Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_UagNGbke96H0OzjZSdx20mhiGc.roa
File:                     _UagNGbke96H0OzjZSdx20mhiGc.roa (raw, json)
Hash identifier:          lr0VjGz1JodDX7NiGKJh5BFu4lPE7aj5KqQUQkPXZSg=
Subject key identifier:   FD:46:A0:34:66:E4:7B:DE:87:D0:EC:E3:65:27:71:DB:49:A1:88:67
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       6C7D1C2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_UagNGbke96H0OzjZSdx20mhiGc.roa
Signing time:             Mon 21 Feb 2022 09:11:04 +0000
ROA not before:           Mon 21 Feb 2022 09:11:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1820138543 (0x6c7d1c2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 21 09:11:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd46a03466e47bde87d0ece3652771db49a18867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:fb:47:fb:e6:9a:b4:5b:ab:84:68:b7:0b:
                    10:2f:9d:47:cf:16:02:6c:bc:a1:35:fc:ff:5d:65:
                    74:db:8b:f3:af:37:0d:a3:15:29:33:04:cb:89:7b:
                    85:3f:97:04:83:22:38:c6:97:20:db:b8:ba:10:53:
                    01:ff:41:74:5d:a5:e0:9d:6b:98:ae:3c:3b:56:a9:
                    2e:f4:69:16:af:f1:07:d4:92:76:fc:b8:7d:10:8a:
                    d1:92:53:94:61:9a:da:a0:b5:90:77:81:9a:d4:6a:
                    85:30:f5:c7:28:86:16:81:f3:ee:3b:d8:8b:81:90:
                    dc:24:28:cc:72:ef:6d:70:40:71:ef:6f:20:f7:a7:
                    1e:69:e4:bd:49:05:05:6b:0c:86:d9:be:ca:8f:a1:
                    20:df:88:77:bc:74:42:34:9f:b7:ea:00:9a:30:30:
                    0d:a1:67:0c:5a:50:8d:af:a8:b5:84:77:bf:38:e1:
                    84:2c:49:c6:4e:f4:2b:de:cb:61:f2:7f:4a:5a:89:
                    7c:e0:5e:a0:23:19:49:5f:23:3f:ee:6a:f6:9c:7d:
                    63:10:b3:ee:ef:0c:93:f9:28:d5:88:80:d7:e2:3b:
                    7c:ce:0b:e2:ea:b4:aa:83:2e:1b:8b:23:31:d2:44:
                    e9:3f:7d:bf:64:43:cc:c3:72:28:06:3b:0d:7c:44:
                    0e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:46:A0:34:66:E4:7B:DE:87:D0:EC:E3:65:27:71:DB:49:A1:88:67
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_UagNGbke96H0OzjZSdx20mhiGc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:ff:f5:e1:a0:e3:53:90:5c:b1:f7:dc:1d:1a:f8:5f:11:
         a1:a1:1c:8f:5e:cd:7b:bd:98:5c:a2:dc:7d:07:c0:c5:9a:df:
         2c:b4:08:61:b7:b4:5e:75:3b:fb:cf:6e:64:53:a1:34:3e:70:
         25:a7:15:20:37:8d:94:ca:67:8a:24:6c:1d:58:54:c8:50:52:
         bf:6f:a6:ba:e1:79:fb:c1:a2:cd:f8:41:c8:5b:8e:ca:7f:ed:
         4d:b3:e8:c2:39:77:76:09:78:77:51:1d:45:54:03:0e:89:01:
         31:d1:2a:69:45:5f:c4:54:41:2f:3e:2c:cd:73:56:a0:9b:68:
         6b:83:97:65:0b:5f:39:be:30:b5:2d:ca:80:06:7a:bf:4e:11:
         20:3a:9c:70:60:f7:fc:aa:67:aa:e2:77:f9:1e:9f:4f:14:21:
         aa:06:54:f6:ac:1b:f6:6a:1f:95:72:d5:3b:62:45:c9:7f:93:
         3b:c8:6e:c6:5e:49:4e:06:a9:ba:4d:6a:aa:6a:98:4c:12:42:
         b6:90:9c:38:43:30:6f:59:86:5a:c5:be:5b:1a:ae:c1:09:94:
         11:23:1b:e8:47:98:3a:42:64:3b:21:06:98:1b:58:3e:b2:b1:
         a6:a5:a2:1a:5c:e6:99:26:a0:43:f6:ab:f1:0f:23:e5:58:ae:
         ca:4e:5e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:20:19 2025 by rpki-client