Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__LmILLpHacsFIQh4JLtK6tjXfc.roa
File:                     __LmILLpHacsFIQh4JLtK6tjXfc.roa (raw, json)
Hash identifier:          kjobvJxfNSo7yCM8IP+Fn7uKautht5XGEupEhejhkTg=
Subject key identifier:   FF:F2:E6:20:B2:E9:1D:A7:2C:14:84:21:E0:92:ED:2B:AB:63:5D:F7
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0182CDD7EAAD184C5749B1AA8A0A54AEAC03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__LmILLpHacsFIQh4JLtK6tjXfc.roa
Signing time:             Wed 24 Aug 2022 03:14:15 +0000
ROA not before:           Wed 24 Aug 2022 03:14:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
                          2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:cd:d7:ea:ad:18:4c:57:49:b1:aa:8a:0a:54:ae:ac:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 24 03:14:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fff2e620b2e91da72c148421e092ed2bab635df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:9e:c9:79:e6:00:f0:69:bf:1e:b3:b6:ce:
                    39:23:32:93:7c:41:5c:58:1f:ca:04:e8:69:ef:5e:
                    ef:0d:a2:8d:db:b5:56:e5:3e:8c:cc:d2:8e:40:ef:
                    28:99:e8:d0:ef:bb:10:e9:71:e2:f1:ef:1c:e2:bf:
                    8c:a8:d3:a3:34:af:a6:8d:60:16:f5:b9:24:9d:0d:
                    20:96:19:a9:a7:83:b0:4a:a9:3b:cf:55:1f:36:a5:
                    29:de:6f:75:57:1e:2a:4f:e7:7b:d4:5a:a3:0a:e3:
                    19:20:7a:01:a2:c8:56:2e:53:ef:12:9b:39:96:24:
                    de:87:69:3a:fa:2d:98:7f:46:22:15:8f:8c:30:d2:
                    4a:c2:85:ae:ad:2c:d5:b9:57:52:12:e7:8a:7d:41:
                    23:a1:e0:5d:48:35:af:40:98:4a:6f:64:10:55:4b:
                    42:e3:f5:9f:de:f4:d6:b7:10:66:fe:a0:c6:c2:05:
                    aa:67:39:50:f0:2c:a8:50:65:29:75:ac:0b:99:6c:
                    4e:44:5f:ff:8b:7b:1e:14:f6:b2:20:46:61:8c:3a:
                    40:5a:bc:4b:18:9a:7c:ab:25:04:7d:4b:48:fd:7a:
                    c0:75:28:8f:19:63:f3:26:3c:ef:55:b2:c7:97:55:
                    db:2d:5a:98:97:23:89:f3:8e:2a:6e:ab:e1:f5:32:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:E6:20:B2:E9:1D:A7:2C:14:84:21:E0:92:ED:2B:AB:63:5D:F7
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/__LmILLpHacsFIQh4JLtK6tjXfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:61:ec:2a:cc:0d:0b:01:b2:84:77:9a:f0:08:8b:49:43:
         e4:92:2c:6e:28:eb:64:17:e1:b9:ae:60:6b:8e:d2:03:7b:72:
         3e:c9:55:76:da:62:2c:a9:6d:c9:4a:7a:91:1b:41:3c:5d:39:
         a0:b8:12:ca:57:cf:09:73:6a:ef:26:a2:b6:3e:2d:9b:35:c5:
         ed:5f:5e:c5:fe:55:5f:64:fb:4f:17:41:c5:91:57:10:0f:4d:
         25:eb:dc:4f:30:6b:9c:50:92:a0:82:d5:c1:96:77:3c:1f:4e:
         16:7c:80:71:e3:89:8f:3d:ef:29:96:49:19:60:ad:d1:7e:d2:
         dd:4f:54:70:9c:c9:ee:f3:d3:fc:44:a2:77:e1:a9:24:81:f2:
         04:2f:5f:23:eb:64:ca:a3:7e:b2:07:2d:3d:ab:8a:9d:77:6b:
         c0:c4:41:e9:92:0e:2c:55:df:e0:a7:60:66:e3:a5:32:03:42:
         e1:bd:24:d0:41:c4:48:a3:fe:22:78:3c:ec:bf:e3:31:37:0f:
         2f:87:86:78:4d:3d:a7:24:ac:ab:4c:bd:d3:7a:46:bb:6e:5a:
         04:08:ba:09:ea:8b:6d:f1:ee:6b:b8:07:7c:6b:2d:51:7e:2d:
         22:75:7c:8f:d3:a5:f7:38:f6:35:80:19:68:6f:16:99:03:85:
         18:e1:73:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:29:49 2025 by rpki-client