Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifWNZJB9ssc2hRqkUxoVSkHLkmg.roa
File:                     ifWNZJB9ssc2hRqkUxoVSkHLkmg.roa (raw, json)
Hash identifier:          MVpi5Pwuc7IlNoj3BWnvhdvpt3DutE/SjHjIRSk1Cw0=
Subject key identifier:   89:F5:8D:64:90:7D:B2:C7:36:85:1A:A4:53:1A:15:4A:41:CB:92:68
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       7095FDAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifWNZJB9ssc2hRqkUxoVSkHLkmg.roa
Signing time:             Mon 07 Mar 2022 21:10:35 +0000
ROA not before:           Mon 07 Mar 2022 21:10:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888877996 (0x7095fdac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  7 21:10:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89f58d64907db2c736851aa4531a154a41cb9268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ce:32:63:21:a4:e0:41:90:47:65:a1:91:49:
                    0f:ba:78:5a:05:e6:03:e3:b2:eb:f1:83:e6:76:54:
                    f0:73:35:96:82:6e:88:45:bf:8e:06:0f:54:04:75:
                    82:15:24:12:3c:53:e9:98:3a:ba:98:80:84:8a:84:
                    1d:03:e4:0d:12:9d:04:91:11:1a:94:2d:4a:da:41:
                    ec:04:0f:01:32:1c:b2:b2:6d:99:fd:80:52:8e:11:
                    f0:7e:36:01:11:e9:3a:64:d1:0b:5f:ff:e3:62:1c:
                    5d:48:da:a9:36:a5:dc:02:af:16:b9:e0:2e:a9:c6:
                    ff:8e:74:c6:2b:9a:f0:a7:bc:5a:4c:9d:49:58:63:
                    e5:ee:43:4d:55:01:93:32:94:b1:15:2e:cf:0a:52:
                    61:41:8a:67:1c:34:93:37:e9:cf:91:b0:f9:5f:3e:
                    da:cf:3c:85:d1:90:39:1a:cb:e1:8c:d6:4c:a4:62:
                    c2:a6:3d:1e:8b:17:fa:3e:93:ea:53:42:22:c2:8a:
                    82:61:be:79:c9:ec:6c:e6:2b:1f:2a:0e:29:1b:8c:
                    9f:f1:2d:36:9a:e3:2d:40:ba:c3:2f:8d:94:29:52:
                    c9:be:92:4b:18:53:bf:c3:3b:60:d4:b4:65:26:a2:
                    72:91:42:29:3d:27:91:ea:27:8e:d1:8b:70:ae:34:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F5:8D:64:90:7D:B2:C7:36:85:1A:A4:53:1A:15:4A:41:CB:92:68
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ifWNZJB9ssc2hRqkUxoVSkHLkmg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:51:bd:5b:4f:11:3f:8f:cc:2e:07:f5:43:23:b5:7b:7b:e8:
         80:a3:77:eb:e2:03:0f:9e:c3:99:b7:57:a6:e3:84:82:ee:89:
         93:fb:fa:20:f5:0d:3b:7e:6e:c9:b1:e3:24:1c:c9:f3:39:d6:
         b2:aa:2d:89:1d:d5:b6:64:bf:9b:b2:9e:23:78:61:a3:f3:14:
         d2:5d:f5:ac:37:8f:b2:d9:81:0b:49:e8:64:d6:d2:98:5b:9c:
         8a:a5:41:69:72:95:bb:73:e3:22:66:50:92:c9:2a:90:59:32:
         c7:79:8e:ff:8a:a7:74:83:f1:95:49:ad:27:57:02:da:03:c6:
         d0:3e:8a:cf:c3:cc:a6:f5:3b:bf:07:d5:53:a9:82:09:85:42:
         8a:fd:69:90:1b:e9:05:52:4f:63:38:22:9a:85:d6:ca:f0:37:
         6c:53:5c:72:89:9c:8a:39:28:e6:9f:8a:9a:ba:49:d2:ab:9a:
         53:79:3b:4d:0d:ca:16:87:a6:9f:a5:02:08:b3:e2:3b:a5:91:
         50:a1:f0:d0:53:ea:4b:ad:84:75:66:62:22:3e:3c:be:92:ff:
         f9:4b:e1:6b:d2:55:c6:3c:ef:25:f5:de:a4:f7:54:c9:24:68:
         4c:8b:81:c1:1c:a0:68:c4:9a:c4:ce:f9:28:40:62:90:a5:e5:
         3a:64:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:21:49 2025 by rpki-client