Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T2wN3nW13-xntLXaNFN59V6LbCs.roa
File:                     T2wN3nW13-xntLXaNFN59V6LbCs.roa (raw, json)
Hash identifier:          4OWuzYxnn+U5djOqYgCGUAZr79QWJr31myo2/wtjtCQ=
Subject key identifier:   4F:6C:0D:DE:75:B5:DF:EC:67:B4:B5:DA:34:53:79:F5:5E:8B:6C:2B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0183FE87BCA7295079B809E5774A5E4C0375
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T2wN3nW13-xntLXaNFN59V6LbCs.roa
Signing time:             Sat 22 Oct 2022 07:10:52 +0000
ROA not before:           Sat 22 Oct 2022 07:10:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fe:87:bc:a7:29:50:79:b8:09:e5:77:4a:5e:4c:03:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Oct 22 07:10:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f6c0dde75b5dfec67b4b5da345379f55e8b6c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:46:40:24:15:15:2f:88:4a:2e:22:fd:49:
                    e2:3c:a7:99:f9:8b:43:06:9d:aa:26:5f:16:5f:6e:
                    ae:e0:14:f9:fa:6a:6e:29:08:86:f2:e5:b5:a6:02:
                    28:3c:48:2f:79:f9:7f:36:3a:13:0b:dd:72:4b:cc:
                    61:b1:8e:7a:1c:e2:25:25:16:bb:57:72:20:cf:d2:
                    72:03:09:4f:d3:46:58:53:26:b8:bd:dd:73:27:45:
                    93:dc:19:06:53:9b:8a:b5:ee:0a:9c:42:28:0b:4c:
                    6c:72:49:d2:1e:04:ad:3d:ca:07:be:0e:f9:e9:27:
                    dc:bb:be:3c:13:07:8b:a1:48:f5:7b:53:fa:7d:9a:
                    54:dc:62:57:90:2d:1b:a4:92:91:ca:24:fa:27:e6:
                    dd:ff:5b:aa:21:a2:27:cf:da:dc:8e:a4:a6:72:ef:
                    bb:18:8e:81:47:d3:b6:e1:b0:d8:f1:d1:4a:f5:a7:
                    50:4b:ce:33:a3:6e:7f:16:80:3d:f2:09:e7:d1:6a:
                    ff:54:9a:ab:3d:d3:83:3f:98:11:b6:ce:ca:71:5a:
                    63:e2:8b:3c:fa:95:46:d6:7a:c4:08:dd:e0:05:44:
                    ab:80:19:33:a4:5f:87:e5:6d:98:45:5c:a6:d1:59:
                    ca:f3:3e:04:c1:08:1c:f4:34:74:c6:ed:3b:fe:70:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:0D:DE:75:B5:DF:EC:67:B4:B5:DA:34:53:79:F5:5E:8B:6C:2B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T2wN3nW13-xntLXaNFN59V6LbCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:4d:92:26:f9:ea:f7:19:e6:9f:39:9f:e8:e0:cd:83:e3:
         47:53:76:48:d6:56:2d:d4:a6:36:6b:fe:8d:39:a0:25:77:3a:
         cd:1f:d2:e0:de:01:fa:05:4f:9a:13:5c:14:27:fd:4c:32:bb:
         08:0a:f0:52:18:ed:eb:0b:24:10:a0:14:dd:8e:22:9b:df:68:
         af:1c:9c:d4:4a:72:69:8e:60:cb:59:e2:79:68:c5:f2:10:1d:
         bb:4e:e1:5b:8a:dd:21:ce:e9:3e:5c:ae:06:1b:34:f6:91:35:
         3d:52:8d:17:89:a0:3a:3d:d5:65:6d:0a:57:9e:9b:df:26:7b:
         0c:7b:e3:e5:14:32:65:ec:73:bf:5b:6f:4d:ee:06:65:50:9f:
         da:b7:be:42:b6:9d:3b:67:09:29:9d:fc:61:b0:b8:a3:bb:d0:
         74:e2:69:de:c0:97:30:34:1c:f8:f6:91:f9:e2:4f:5e:4d:ae:
         af:5e:47:40:38:a6:1f:f0:d1:e9:c2:f7:60:80:04:95:19:df:
         e6:bb:a4:e3:d5:64:32:90:c6:e7:6f:5f:7c:23:21:07:4d:eb:
         af:10:4e:c8:d8:af:7a:f9:c1:e0:34:fb:fe:28:dc:7e:60:3e:
         7a:3a:1d:30:f6:a2:6a:01:b6:42:42:8b:1f:18:b4:ff:04:6b:
         a7:2c:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:09:47 2025 by rpki-client