Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4NvLhHySsjngJPLAixWxmkxxCY.roa
File:                     Y4NvLhHySsjngJPLAixWxmkxxCY.roa (raw, json)
Hash identifier:          vUnh2hOjELiZynudNpxdzcgTFm5fRjw+UlmjAKOkPjw=
Subject key identifier:   63:83:6F:2E:11:F2:4A:C8:E7:80:93:CB:02:2C:56:C6:69:31:C4:26
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       881BA4D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4NvLhHySsjngJPLAixWxmkxxCY.roa
Signing time:             Sun 29 May 2022 06:11:13 +0000
ROA not before:           Sun 29 May 2022 06:11:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
                          2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283513046 (0x881ba4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 29 06:11:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63836f2e11f24ac8e78093cb022c56c66931c426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:1f:41:f7:16:9f:4c:f6:59:69:e5:43:fa:
                    14:48:00:7c:d2:c7:bb:14:83:e5:26:c1:ca:55:84:
                    36:5d:b1:f7:95:33:b2:d1:6c:fb:79:76:4e:ad:44:
                    3f:95:b2:db:f2:c0:3f:b2:97:fa:1a:1a:7c:ca:d5:
                    9c:47:16:8b:38:44:e1:25:ec:39:b6:58:d1:79:f9:
                    8d:9d:a9:6f:60:16:86:40:b1:1e:96:b3:72:4f:a3:
                    70:cc:5b:a0:ec:8f:60:63:c1:0f:f5:f0:bf:8b:5f:
                    d4:8c:85:13:33:a3:3f:d6:52:38:8b:39:51:56:fe:
                    45:a8:e6:24:e7:ee:23:4b:dc:02:92:7f:e7:7e:73:
                    64:1c:69:79:f1:71:7b:ae:38:fa:c4:9e:49:67:d6:
                    45:38:e3:8f:70:56:d7:cd:ef:a2:e0:c0:8d:d7:7d:
                    ab:e8:e6:9a:0a:92:bf:d6:f7:ce:5b:74:98:de:8a:
                    37:76:21:a5:2e:4b:e2:29:e8:4d:0f:af:58:07:11:
                    00:87:5a:bb:42:91:0a:7a:aa:9b:24:d3:8b:dc:ab:
                    fc:df:21:5e:6b:97:a0:f0:28:f8:53:c1:07:f0:6a:
                    78:75:7a:11:19:2a:9e:96:6a:a7:d0:d9:64:8c:55:
                    3a:75:63:10:2e:26:c0:d4:cf:af:66:be:c2:03:87:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:83:6F:2E:11:F2:4A:C8:E7:80:93:CB:02:2C:56:C6:69:31:C4:26
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Y4NvLhHySsjngJPLAixWxmkxxCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:e7:e3:2d:e6:26:82:21:9a:cc:51:0e:43:9a:9f:4e:b6:d7:
         2a:30:c5:8e:64:f1:4e:f4:c0:82:84:4d:b6:4b:0f:fe:00:fc:
         5e:ed:c2:50:e7:90:77:45:98:02:76:8b:52:39:13:7f:95:0d:
         0c:cc:c7:f1:05:3d:f8:71:1d:d1:0f:6b:8b:23:d7:ec:fd:2e:
         09:ad:0b:cb:8d:b9:86:b4:17:2c:2b:02:da:7b:31:c8:9e:d0:
         84:76:19:c6:77:65:79:03:a5:98:a9:c5:90:8a:04:12:e0:9f:
         ea:1d:ca:d2:6b:0e:ec:7b:69:7e:a3:5f:f1:26:12:eb:bc:77:
         ad:84:2d:a7:71:78:2d:6e:6f:fa:39:c5:fb:41:d0:b9:6b:ad:
         3a:02:f7:66:01:44:61:8a:05:a4:f4:63:20:95:49:30:fc:f9:
         da:3e:67:5e:ff:f3:73:70:88:58:1f:5e:41:4c:ee:6b:97:c4:
         b7:8e:e0:93:86:b3:31:fe:58:29:40:50:2b:84:a1:af:9a:2f:
         d1:fc:d3:a0:53:6a:12:41:63:dd:42:14:1d:ad:60:54:42:49:
         60:6a:b7:5a:fc:e3:dc:b6:d2:67:58:75:49:e2:a7:5d:96:aa:
         bd:93:2b:db:8d:81:76:13:fd:d0:f2:bc:4a:53:a8:ad:ef:0a:
         f7:2c:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 10:28:04 2025 by rpki-client