8:ed:ff:a6:5b:3c:fd:ee:6d:f1:
         3e:fa:97:ee:2d:b7:47:88:0a:a4:b5:d9:03:66:8a:ba:63:59:
         e8:c9:8f:6f:29:8d:be:a0:ed:63:63:c7:4f:6a:44:c0:55:d1:
         bf:6b:83:0a:42:ce:3f:0d:ed:82:3e:fb:50:24:83:0f:26:f3:
         77:3b:22:a2:3d:10:53:90:14:1f:21:d7:ba:3b:d8:ab:ff:37:
         f1:df:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:02 2025 by rpki-client