Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0-BuaMiM94YHu4RjuJbcgHh9K4.roa
File:                     k0-BuaMiM94YHu4RjuJbcgHh9K4.roa (raw, json)
Hash identifier:          IPzxbDf6wLRoMqWgFFDDiGqHgTGhOItIb2a2KBQJeLM=
Subject key identifier:   93:4F:81:B9:A3:22:33:DE:18:1E:EE:11:8E:E2:5B:72:01:E1:F4:AE
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187150B7C3C0C096CEAD7858F4158203E51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0-BuaMiM94YHu4RjuJbcgHh9K4.roa
Signing time:             Fri 24 Mar 2023 19:14:46 +0000
ROA not before:           Fri 24 Mar 2023 19:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:15:0b:7c:3c:0c:09:6c:ea:d7:85:8f:41:58:20:3e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 24 19:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=934f81b9a32233de181eee118ee25b7201e1f4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:53:08:7e:38:68:c0:a6:2c:99:2e:83:03:
                    55:98:c3:8e:c2:4b:3b:cc:2f:c5:e7:32:75:74:9b:
                    9b:a3:05:83:ad:9b:78:79:08:59:71:71:2d:7d:c3:
                    cf:8d:65:8a:0d:28:46:3c:49:15:83:3d:c2:3b:87:
                    a5:5a:d1:ef:47:55:ba:25:2b:51:b4:92:c1:09:44:
                    81:bc:24:aa:21:98:c9:6a:0f:a8:0d:8f:58:b6:b8:
                    ce:af:6a:44:e9:27:4d:22:5e:88:92:2d:69:8c:b7:
                    46:94:62:7c:d4:4f:b1:83:e9:9e:54:eb:d3:34:16:
                    bc:b6:bd:d0:f3:dc:0c:67:b2:87:56:2f:ab:b7:59:
                    90:ec:96:5f:ba:7c:da:db:d6:b0:6c:dd:f6:8c:67:
                    cf:7e:f2:55:86:a0:5d:cb:b0:55:c7:36:55:8b:f5:
                    d1:18:7f:e5:17:be:6d:6f:88:3a:16:a2:88:ed:35:
                    1d:b0:c4:6b:72:31:67:41:33:de:ed:db:34:1b:c5:
                    f1:15:26:b0:c1:2a:bf:d4:63:52:8e:2b:73:e3:8c:
                    2e:81:4b:61:02:b5:52:c0:3c:8d:8b:76:40:73:27:
                    65:1a:3c:21:4a:ca:cf:6b:82:37:a8:bd:65:49:8e:
                    54:c0:68:e5:9b:2a:e4:46:32:67:71:75:da:32:bf:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:81:B9:A3:22:33:DE:18:1E:EE:11:8E:E2:5B:72:01:E1:F4:AE
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0-BuaMiM94YHu4RjuJbcgHh9K4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:c0:d6:9c:40:05:36:33:d3:2b:a7:00:ca:d1:64:2d:c3:2d:
         de:9c:1d:26:18:d1:7b:57:f4:02:05:84:8e:09:d5:b7:bf:5f:
         a1:39:6e:7d:7c:e1:18:7d:ec:27:06:6c:21:bc:54:41:93:6e:
         f2:89:e2:e0:38:9c:55:a2:4f:f8:4b:d3:e8:a2:32:37:96:50:
         2d:4b:c0:f9:03:f5:02:90:bd:8f:97:cf:66:b4:3c:55:d2:ac:
         b3:69:ab:21:d7:71:c4:69:94:c5:6b:ee:d7:58:e6:62:cd:a2:
         43:56:b5:3e:04:84:58:7e:98:60:8a:e0:04:d8:f8:bf:67:0f:
         fa:65:ef:27:0e:2b:42:6f:34:aa:c6:ed:82:2d:d9:3e:2a:87:
         22:88:31:46:98:50:93:1e:de:32:1d:66:98:99:6e:02:ad:fe:
         d0:1b:73:51:3e:bc:b8:e2:d4:e0:ff:55:82:b6:19:2e:ae:81:
         c6:cd:93:4a:ed:01:c0:ec:c1:3a:be:71:ad:5b:24:f0:97:47:
         f0:59:30:a8:70:95:a2:47:75:7b:10:61:cf:fd:91:6e:97:eb:
         a5:b7:66:17:fd:8b:f7:d9:75:1b:8b:13:24:da:70:f9:72:b0:
         fa:4f:a8:7e:ae:3e:a4:85:09:3d:fa:2e:05:e4:8a:22:ab:3f:
         63:c4:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:26:37 2025 by rpki-client