Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJQwrP-VE5NFERvceCMmsnnbVcE.roa
File:                     TJQwrP-VE5NFERvceCMmsnnbVcE.roa (raw, json)
Hash identifier:          S3zOla+j3G9e5nS1rqDkl1GCcyJJDHTS2jzw48mA2Uc=
Subject key identifier:   4C:94:30:AC:FF:95:13:93:45:11:1B:DC:78:23:26:B2:79:DB:55:C1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188D2EA325F791D7C8595F04DB53F0A4536
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJQwrP-VE5NFERvceCMmsnnbVcE.roa
Signing time:             Mon 19 Jun 2023 09:09:03 +0000
ROA not before:           Mon 19 Jun 2023 09:09:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d2:ea:32:5f:79:1d:7c:85:95:f0:4d:b5:3f:0a:45:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 19 09:09:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c9430acff95139345111bdc782326b279db55c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:85:16:32:9e:16:ca:bc:cb:1a:5f:99:f7:
                    2e:e5:10:94:ee:a7:01:52:bc:45:7c:9a:f1:10:9c:
                    a9:dc:94:fe:61:7d:cf:0b:09:71:72:73:b6:35:52:
                    2a:f5:73:a6:59:73:e3:c2:15:71:3a:18:b0:cf:a7:
                    66:97:d7:7b:56:8a:05:dd:73:86:eb:a4:af:ad:92:
                    aa:52:0e:94:d6:f3:26:07:44:1e:99:f0:56:e2:99:
                    07:00:ee:ef:ef:ff:44:0a:01:d5:30:78:2c:de:a3:
                    fc:85:75:96:0b:ad:05:7e:81:d0:2d:69:86:f1:44:
                    1c:0e:df:d6:ce:c8:e7:2d:c4:16:8d:9c:24:e0:83:
                    59:6b:16:54:bf:8c:f2:35:8b:6b:f0:f1:d3:d5:6b:
                    fb:7c:ee:9a:0c:c0:c7:e2:24:21:a4:0d:a1:24:43:
                    d0:50:a3:f1:1f:c8:d1:c5:2a:89:3b:26:51:e0:09:
                    4f:db:89:d5:a7:32:12:1d:c5:ca:3c:88:dc:fc:95:
                    94:50:9f:ad:41:10:28:84:dd:47:24:c4:67:29:0a:
                    c9:35:ce:da:6d:b2:e9:ba:1d:3f:f2:4e:b0:3a:3d:
                    5e:ca:7f:df:2a:8d:9a:24:81:b7:4d:06:bb:bd:52:
                    29:7c:77:76:73:3c:2b:8b:9f:43:df:f2:3f:f1:74:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:94:30:AC:FF:95:13:93:45:11:1B:DC:78:23:26:B2:79:DB:55:C1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TJQwrP-VE5NFERvceCMmsnnbVcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:e0:28:4d:60:ce:7e:32:47:5a:4e:03:ff:d2:a1:55:69:b3:
         36:95:97:00:b5:32:43:dc:ac:0d:65:a2:75:cb:6b:27:ef:58:
         ba:45:2c:ba:23:24:db:82:f1:1f:80:6c:a4:53:c8:81:0d:6b:
         8c:0f:98:32:92:a6:15:3a:ba:53:f7:ba:93:c2:d9:68:35:11:
         e6:d7:09:b4:73:4a:d6:bc:f5:d1:67:a6:e1:9e:f7:0d:0d:b2:
         f9:2c:d0:71:15:73:37:63:dd:c3:ac:98:f0:7f:5e:07:c9:a8:
         9a:fc:62:30:93:07:96:cb:a8:a8:15:55:06:61:d4:a2:ac:37:
         ea:42:d6:af:f0:d4:34:08:31:ef:05:94:65:c9:da:92:e0:e5:
         58:5f:0b:d7:a6:b5:6b:b4:10:ca:ae:4c:5c:2f:47:ca:00:f5:
         7b:55:2f:0c:3f:56:6d:b1:76:06:98:e4:5a:66:0b:24:72:a6:
         1c:4b:b7:d2:22:84:f6:06:8a:c9:f5:1c:05:a8:7c:7d:e0:ca:
         97:a8:d6:b8:6d:17:05:8b:49:76:25:43:e1:07:40:ce:92:82:
         95:05:01:8a:88:86:18:16:82:c2:54:d2:f0:89:63:77:75:08:
         79:fa:f4:46:61:6a:b6:be:35:ce:87:13:d6:6f:db:f2:c2:da:
         22:cc:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:12:26 2025 by rpki-client