Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eeOVts4WR747vmJJqHpQbPSlzPQ.roa
File:                     eeOVts4WR747vmJJqHpQbPSlzPQ.roa (raw, json)
Hash identifier:          n54ph+76PLrQndkYwbDQmXuMjsLASLTqrxFIJRWRAbw=
Subject key identifier:   79:E3:95:B6:CE:16:47:BE:3B:BE:62:49:A8:7A:50:6C:F4:A5:CC:F4
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0185026215CD651062CD8091E1BD89CB4F6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eeOVts4WR747vmJJqHpQbPSlzPQ.roa
Signing time:             Sun 11 Dec 2022 18:11:00 +0000
ROA not before:           Sun 11 Dec 2022 18:11:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:02:62:15:cd:65:10:62:cd:80:91:e1:bd:89:cb:4f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 11 18:11:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79e395b6ce1647be3bbe6249a87a506cf4a5ccf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:6e:71:0c:98:34:db:cc:6a:a0:1e:f0:72:
                    9e:36:26:b1:07:15:fe:a8:6a:8e:59:4b:d1:3d:3f:
                    32:ec:9a:9e:3b:d2:b7:bd:4e:c7:5e:d2:de:c8:86:
                    89:9c:2d:aa:50:a7:62:6d:0d:4c:1e:48:cb:76:17:
                    f8:18:4f:10:0a:ac:6c:fe:b7:34:f9:a7:ee:b0:62:
                    5f:12:70:29:e9:41:1f:d7:e2:5d:c2:4b:9d:b6:82:
                    cd:c5:51:02:e5:9a:c4:50:b8:0b:b6:85:bc:dd:93:
                    c0:31:d0:2c:bb:4b:e5:68:27:ec:e4:41:8b:a5:fb:
                    ba:8c:cf:2f:9b:ab:68:02:1a:9a:bf:c3:7e:c7:31:
                    5c:06:56:9a:d6:b5:e5:91:1a:59:d1:73:da:ee:c7:
                    93:82:84:c7:88:7d:4d:6e:dd:17:d1:ae:34:57:40:
                    b2:3c:97:2b:bf:d9:aa:4f:72:a0:82:6d:ec:d8:63:
                    85:13:98:1f:93:c3:22:4c:2d:ef:f0:70:ac:1f:67:
                    a1:28:26:a9:12:6d:a6:4f:e8:b9:3d:86:69:e9:3b:
                    11:98:79:d2:39:16:53:fb:c6:95:c2:9f:e4:16:c4:
                    38:70:a2:30:6d:67:35:fa:5b:3d:df:2d:7e:6e:a7:
                    d4:6c:b3:bf:ef:ad:29:44:99:d7:43:0a:69:68:71:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:95:B6:CE:16:47:BE:3B:BE:62:49:A8:7A:50:6C:F4:A5:CC:F4
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eeOVts4WR747vmJJqHpQbPSlzPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:76:49:81:33:a3:cb:9b:62:8a:7d:72:ed:61:34:d2:cc:
         1d:26:74:47:34:2a:8a:b9:e4:25:98:c2:fb:b2:ac:34:6c:df:
         38:25:a2:da:21:f4:c7:05:0d:ee:49:df:43:49:78:10:33:2b:
         95:77:8f:aa:79:02:ce:7c:86:4b:16:7f:ae:30:bb:16:50:00:
         69:2f:8a:37:cc:27:54:21:0b:4d:7e:58:14:d0:44:d4:41:3c:
         8c:f7:96:aa:8a:4d:a2:6b:1e:e5:7d:c5:d8:e8:7e:dc:64:22:
         20:af:e5:49:9e:ae:23:c7:6c:5d:ac:ed:bb:95:96:85:ce:b0:
         9d:b2:de:58:ff:24:2e:16:4f:98:b8:14:9e:cb:d9:c1:d0:09:
         ba:11:1e:26:de:43:2c:c7:b9:b5:5a:a5:88:ec:63:26:a8:c8:
         28:b8:43:85:ba:09:52:9f:d8:ce:9f:88:f1:90:13:4e:98:57:
         a3:8d:5c:df:b1:ec:a9:b2:00:b1:75:5b:71:be:00:7c:8d:db:
         52:16:4b:e9:81:66:f9:a3:e4:be:3c:fe:e7:13:20:ab:38:c7:
         1e:bd:25:f3:5b:7a:55:53:f0:2f:3c:e1:5e:7f:44:e1:d9:ec:
         d2:ba:9d:3b:b7:56:7c:d4:3e:75:8a:75:9d:36:06:52:45:61:
         45:2f:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:40:17 2025 by rpki-client