Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eAXYKnUjXo2D6F0L0_bZrsI3uy4.roa
File:                     eAXYKnUjXo2D6F0L0_bZrsI3uy4.roa (raw, json)
Hash identifier:          UPVEbK/qFMZficOuoYnEgxnMhdmdOKKUrIgH8ovyM6U=
Subject key identifier:   78:05:D8:2A:75:23:5E:8D:83:E8:5D:0B:D3:F6:D9:AE:C2:37:BB:2E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       8A4DABA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eAXYKnUjXo2D6F0L0_bZrsI3uy4.roa
Signing time:             Mon 06 Jun 2022 04:09:20 +0000
ROA not before:           Mon 06 Jun 2022 04:09:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320346016 (0x8a4daba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  6 04:09:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7805d82a75235e8d83e85d0bd3f6d9aec237bb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:bb:27:5e:46:fd:06:0f:ff:b6:44:56:6c:
                    6d:90:61:33:26:f4:5f:4b:9b:61:7c:e8:a8:43:96:
                    85:d4:e6:44:c8:b2:b4:8c:c2:58:6d:73:9c:02:a0:
                    41:3b:65:45:0b:4b:d9:d4:c0:d3:c8:da:8d:11:ec:
                    7c:87:b3:52:56:13:d4:4a:d8:3e:ed:cb:b7:16:5d:
                    53:4a:d0:c6:dd:99:74:85:3d:68:f6:5b:d6:7d:f4:
                    d8:7f:cb:ce:b7:67:aa:ef:0c:1c:59:bb:65:e1:59:
                    08:c9:66:b2:06:b6:11:6d:bc:e4:9d:35:7c:23:b4:
                    64:b2:50:6e:64:61:34:e6:33:99:f3:7a:0e:6d:60:
                    e9:a4:e8:2a:16:2a:d3:1e:99:30:b6:e8:f5:ce:ed:
                    2c:17:7e:0a:3d:ba:36:d7:3d:b1:05:ea:f4:46:3d:
                    7d:4f:1b:a6:44:87:24:54:78:d6:8b:83:07:a4:07:
                    ae:20:89:de:0a:28:aa:4c:e2:f4:7a:83:d8:aa:13:
                    fa:08:cb:e7:1a:f6:9e:43:39:d4:9e:4e:e3:8c:63:
                    f4:a7:ff:e0:af:96:66:72:62:ed:1d:c4:8b:eb:57:
                    3f:78:b6:91:cf:8b:3d:67:36:f6:27:08:e6:d6:9a:
                    07:c2:5a:80:5b:0f:af:5c:ae:29:1c:c0:25:61:a3:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:05:D8:2A:75:23:5E:8D:83:E8:5D:0B:D3:F6:D9:AE:C2:37:BB:2E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eAXYKnUjXo2D6F0L0_bZrsI3uy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:22:aa:6f:c7:0b:81:51:7a:85:78:6d:a9:e0:8f:1f:c6:e4:
         61:7f:e7:13:2b:87:9b:50:8d:d6:43:8d:c3:de:11:56:0b:e0:
         cf:d2:ad:d8:fa:a5:0e:de:51:ee:29:22:10:f7:e2:23:e6:95:
         04:56:eb:6b:fd:84:bf:78:a7:44:96:98:14:5d:dd:2f:37:f3:
         61:ef:f0:ce:8a:bc:29:cf:9f:b9:d3:73:b3:a1:e9:f9:3e:34:
         43:bb:2f:12:dc:24:bc:e2:93:17:b7:15:9e:ac:3e:44:21:1c:
         53:fb:b6:d5:59:7d:36:88:3a:5b:d8:82:c7:ad:12:33:a5:e5:
         b3:77:3a:e3:8c:2a:e2:11:aa:d4:ac:56:0a:71:d3:d5:0c:a7:
         09:f1:23:27:66:2a:eb:ed:73:84:00:33:8e:03:90:89:c5:a9:
         19:4b:55:3f:b6:d1:91:89:e4:dd:b6:ca:a7:a0:6b:7c:a8:5e:
         9a:08:5c:94:85:7e:ff:21:07:7f:08:a5:7a:d1:58:f8:7e:6e:
         51:d3:8b:a0:f5:4f:7c:0d:54:95:fd:8c:fb:2c:37:9d:5c:18:
         32:d9:77:83:6c:87:11:9e:86:f0:13:39:f5:e8:8a:b2:2c:3f:
         38:45:4f:5b:79:47:18:ee:bc:4e:ac:a6:2f:f2:e6:ec:a1:ff:
         57:2a:56:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:47 2025 by rpki-client