Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhRGzr3Ng5Tq0SdtIlyCN6NiH4E.roa
File:                     hhRGzr3Ng5Tq0SdtIlyCN6NiH4E.roa (raw, json)
Hash identifier:          FNaJK95p4ThEhrqXNs79fP58no6U6augfp+hCSCKpJo=
Subject key identifier:   86:14:46:CE:BD:CD:83:94:EA:D1:27:6D:22:5C:82:37:A3:62:1F:81
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       72510A20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhRGzr3Ng5Tq0SdtIlyCN6NiH4E.roa
Signing time:             Mon 14 Mar 2022 00:09:17 +0000
ROA not before:           Mon 14 Mar 2022 00:09:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917913632 (0x72510a20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 14 00:09:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=861446cebdcd8394ead1276d225c8237a3621f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:84:b6:4a:41:82:28:9c:f9:ae:93:46:35:
                    d5:84:ae:d9:46:18:03:43:04:74:fc:a2:4e:40:d2:
                    40:74:e4:11:94:2e:fe:52:62:e0:a0:5c:54:09:d0:
                    07:dd:5c:c9:d2:f9:fd:16:e1:55:e9:9b:b6:10:0f:
                    92:c7:30:79:e3:41:61:17:35:b0:81:07:69:54:2b:
                    cf:89:01:12:28:71:d6:14:9e:e8:13:e7:b4:cb:a9:
                    6e:b5:81:15:52:36:27:c6:c4:d1:44:c7:fb:ab:9e:
                    e3:af:75:4b:0d:e8:a8:e4:7e:75:f1:9f:b8:31:a1:
                    05:eb:4e:b1:6f:3a:92:ff:cf:6d:3b:1e:02:a9:2c:
                    c3:4d:4d:c8:44:32:0f:1a:da:97:f3:05:a7:af:15:
                    57:7d:b4:aa:c0:19:cb:db:d2:6d:ae:ca:89:44:1b:
                    24:61:2b:b3:8f:6b:52:47:a4:f2:66:7b:17:e4:5a:
                    75:2a:46:e9:27:29:dd:2f:10:60:81:99:f2:d9:5f:
                    9d:6b:77:50:76:42:47:f1:e4:1b:66:90:43:82:a4:
                    e4:8a:9d:15:64:73:8c:5b:19:bd:d8:6f:4f:2d:40:
                    fd:cb:67:25:cf:bd:8d:b8:66:c4:17:83:22:0b:66:
                    b8:64:95:0a:ae:c4:42:3d:d6:9c:ee:f4:cc:02:7d:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:14:46:CE:BD:CD:83:94:EA:D1:27:6D:22:5C:82:37:A3:62:1F:81
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hhRGzr3Ng5Tq0SdtIlyCN6NiH4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:ae:96:e3:1a:e4:02:aa:14:2c:3e:eb:89:10:ce:02:84:0d:
         20:f1:82:b2:99:95:7d:ac:e0:23:37:17:06:0f:ff:83:64:d1:
         8f:90:5e:bd:bd:e2:9a:f2:2a:16:6b:75:6c:e0:55:86:da:53:
         ba:8a:f3:31:38:e7:53:1f:76:e4:45:8e:9c:3c:a0:bb:6b:e5:
         ee:c9:48:6d:a1:4c:9c:48:63:72:06:35:6a:90:19:09:dd:1e:
         d1:c6:56:52:56:68:a3:05:b5:cc:3b:23:33:03:20:5c:ff:cd:
         be:ec:ee:11:f2:8d:ab:56:5a:fb:a6:f4:00:5e:0e:4a:67:15:
         ce:34:1d:df:77:5f:d6:57:d1:29:49:3d:b1:62:37:49:e0:a7:
         7d:7f:7b:63:32:aa:ea:c5:b6:6e:bd:e6:8f:25:19:dc:c4:a6:
         2c:53:45:c4:04:1c:56:5e:da:9c:4a:54:43:83:51:36:e7:c7:
         bc:c5:99:49:f8:c6:5b:78:74:79:a2:e3:c4:b5:38:8e:e6:c7:
         34:a8:11:eb:93:ef:62:1d:05:c2:f9:cb:54:d7:ef:c6:f6:a7:
         5f:de:eb:37:09:5c:a3:7b:07:5f:3f:4e:af:2b:88:5f:b6:db:
         2f:3e:25:2f:ca:d7:96:6b:09:f1:31:72:d8:a1:e8:66:12:34:
         6c:2d:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:00:09 2025 by rpki-client