Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U8MhXOfaydWDQtfW_sg_PQyfE-8.roa
File:                     U8MhXOfaydWDQtfW_sg_PQyfE-8.roa (raw, json)
Hash identifier:          VWxksRPzOSpDbsYuHhjoDuCj3akkQPwpakw8IQuX46c=
Subject key identifier:   53:C3:21:5C:E7:DA:C9:D5:83:42:D7:D6:FE:C8:3F:3D:0C:9F:13:EF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186BF6EE3AC6F7589EC3047D8076A2F0CB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U8MhXOfaydWDQtfW_sg_PQyfE-8.roa
Signing time:             Wed 08 Mar 2023 04:16:00 +0000
ROA not before:           Wed 08 Mar 2023 04:16:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bf:6e:e3:ac:6f:75:89:ec:30:47:d8:07:6a:2f:0c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  8 04:16:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53c3215ce7dac9d58342d7d6fec83f3d0c9f13ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:df:ca:c0:fd:99:21:0d:d5:ce:82:78:1b:20:
                    54:04:34:27:78:4e:a7:34:04:78:6b:0f:e9:a7:b1:
                    8d:b3:1e:d9:43:f5:2b:4c:29:75:cc:b8:cf:f5:a4:
                    99:2d:4e:28:ea:f8:0a:00:35:0e:ce:e9:40:4f:6b:
                    8c:4c:7c:6f:30:3f:8b:69:95:4f:77:4e:b2:57:a3:
                    dd:96:b5:b2:70:0d:d2:63:89:73:7b:44:90:81:70:
                    e9:0e:e1:19:b0:b7:d9:91:75:9f:b9:b0:8f:38:93:
                    af:a3:ac:9e:02:51:86:80:ad:b4:ac:ef:8d:e5:0f:
                    56:4d:9d:57:85:51:df:bb:bf:a8:67:80:de:28:a9:
                    17:64:54:fb:f3:33:61:c5:39:e4:5e:61:4f:38:0e:
                    36:52:76:7d:53:39:cc:9d:38:4a:b9:9f:09:8c:ee:
                    fc:56:c5:11:da:dc:4c:55:b1:38:79:cd:c5:42:ba:
                    01:e1:17:95:94:cc:2e:c6:04:e6:98:39:79:83:a6:
                    54:c4:2a:41:c5:8c:27:c8:2f:cb:8a:00:af:09:89:
                    b7:17:64:7e:d7:79:c4:87:dc:3f:8c:0c:d7:0a:f3:
                    bf:f0:80:32:b0:dd:01:a7:2a:41:17:3f:28:4c:05:
                    d4:6d:55:99:43:54:50:6f:f0:2e:c2:58:7a:28:c5:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C3:21:5C:E7:DA:C9:D5:83:42:D7:D6:FE:C8:3F:3D:0C:9F:13:EF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/U8MhXOfaydWDQtfW_sg_PQyfE-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:01:82:ec:ec:dc:f4:e6:6b:fc:35:e5:36:d4:00:26:5d:7d:
         f8:18:cd:0f:72:03:01:18:6a:02:3e:da:8d:cf:8f:86:ce:b4:
         c2:34:71:58:4a:98:8c:10:c0:75:d0:5f:65:18:01:ce:22:13:
         97:ff:36:63:b7:98:c0:43:d0:70:70:e9:4e:93:6b:a5:68:b8:
         d2:45:c4:af:45:8b:b1:82:06:c3:41:5d:d8:5c:ef:d3:bb:36:
         da:b5:38:ac:55:1b:ec:1e:ff:a1:30:46:fe:76:96:a1:a0:63:
         9d:bb:71:d1:ce:ae:96:1a:cf:13:ec:10:06:1d:a7:f2:82:eb:
         f3:92:43:32:a7:3a:84:e2:b6:8f:a1:f1:1e:cc:ae:3e:78:73:
         dc:5a:1f:e0:ff:79:81:41:e0:33:5d:be:03:6e:b3:4f:f1:91:
         f9:ec:05:c9:1c:72:5e:84:bc:fa:0c:45:a1:13:c9:34:8d:9a:
         93:4a:d0:95:43:f1:f7:12:82:cc:80:50:c6:3e:f9:48:8f:46:
         6d:5c:f0:85:b3:1a:5a:74:17:c3:4a:ad:84:a0:10:f6:6a:55:
         27:1f:c3:c6:4c:df:44:3c:ea:43:11:4d:4d:93:f0:a7:2b:93:
         14:f6:a6:37:a9:d1:17:7f:7c:e9:d9:ff:a4:2a:aa:7d:68:56:
         24:0b:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:40:49 2025 by rpki-client