Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_eKwGaDEZsD3h0QxaMwjqDKJoV4.roa
File:                     _eKwGaDEZsD3h0QxaMwjqDKJoV4.roa (raw, json)
Hash identifier:          mp5DA0MTZXUMyDs3DvL6H9Bxka/BX7sJLASPs9bbFJE=
Subject key identifier:   FD:E2:B0:19:A0:C4:66:C0:F7:87:44:31:68:CC:23:A8:32:89:A1:5E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       694E3584
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_eKwGaDEZsD3h0QxaMwjqDKJoV4.roa
Signing time:             Thu 10 Feb 2022 03:08:52 +0000
ROA not before:           Thu 10 Feb 2022 03:08:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766733188 (0x694e3584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 10 03:08:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fde2b019a0c466c0f787443168cc23a83289a15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1d:57:6a:54:7b:23:c0:ad:de:58:2f:dd:76:
                    89:d6:e3:8d:a4:62:4a:25:23:19:af:c8:a6:23:9f:
                    bd:d2:8d:02:82:96:c2:7a:cc:40:ff:1c:54:41:f1:
                    88:8d:fc:e9:4b:cc:c4:25:51:8a:44:38:5a:6c:60:
                    4e:ef:92:44:dc:d5:6a:57:dd:d1:39:10:cc:40:e7:
                    25:0a:ce:46:88:a0:c2:fd:6a:a8:6b:3d:8e:86:d3:
                    74:19:b5:b7:4f:25:90:39:1a:af:78:25:66:2f:1d:
                    b1:b3:22:db:a9:25:47:d4:fd:e0:09:f3:1b:64:f1:
                    5e:ac:3f:13:25:aa:45:e4:21:b3:a7:30:07:79:8b:
                    d7:7e:33:3d:6b:c9:49:7d:97:3d:79:53:d6:6b:db:
                    72:42:c1:d2:90:de:f5:bc:26:8b:d8:50:73:bf:cb:
                    18:e3:13:12:27:57:1b:35:08:7e:0c:82:fa:b1:e6:
                    46:26:d5:56:7f:40:52:bc:e0:f1:51:49:05:d7:d3:
                    9c:d2:4d:44:85:23:a7:02:36:6d:71:09:6f:e7:a4:
                    0e:c3:16:d8:a3:35:91:fd:65:f3:99:d5:07:4a:58:
                    aa:04:6b:68:8b:54:91:b5:bd:f7:6b:04:e8:ec:bc:
                    93:70:be:bb:07:9e:0e:91:fa:65:05:87:0a:71:5b:
                    4b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E2:B0:19:A0:C4:66:C0:F7:87:44:31:68:CC:23:A8:32:89:A1:5E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_eKwGaDEZsD3h0QxaMwjqDKJoV4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:bb:7f:c9:7a:74:c7:bb:44:fb:92:c2:83:c4:66:f5:e8:
         91:ff:a8:38:87:97:01:8a:5d:f0:28:e0:a7:2c:b7:63:83:e1:
         71:30:d9:0c:2c:cb:1c:5e:3c:97:be:03:66:fa:d1:37:9e:b9:
         16:74:9c:92:e4:ab:c8:e1:40:3e:9d:1d:8b:13:2d:8f:64:44:
         ef:e2:59:35:30:59:6f:dd:d9:f8:a7:d7:0b:14:be:be:07:6a:
         78:09:31:65:c3:2f:a7:43:9d:18:b4:c3:65:9e:61:9d:ab:33:
         20:33:56:1a:88:93:a4:dd:19:f3:47:19:a9:d8:c8:bf:a7:da:
         06:1a:97:e9:e3:ae:07:40:7d:84:c9:a6:b7:3c:6b:3e:62:bf:
         61:77:f1:4f:27:9f:86:45:ce:5e:68:7f:a0:5d:23:36:a4:67:
         31:7d:a4:b0:e9:c3:ea:cf:05:04:ee:fd:5e:1a:fa:ad:6d:22:
         b7:93:61:b5:fc:fe:c2:b4:e4:6a:15:fc:bf:62:6c:61:56:54:
         cf:cd:3a:75:b0:4c:c5:b8:a4:b2:55:39:cd:9d:9c:4e:d0:ec:
         45:c2:6a:eb:cc:14:55:57:91:5e:1d:7f:19:7d:3c:ec:ed:0c:
         38:5e:a7:da:89:d3:ab:0f:61:46:59:9e:d9:79:f6:14:ba:01:
         8f:0a:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:36:47 2025 by rpki-client