Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuhFtE34CFDc_qfrn-8BgAnYhgs.roa
File:                     VuhFtE34CFDc_qfrn-8BgAnYhgs.roa (raw, json)
Hash identifier:          nH6l8zZ2YYjrQSOPJ3RJWwFcjMqo9czzrGGjXMeHdsg=
Subject key identifier:   56:E8:45:B4:4D:F8:08:50:DC:FE:A7:EB:9F:EF:01:80:09:D8:86:0B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0184D3CC422823875435CEB51E1D5FCF3D6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuhFtE34CFDc_qfrn-8BgAnYhgs.roa
Signing time:             Fri 02 Dec 2022 17:04:49 +0000
ROA not before:           Fri 02 Dec 2022 17:04:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:184:d3cc:1ae8/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d3:cc:42:28:23:87:54:35:ce:b5:1e:1d:5f:cf:3d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec  2 17:04:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56e845b44df80850dcfea7eb9fef018009d8860b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:82:c7:e4:1a:b4:65:8e:37:a0:03:2e:96:fc:
                    2e:51:b4:2b:e6:57:ad:f0:10:90:bb:a4:c6:98:de:
                    4b:49:41:e3:1d:06:75:13:d5:5d:f3:eb:44:0b:95:
                    e5:6c:ea:08:ab:d2:30:ff:8a:50:70:eb:05:14:17:
                    3a:8f:a3:e2:dd:18:fc:4b:c9:8a:5d:a6:04:e5:17:
                    8e:6c:d7:26:14:de:db:e1:12:6a:85:7d:11:dc:e2:
                    d5:5c:07:2f:8d:63:60:d0:7d:79:a9:6e:19:05:86:
                    5d:01:b5:f9:e1:d5:70:64:b8:0a:32:2d:39:f9:3e:
                    0c:68:7a:9c:cc:e0:24:75:8b:2e:81:69:d1:eb:33:
                    b8:19:b9:a5:f9:5c:f2:91:2a:c3:5d:15:85:32:bd:
                    89:b5:d1:ce:f0:16:1f:1b:92:a8:e8:9b:f1:1f:27:
                    4c:88:38:6d:e6:a2:52:03:4b:0e:ef:eb:e8:d2:64:
                    4f:a9:b3:b4:e8:28:bf:89:b4:bc:b5:f3:38:8a:89:
                    31:7e:f3:eb:b2:0a:a0:fb:b1:90:76:bd:12:2c:55:
                    82:3c:76:7e:42:4c:7b:54:22:17:de:06:37:b4:97:
                    4f:da:75:45:0c:c7:9f:d3:7a:f8:67:3a:55:2a:a0:
                    e8:cc:e2:da:10:9f:f5:88:df:b4:60:25:d8:eb:08:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E8:45:B4:4D:F8:08:50:DC:FE:A7:EB:9F:EF:01:80:09:D8:86:0B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuhFtE34CFDc_qfrn-8BgAnYhgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:e4:ff:6c:00:a2:29:99:19:43:2f:b7:77:17:8d:5e:f7:58:
         0d:ba:92:e7:b2:94:22:2d:52:4a:8b:bb:8a:b6:1f:9b:09:50:
         01:cb:78:09:e4:b5:6c:80:c8:a9:a0:4d:18:0e:c7:88:6e:ae:
         3e:b6:1d:1d:6b:b2:e6:66:93:cb:4c:cf:1a:ca:61:99:a9:7e:
         c8:16:08:6f:de:87:b2:d9:90:89:fe:c8:d9:4e:3d:74:ca:da:
         d7:0e:17:8f:1e:fd:28:87:c9:09:c0:72:96:85:e1:05:f0:f1:
         f5:55:2f:eb:e5:aa:e2:61:42:d3:3f:ba:48:30:69:8c:91:7f:
         5a:47:23:e7:15:f3:c1:74:3c:21:f4:e1:eb:7a:20:de:30:3f:
         b8:93:0f:1f:04:03:a6:dc:7a:6a:c1:cb:fc:f6:f9:fc:4e:89:
         59:85:fc:f4:d0:40:1f:ab:62:cd:d5:ad:fc:a0:6d:d5:5a:b3:
         d4:dd:6d:f5:92:04:de:45:81:1a:48:52:22:05:29:fb:00:2b:
         3b:41:7f:b4:c0:1f:c8:fc:af:58:eb:0b:06:b3:fc:35:f7:b7:
         9c:37:c6:17:48:8d:5e:60:58:40:9e:f0:95:9d:c3:9b:69:f5:
         7d:10:b9:13:6f:38:11:ed:e0:4c:da:39:ea:13:af:ea:0f:0b:
         b0:01:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:09:51 2025 by rpki-client