Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSVgePQ3d9c1FKuOWY1bkboNRfM.roa
File:                     iSVgePQ3d9c1FKuOWY1bkboNRfM.roa (raw, json)
Hash identifier:          x0IhV1sUyXIUFZbGLlYQsYw7vigk1ojh+xtuJZjxf+o=
Subject key identifier:   89:25:60:78:F4:37:77:D7:35:14:AB:8E:59:8D:5B:91:BA:0D:45:F3
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189F91BAD706A315753EDCB62BC37F63C37
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSVgePQ3d9c1FKuOWY1bkboNRfM.roa
Signing time:             Tue 15 Aug 2023 12:11:27 +0000
ROA not before:           Tue 15 Aug 2023 12:11:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:f9:1b:ad:70:6a:31:57:53:ed:cb:62:bc:37:f6:3c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 15 12:11:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89256078f43777d73514ab8e598d5b91ba0d45f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:60:44:95:d7:ed:d3:99:d4:86:7c:e9:b7:94:
                    97:7e:a5:50:2c:dd:96:e1:e9:f6:48:c7:8a:95:bb:
                    71:63:f9:b4:0a:d8:3e:7c:b9:04:13:dc:3e:8b:2e:
                    b6:76:c3:10:bc:15:17:46:ac:1c:5c:99:61:c5:bf:
                    b8:3e:c4:a5:b6:5a:91:3c:37:55:13:96:ba:ef:58:
                    8d:bc:b2:13:ca:4d:a2:ee:b2:c3:e5:6f:0b:fe:59:
                    3b:fc:cb:d5:8b:24:72:df:27:f2:40:03:f5:fa:64:
                    de:b1:4a:c3:63:a9:95:32:84:64:18:70:1e:eb:2b:
                    3d:ae:e6:0d:ee:e1:74:e8:f3:17:8b:23:41:d2:cc:
                    f5:36:de:db:aa:2f:22:85:e5:1a:9f:d3:d8:11:95:
                    5c:b7:83:41:b6:76:83:90:90:e4:b5:41:e2:ed:5b:
                    4c:db:65:32:d9:7f:78:1b:ef:06:d6:ef:96:67:91:
                    cf:1d:aa:9a:41:72:35:c2:f7:7e:b6:7d:5b:25:c7:
                    71:59:04:b6:23:95:b5:6e:db:16:06:48:00:55:51:
                    76:28:50:63:2e:01:92:4d:b2:d9:fe:26:cc:46:e6:
                    85:03:88:e7:eb:f6:ba:af:18:09:85:4b:00:34:30:
                    ef:20:eb:ac:f5:f6:c1:b4:a8:4d:dd:a6:08:6c:af:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:25:60:78:F4:37:77:D7:35:14:AB:8E:59:8D:5B:91:BA:0D:45:F3
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iSVgePQ3d9c1FKuOWY1bkboNRfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:5e:7c:95:e1:f0:54:67:14:6c:85:ff:45:33:56:9c:a5:c2:
         47:50:07:1f:cc:39:13:5c:45:9d:16:88:03:5f:29:05:ff:f3:
         24:97:c2:8b:c2:37:0b:ed:f4:3a:64:1c:19:0e:87:af:a4:8b:
         fa:78:ad:fe:9d:85:4d:30:67:1b:a2:56:93:8a:47:46:0e:16:
         7e:03:e1:01:dc:3d:6d:00:3c:98:91:6d:7c:86:26:c4:07:6c:
         2f:b4:57:09:9c:29:4a:2a:25:c3:43:1d:96:fe:95:4c:75:00:
         f8:b5:60:e7:1d:9a:07:b5:4a:d8:bb:fa:72:25:24:2b:db:70:
         62:5d:d8:c9:48:5b:bc:90:95:aa:76:12:f0:25:5d:db:01:d9:
         e2:dd:c8:7d:4f:0c:7f:76:b3:c5:37:a6:fd:75:77:de:6c:a4:
         2e:53:17:82:28:2e:db:f9:a7:83:83:c0:cf:5e:dc:89:ec:9e:
         16:79:f1:ff:b1:a0:91:fd:45:52:dc:02:bf:ed:d6:77:42:c8:
         b7:b9:cb:02:3b:2b:53:76:e5:10:4e:5e:5b:5d:bf:3d:09:f7:
         0a:34:e0:ce:a3:e5:b5:23:90:59:c0:3e:90:c5:37:72:98:ce:
         df:5e:2f:cc:ea:86:b5:72:04:53:d5:d3:3b:d9:28:6c:a4:f5:
         28:81:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:52:25 2025 by rpki-client