Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cV007v9xFA6ZF_tZeaekXMLvxZU.roa
File:                     cV007v9xFA6ZF_tZeaekXMLvxZU.roa (raw, json)
Hash identifier:          QiG9ccVpScua6esEpYNB1iuvEclAPuxLHSJavtOiEeU=
Subject key identifier:   71:5D:34:EE:FF:71:14:0E:99:17:FB:59:79:A7:A4:5C:C2:EF:C5:95
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0185887D29614ECCED69C998E90D8BA36651
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cV007v9xFA6ZF_tZeaekXMLvxZU.roa
Signing time:             Fri 06 Jan 2023 19:09:42 +0000
ROA not before:           Fri 06 Jan 2023 19:09:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:88:7d:29:61:4e:cc:ed:69:c9:98:e9:0d:8b:a3:66:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jan  6 19:09:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=715d34eeff71140e9917fb5979a7a45cc2efc595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:f3:4f:02:57:11:19:cb:ab:ef:e8:cb:9c:
                    de:c9:46:e8:d0:23:51:d4:3d:42:4f:41:0d:f0:2c:
                    a1:d7:69:98:cf:4d:26:d7:2b:6a:1a:4b:a9:7a:a1:
                    ff:22:32:08:2a:de:48:42:e8:4c:47:ec:25:9f:da:
                    15:bc:3f:0f:53:be:42:f1:22:0f:d7:e1:bd:84:e3:
                    6b:7f:f4:28:f9:21:8d:6c:e7:65:06:1c:0a:57:e3:
                    4c:f3:d3:e3:1b:d4:1f:99:92:29:f1:d0:2d:a9:98:
                    7e:5a:45:1f:24:da:09:12:3b:03:f7:16:2d:e8:e2:
                    03:67:74:2e:43:5e:a2:ad:f1:4f:f2:1f:e4:fa:c8:
                    ba:b8:bd:66:d4:64:4d:fc:5e:26:53:10:56:7e:3e:
                    14:b3:3a:fe:15:38:aa:d6:89:a1:08:29:fd:50:86:
                    1d:13:6e:5f:48:4d:75:e4:bc:57:04:2d:b3:e0:61:
                    e4:55:14:6b:6e:ab:80:86:84:ba:72:c1:bc:13:78:
                    45:22:fa:ef:09:81:bf:35:c7:80:fd:e7:86:05:61:
                    b6:c1:0c:24:87:38:e5:2d:c1:f1:16:ff:80:3c:f3:
                    de:08:aa:32:75:34:e4:a0:e7:b9:6a:4b:f7:61:47:
                    63:05:da:54:f0:59:91:ba:12:65:8e:0d:0f:ce:9f:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5D:34:EE:FF:71:14:0E:99:17:FB:59:79:A7:A4:5C:C2:EF:C5:95
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cV007v9xFA6ZF_tZeaekXMLvxZU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:61:6a:68:01:5c:6f:f1:0e:98:ca:e9:f0:d9:4d:81:38:
         e2:33:b4:48:f0:0c:a2:06:b5:b5:77:78:76:9a:f0:b6:8c:46:
         ff:f6:b1:d1:1e:a6:6d:19:f8:e8:e3:c0:c9:d2:4f:a2:a2:08:
         ef:da:8c:85:31:d8:15:cb:cd:d4:17:cc:d7:d0:ea:83:f2:91:
         3c:d3:eb:28:4a:cf:24:1c:b8:bd:42:ed:b2:12:80:d0:43:f1:
         2c:27:6c:a2:9e:2c:0c:7a:5c:c7:4c:b4:90:33:2e:97:4f:e0:
         af:7f:cd:15:6c:fb:0d:78:30:91:dc:1b:18:bc:a6:2f:ba:7e:
         b8:57:a0:24:33:b5:ac:fa:e7:a1:68:5a:f3:48:2d:90:08:e7:
         ec:e6:c4:97:f3:77:d2:5c:9f:df:5c:ff:df:44:d9:52:b1:77:
         6a:f2:27:04:3b:27:81:64:58:1e:ef:33:d3:66:95:38:fa:d4:
         63:fc:b7:4d:20:5b:21:04:3e:2a:7b:09:02:55:e8:aa:a0:48:
         c1:dd:9a:82:25:ef:e8:76:84:a3:ea:78:79:53:79:cf:58:f0:
         2b:32:67:7e:e9:91:cb:50:d7:7e:b9:e0:b2:0d:a5:3d:a8:db:
         d7:4a:dd:8c:a0:d5:46:47:25:16:43:07:f7:72:82:f8:86:cb:
         a1:39:d4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:00 2025 by rpki-client