Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dM99rqGnvOk_zt4AbeZ_PvfvJi4.roa
File:                     dM99rqGnvOk_zt4AbeZ_PvfvJi4.roa (raw, json)
Hash identifier:          N2FRtpONnSclV6FzNXo8JWCIid5HQ8ENiS/wgXl0MgY=
Subject key identifier:   74:CF:7D:AE:A1:A7:BC:E9:3F:CE:DE:00:6D:E6:7F:3E:F7:EF:26:2E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01868F93B4FCCE36F86B5B0284D25882B11D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dM99rqGnvOk_zt4AbeZ_PvfvJi4.roa
Signing time:             Sun 26 Feb 2023 21:14:27 +0000
ROA not before:           Sun 26 Feb 2023 21:14:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:8f:93:b4:fc:ce:36:f8:6b:5b:02:84:d2:58:82:b1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 26 21:14:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=74cf7daea1a7bce93fcede006de67f3ef7ef262e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:38:1e:08:e3:22:52:9c:da:ae:e9:de:77:c9:
                    f9:96:58:ce:f2:6d:5a:2b:f0:83:9e:fa:7e:bf:4a:
                    07:dc:6c:b9:fe:6c:92:ce:d9:41:40:fa:7a:6e:94:
                    df:20:4f:08:b6:88:8a:fe:66:d9:51:9a:b0:4f:80:
                    a8:0d:a7:30:11:49:a4:c9:e8:76:43:27:30:3d:b6:
                    65:21:56:33:8b:8b:c7:83:33:8a:8e:44:f2:bc:70:
                    a6:42:27:b9:c7:08:b2:70:2c:66:fa:f0:e7:4f:8c:
                    8a:89:b7:94:fd:c9:e7:a5:2b:50:58:58:a5:a2:ac:
                    21:e5:5b:45:7b:44:70:47:04:55:4b:71:05:f4:17:
                    42:ed:e6:86:7a:94:35:d3:01:10:db:c7:fe:e8:3e:
                    e0:21:5b:6e:d9:58:8f:59:a6:ac:ec:41:df:6d:a6:
                    21:c9:ba:d7:bb:23:41:47:ea:70:ec:07:37:68:09:
                    ac:a1:c8:9f:8a:5d:d8:8c:cc:f1:39:54:84:48:7f:
                    79:30:16:28:f5:12:42:9b:45:61:82:d1:9d:33:60:
                    68:de:47:86:2e:16:af:bc:84:91:0b:c6:e0:a1:df:
                    73:23:2d:7c:27:c6:c6:93:67:4d:ef:ba:c8:38:ef:
                    ac:07:89:ec:3d:60:e3:49:84:13:f7:99:97:a8:c4:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CF:7D:AE:A1:A7:BC:E9:3F:CE:DE:00:6D:E6:7F:3E:F7:EF:26:2E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dM99rqGnvOk_zt4AbeZ_PvfvJi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:34:cb:0f:ce:67:20:65:83:b9:71:5f:c0:75:83:79:4c:70:
         aa:6b:b9:c0:8a:92:ce:50:1e:39:48:86:56:8c:45:fa:90:a1:
         a2:8b:47:d7:0d:6e:29:cd:70:0c:fa:5a:16:f2:ae:e6:ae:45:
         4f:c9:d2:0b:ad:b9:65:59:e8:92:b0:a4:f9:d8:8a:de:14:a9:
         20:4c:f8:9e:b3:67:8b:7d:7c:71:a4:54:70:b5:0e:bc:2f:95:
         43:1e:40:91:55:b5:03:52:e2:f3:1c:93:09:de:93:17:c6:17:
         60:08:6d:c0:9c:00:e6:a1:a1:81:43:44:b5:34:9c:8c:64:0d:
         72:59:b2:39:95:27:ed:70:1e:fc:c0:dd:bf:ac:6a:ee:c6:9d:
         f1:30:ef:15:93:ec:6d:ba:2a:d2:eb:92:8f:52:25:8e:b2:c4:
         64:23:7e:38:66:c0:16:24:6e:29:9c:df:8c:eb:43:f0:12:dc:
         3e:58:9a:ee:d1:ea:8c:4c:bd:0c:75:e5:da:c5:59:07:d4:e7:
         25:d5:87:43:16:d3:dd:f5:50:be:4c:c6:f1:95:99:0c:d0:d5:
         ba:2f:ae:0e:a1:45:e0:7b:72:47:33:8f:37:3e:1b:5a:c3:24:
         75:08:ce:20:ca:0e:15:c8:64:95:1d:7c:39:54:b2:2b:60:e2:
         0c:44:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:52:29 2025 by rpki-client