Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Vtfb3u24xzz8Xj8eLs4j-iEq6Y.roa
File:                     _Vtfb3u24xzz8Xj8eLs4j-iEq6Y.roa (raw, json)
Hash identifier:          PZD+gW514B5pJT3q/vTYX/5qyYSHvFk4ZMytRxp4TDQ=
Subject key identifier:   FD:5B:5F:6F:7B:B6:E3:1C:F3:F1:78:FC:78:BB:38:8F:E8:84:AB:A6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       82733FFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Vtfb3u24xzz8Xj8eLs4j-iEq6Y.roa
Signing time:             Mon 09 May 2022 09:43:11 +0000
ROA not before:           Mon 09 May 2022 09:43:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63333
IP address blocks:        2001:67c:64::/96 maxlen: 96
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188591099 (0x82733ffb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May  9 09:43:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd5b5f6f7bb6e31cf3f178fc78bb388fe884aba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:39:03:c5:5f:2b:2f:7b:dd:a3:b9:b4:45:d7:
                    db:87:24:41:a9:e1:87:d5:5b:f9:fd:16:0c:87:19:
                    65:0b:d9:8c:7f:ba:0a:be:c2:7d:59:78:2b:65:fd:
                    9b:6d:82:f1:85:f9:76:d2:2f:39:39:7a:de:79:d9:
                    67:c7:bc:77:9c:8e:fa:c8:c8:c7:f1:50:f3:ee:d6:
                    b2:e1:d7:61:9f:f1:76:ed:de:54:ac:6f:0f:d1:5f:
                    fd:83:fc:ef:56:14:e9:6e:48:4b:b4:d5:5b:65:37:
                    63:d7:3f:1f:bb:ae:a5:0a:3a:34:66:a8:c5:87:6e:
                    c5:51:d1:98:d3:1a:88:25:29:ce:e6:35:94:4d:10:
                    fa:c3:35:c4:05:ff:49:39:48:6e:05:dd:33:3a:83:
                    6f:de:ff:5c:3a:11:0b:ee:47:64:f3:f7:b5:ea:ab:
                    4a:70:7b:aa:37:75:0f:50:1b:da:7c:6a:2a:f5:79:
                    2b:3e:49:91:d3:7b:10:c7:ad:ca:d9:26:94:06:97:
                    88:70:cb:a1:79:a9:30:4c:6f:5f:82:8e:c0:f5:bd:
                    9d:14:02:35:f0:82:83:d4:36:ff:8f:1f:7a:0d:65:
                    d8:dc:52:0d:29:aa:df:8b:fc:43:9c:cf:c9:be:aa:
                    fa:0c:1a:6f:be:f1:b9:51:e5:6c:0c:e8:15:b8:16:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5B:5F:6F:7B:B6:E3:1C:F3:F1:78:FC:78:BB:38:8F:E8:84:AB:A6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Vtfb3u24xzz8Xj8eLs4j-iEq6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64::/96

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:cc:39:fe:d4:3c:d3:c1:78:61:3d:a7:dc:68:1f:3a:cc:
         cb:d8:cf:d2:f2:e5:3e:a8:95:80:a7:be:9f:3d:b9:77:3e:d7:
         39:4d:d8:e9:63:a4:5f:8b:3f:70:c2:a6:f6:06:51:2a:21:78:
         14:9f:9b:ab:b9:6e:bf:70:58:e7:ed:a3:56:16:89:60:86:7b:
         14:6b:cd:19:b2:94:93:d0:20:3c:88:6e:07:4d:af:38:2f:09:
         9d:20:55:30:4c:29:80:a3:e5:2a:7f:24:96:b8:62:f0:af:51:
         c6:b7:90:1b:91:3f:d8:75:4a:70:cb:c2:25:d7:ec:27:94:5e:
         d2:3c:88:8b:21:7c:84:1c:73:c8:cb:df:c2:91:ea:7d:fe:68:
         ee:6b:bc:39:a2:1a:7f:bd:12:63:b6:b4:c2:e4:84:68:ef:ff:
         ca:95:29:69:79:0a:ed:fc:f1:fd:af:2e:97:88:bc:03:ab:92:
         dd:1a:12:d0:42:02:5b:d0:f0:7e:1d:40:39:83:49:19:fe:5e:
         d9:1d:42:c2:fd:93:15:16:60:c4:6c:d0:bf:19:7f:5f:90:a1:
         06:9b:9e:b4:a5:ab:8c:bc:a0:c6:7b:5c:ea:3a:25:b8:be:2e:
         a9:04:8b:07:ce:1c:47:45:fc:2f:18:ab:4d:83:1e:84:3d:0d:
         0f:33:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 00:54:42 2025 by rpki-client