Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bXD0OiC6gxayKAUZl9zBN2PIjw0.roa
File:                     bXD0OiC6gxayKAUZl9zBN2PIjw0.roa (raw, json)
Hash identifier:          /phSl2Unz9OgBaJMWfqQhK3TsZyc9aGLK9XCnMaqGG4=
Subject key identifier:   6D:70:F4:3A:20:BA:83:16:B2:28:05:19:97:DC:C1:37:63:C8:8F:0D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       7408637E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bXD0OiC6gxayKAUZl9zBN2PIjw0.roa
Signing time:             Sun 20 Mar 2022 04:11:20 +0000
ROA not before:           Sun 20 Mar 2022 04:11:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946706814 (0x7408637e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 20 04:11:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d70f43a20ba8316b228051997dcc13763c88f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:72:55:57:cd:42:99:9c:f5:97:b8:2e:0f:de:
                    b1:b0:6a:ae:f2:ff:07:eb:34:8e:1a:f8:d6:ae:3e:
                    df:90:62:01:cc:e1:a9:c7:9f:37:50:40:17:9c:d4:
                    98:d8:83:d6:61:f8:b9:8a:3f:ba:75:ee:6c:21:f5:
                    5b:0f:5a:1a:45:5c:0f:07:04:7f:28:40:56:2d:4b:
                    d8:ff:db:8c:c7:5a:07:fa:0a:1f:ab:4b:4e:cd:7b:
                    22:85:60:76:8c:9b:67:42:51:b2:51:d6:6d:3b:12:
                    0c:b2:62:16:3b:fe:f5:f9:9b:b2:4e:f4:44:8c:1f:
                    ff:f6:49:2d:1e:2f:96:39:a2:49:6e:ca:02:e7:6c:
                    42:39:e9:68:29:f7:0d:ba:25:0a:c0:24:4e:02:ed:
                    1a:61:dd:5e:53:87:aa:98:d4:d3:0f:ce:6d:15:32:
                    ba:60:01:5e:6b:07:74:bb:6b:ce:d7:78:25:ad:f5:
                    9e:59:05:3f:8d:38:fd:7d:a0:27:de:14:06:95:52:
                    70:bd:41:2c:4f:77:da:c0:d8:05:38:b4:3e:b3:80:
                    e3:1f:6f:9a:62:e2:94:8b:c8:08:22:a0:6d:91:0c:
                    4e:c5:37:e9:5a:4b:70:b2:2e:d0:42:78:64:ab:0c:
                    f0:25:cf:a6:c3:94:c9:28:c8:d9:57:3b:b2:09:2c:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:F4:3A:20:BA:83:16:B2:28:05:19:97:DC:C1:37:63:C8:8F:0D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bXD0OiC6gxayKAUZl9zBN2PIjw0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:aa:7e:53:88:94:20:da:04:a8:1f:7d:4e:cf:69:4e:9c:
         00:12:53:0b:49:c6:c9:3e:94:4c:c0:28:01:54:0f:91:ab:61:
         f0:47:dd:fc:07:49:7c:00:78:b8:5e:54:28:cc:15:23:3d:74:
         35:2f:33:03:50:c3:28:04:98:f1:a4:83:d9:31:ab:28:ff:ef:
         24:47:32:67:4a:a8:53:51:10:43:66:83:45:27:06:9c:0f:b5:
         82:f5:86:65:02:b7:5c:73:f3:d3:8b:53:53:85:1c:e3:50:a4:
         81:81:f8:85:31:b7:f5:10:60:56:77:08:e0:b9:bb:05:9c:42:
         2d:86:10:78:67:a6:c7:e4:52:00:29:bf:40:e9:6e:a8:e4:05:
         1d:e9:c3:fe:4d:dc:33:01:6f:81:e5:08:bf:f2:a7:38:db:07:
         4d:0c:da:21:f0:55:19:cb:a8:fc:9c:50:81:1e:6c:e2:53:d8:
         a2:5d:fe:ff:e0:c1:cd:ee:06:4e:e1:87:f8:29:18:46:56:9d:
         ef:82:a5:72:81:a9:66:4b:4a:f0:eb:73:48:8d:09:e6:8d:90:
         77:47:87:4a:2f:bc:4f:c2:e7:4e:2c:e2:19:2a:70:eb:07:db:
         d1:97:02:6f:20:a6:c9:35:06:34:88:db:6d:41:eb:11:fd:51:
         38:e7:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:03:50 2025 by rpki-client