Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwJiTbbGJoegtU1iMLF5xsIx4Ns.roa
File:                     UwJiTbbGJoegtU1iMLF5xsIx4Ns.roa (raw, json)
Hash identifier:          m1ogd7UWtN4Ik2sTazV5vW1ke+qckBnX7Hojs5qa70M=
Subject key identifier:   53:02:62:4D:B6:C6:26:87:A0:B5:4D:62:30:B1:79:C6:C2:31:E0:DB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0183C61D44CCB90F9363E2104ADB251CFBB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwJiTbbGJoegtU1iMLF5xsIx4Ns.roa
Signing time:             Tue 11 Oct 2022 08:15:50 +0000
ROA not before:           Tue 11 Oct 2022 08:15:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c6:1d:44:cc:b9:0f:93:63:e2:10:4a:db:25:1c:fb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Oct 11 08:15:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5302624db6c62687a0b54d6230b179c6c231e0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:6e:e1:d9:57:ef:64:c9:f6:8a:44:bc:d4:
                    09:e2:bf:55:4b:55:62:f9:40:97:61:64:9e:bd:1d:
                    27:9f:9b:1e:23:3e:84:3b:a0:db:c0:72:a0:18:fa:
                    2c:8e:21:75:5d:4b:a1:88:ee:bd:86:69:a0:f9:76:
                    08:3d:35:a1:4a:26:8d:0d:1b:cb:c5:b7:2b:47:4b:
                    8d:b2:50:a3:98:8b:3b:c8:b4:b7:92:fc:4c:22:00:
                    03:e8:b9:d5:0c:5e:8f:aa:96:03:7f:e6:d3:60:4b:
                    e1:a5:29:c3:b7:1b:1b:ea:7b:55:6c:93:58:5e:df:
                    70:9e:25:eb:3c:48:a5:f6:e2:5a:3b:bf:85:90:60:
                    c9:f9:a8:b5:4d:04:e0:e2:1a:81:04:ef:48:5d:9d:
                    0d:71:1f:3e:4a:3b:33:7d:46:f6:71:42:aa:bd:2c:
                    ec:10:99:d3:1a:93:68:be:3c:e6:47:6e:88:57:44:
                    ed:1b:c5:69:3f:b2:eb:dd:7d:3d:ae:5c:de:11:ce:
                    7e:c8:67:84:1b:35:94:2e:39:ff:bf:13:8d:38:5f:
                    a7:90:06:16:12:3d:79:a8:07:d5:c6:6c:4d:b5:38:
                    29:e1:9c:ef:a1:14:93:af:1b:08:2a:67:9c:4c:13:
                    3c:c8:d6:40:76:49:cc:04:e1:4e:58:03:4f:3b:eb:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:02:62:4D:B6:C6:26:87:A0:B5:4D:62:30:B1:79:C6:C2:31:E0:DB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UwJiTbbGJoegtU1iMLF5xsIx4Ns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:49:2e:1a:e7:5b:a2:e7:df:0e:26:e0:1f:c0:7d:0f:30:94:
         cc:c5:50:e5:20:49:98:fd:c1:e9:c7:67:26:7f:a7:6e:a2:99:
         82:ec:0e:d0:19:69:7a:e0:66:d8:d0:7c:46:4f:42:ff:b9:fa:
         55:bb:7f:08:fa:6a:8e:d8:45:4f:59:1b:47:a4:17:cc:1f:5d:
         80:ac:d2:71:1e:d1:32:83:04:28:c3:ff:17:98:b5:52:21:45:
         17:a7:b9:b7:58:03:c2:e0:92:8b:a5:e8:6e:7a:b1:ba:08:02:
         e4:12:23:1b:6a:71:a4:e7:77:bb:31:40:39:b5:af:00:2e:38:
         34:dd:af:d0:11:64:61:80:55:8d:66:d1:d9:19:53:af:41:87:
         20:e8:b2:ff:d6:ea:26:25:b7:b6:ca:6f:0c:63:52:1b:14:6a:
         49:fb:ac:4d:d4:01:38:85:82:95:e3:42:01:64:46:c2:28:75:
         0c:49:df:b2:69:6a:1b:a6:db:4b:f8:ec:d3:23:80:67:9b:32:
         13:47:02:c5:71:fc:8d:a0:fd:41:4a:a5:61:80:ac:3e:2f:ab:
         43:9b:e4:8b:bf:46:a0:f4:08:ec:21:71:d7:c3:bc:00:41:a4:
         ab:6a:fd:80:4d:6a:e8:62:1f:ab:a3:4b:20:e6:b3:f0:a5:9c:
         4e:d9:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:29:12 2025 by rpki-client