Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkMxHurdt2KCLHKd5o8gE5_0U6Y.roa
File:                     WkMxHurdt2KCLHKd5o8gE5_0U6Y.roa (raw, json)
Hash identifier:          9vxl3Phb4/VJZqvqOWvhEOEk2nAABAzkXSSoJ3Z/8lI=
Subject key identifier:   5A:43:31:1E:EA:DD:B7:62:82:2C:72:9D:E6:8F:20:13:9F:F4:53:A6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018662B903A4F3B0CE4846B42F0B3D6DA98C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkMxHurdt2KCLHKd5o8gE5_0U6Y.roa
Signing time:             Sat 18 Feb 2023 04:12:17 +0000
ROA not before:           Sat 18 Feb 2023 04:12:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:62:b9:03:a4:f3:b0:ce:48:46:b4:2f:0b:3d:6d:a9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 18 04:12:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a43311eeaddb762822c729de68f20139ff453a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:b6:6c:41:92:a4:af:07:19:d1:5d:45:6e:
                    f8:a4:61:72:51:d3:43:a5:3f:27:0c:9d:36:61:a3:
                    e8:e4:1c:28:fc:9f:27:18:6c:c6:ed:c2:8c:1f:d0:
                    23:b6:ce:ed:8e:8f:d4:e5:da:98:82:ab:f7:9c:98:
                    33:18:d4:93:86:03:ef:af:bc:ba:a1:aa:92:95:98:
                    29:ec:f2:27:5a:42:3b:c7:21:46:70:59:02:5d:79:
                    43:e9:0c:fc:74:24:38:23:0d:56:03:04:f5:40:af:
                    fd:a8:34:4d:da:f4:a7:97:d1:31:a0:3a:d7:a3:9c:
                    8b:a2:f9:2e:55:ba:5f:ef:38:17:51:c8:7e:7e:c1:
                    37:31:c0:8c:ad:2e:e1:6e:45:0f:67:83:b3:4c:dc:
                    39:6e:84:d6:6b:e5:84:e0:96:5a:83:3d:9a:4a:be:
                    23:fb:0b:6b:81:26:18:65:a9:2a:13:f3:b3:80:3f:
                    c0:14:cd:69:c6:b9:6b:ca:ec:a0:28:1e:f2:57:37:
                    27:b2:7e:5c:65:78:d5:61:23:c2:97:4f:48:42:b4:
                    d6:b2:a2:45:51:74:75:28:24:88:fa:62:fe:d3:36:
                    55:4d:0c:93:3b:b7:c3:9d:a4:2f:36:70:b0:43:f4:
                    96:0f:1c:c2:dd:cf:db:c6:85:8c:19:b3:60:6f:8b:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:43:31:1E:EA:DD:B7:62:82:2C:72:9D:E6:8F:20:13:9F:F4:53:A6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/WkMxHurdt2KCLHKd5o8gE5_0U6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:8e:d8:47:de:d4:06:3e:6c:c7:0c:32:94:e4:f7:35:7b:
         52:03:0b:3d:8c:75:4b:76:a4:db:71:81:80:9d:1a:c9:b3:0b:
         85:15:75:a6:5f:56:38:57:f2:e5:c1:05:54:ff:ee:77:b5:39:
         05:ff:13:9d:79:d2:6b:f9:aa:d4:dd:83:cc:f9:f5:c2:80:e5:
         ab:f6:5b:56:bc:9a:ef:5b:a8:f0:b9:7e:42:7c:4e:e5:bf:7b:
         c5:03:48:76:92:04:2a:37:09:eb:89:42:7a:e1:c2:3e:6e:a7:
         bb:76:01:9a:05:1e:39:5c:84:27:08:c1:a5:cd:3d:35:62:5f:
         d1:a6:6d:02:fa:95:f8:fb:c4:cf:0e:9e:42:d9:f0:07:74:9c:
         f0:c3:52:c8:d6:c5:b1:67:e5:b0:54:35:b8:22:9f:19:6c:43:
         42:2d:3c:fa:7a:25:39:08:5b:ae:3c:1c:f3:d4:e5:12:cf:69:
         4b:b8:e2:58:1b:01:9b:f8:81:f2:0b:15:4a:51:fb:71:73:50:
         1a:21:90:61:3e:f4:64:dc:71:88:3c:13:a1:a6:50:c2:ee:28:
         db:85:99:2f:08:79:b3:e2:53:61:5b:6d:ac:6a:56:42:8f:7b:
         b1:cc:52:7a:ad:9e:bc:72:bc:0a:84:27:23:fd:59:b6:45:c4:
         25:a8:3c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:12:48 2025 by rpki-client