Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRoq5nXbqltu7oEzQFD6l8Je4Eo.roa
File:                     kRoq5nXbqltu7oEzQFD6l8Je4Eo.roa (raw, json)
Hash identifier:          GhWgjbx9RoiLBglNum2YKUUXnGcjCkKubgW4KhuITCc=
Subject key identifier:   91:1A:2A:E6:75:DB:AA:5B:6E:EE:81:33:40:50:FA:97:C2:5E:E0:4A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01886EEC601A4151705F2B4D8C05C3A67625
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRoq5nXbqltu7oEzQFD6l8Je4Eo.roa
Signing time:             Tue 30 May 2023 23:09:24 +0000
ROA not before:           Tue 30 May 2023 23:09:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6e:ec:60:1a:41:51:70:5f:2b:4d:8c:05:c3:a6:76:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 30 23:09:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=911a2ae675dbaa5b6eee81334050fa97c25ee04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a9:30:a9:1a:6b:0a:36:12:de:37:08:5d:c2:
                    bf:1c:bb:5e:8e:fa:7c:67:b3:48:ae:fb:99:3c:f5:
                    6b:a2:d8:4d:17:fa:4f:5e:0f:bf:e3:ce:54:df:c9:
                    ce:32:31:a7:23:1d:da:bd:2e:df:a5:4c:ce:0e:da:
                    f4:cb:67:d8:b7:6f:30:5d:62:67:62:9a:73:20:ec:
                    b8:fe:1d:a4:18:81:68:2c:74:a9:c3:82:32:df:14:
                    fd:bf:d2:13:c2:8c:39:50:98:b2:fd:ac:57:b3:6f:
                    8d:d7:36:55:6c:b3:2c:3d:da:1c:32:4c:d0:63:c7:
                    87:49:a1:42:e5:40:40:f6:d5:d1:a7:09:a8:ca:5a:
                    2e:b7:86:80:56:aa:c6:e7:73:78:54:91:5d:3e:aa:
                    b4:b4:9d:b6:6c:bd:4d:29:1b:af:11:6a:69:bf:ce:
                    d1:09:9d:29:e6:da:dc:04:dc:85:62:ad:d7:9a:ce:
                    15:c7:2a:ab:87:63:2b:12:e1:00:e2:83:13:c4:50:
                    91:1f:c4:09:65:f1:5c:4f:3d:67:93:1b:a3:5f:4a:
                    1d:de:d9:77:55:ff:bb:00:ae:59:09:3c:ac:73:b5:
                    cf:df:18:d4:f4:33:fc:20:c2:8f:5b:4b:45:83:83:
                    98:1c:e4:64:6a:65:01:fc:b5:0f:83:06:38:5f:9c:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1A:2A:E6:75:DB:AA:5B:6E:EE:81:33:40:50:FA:97:C2:5E:E0:4A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kRoq5nXbqltu7oEzQFD6l8Je4Eo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:fa:4e:1c:dd:11:b5:90:2a:7b:73:c5:2a:52:6b:81:fd:10:
         bc:c5:d8:6e:17:f9:7b:1f:df:09:8c:90:c8:58:d4:16:b3:58:
         b8:ce:3c:6d:e7:7d:86:a7:af:31:f6:42:83:27:72:c7:b8:2d:
         43:bf:17:78:04:7c:3d:19:8c:44:a8:6f:2f:75:f4:fe:df:7d:
         b2:bd:ea:cd:9f:f4:0e:20:76:a9:0b:e7:9f:86:24:59:25:ff:
         59:5b:a5:01:fa:89:83:29:6a:13:9a:22:ef:10:39:04:0f:af:
         96:b5:e0:05:66:23:b8:e2:69:5f:31:e8:a6:8d:01:f1:1e:d2:
         2e:a7:f6:70:65:af:57:91:21:a1:e6:9f:2b:92:2f:ca:18:4f:
         06:68:35:0b:3d:e8:36:fa:07:39:29:53:2b:e9:b8:b9:95:d1:
         9d:b4:13:9e:d7:5f:a2:c0:63:de:05:12:a3:a0:c0:ab:23:d4:
         6e:b8:25:b3:fe:8a:a1:02:4b:50:58:4c:e4:5d:2e:d9:b8:64:
         65:40:fb:2d:82:73:82:61:e1:4c:76:2a:93:f3:b1:7e:45:d8:
         4a:2a:98:11:8a:80:f4:df:c7:38:84:9a:9d:0d:71:01:39:28:
         47:d4:04:b2:cc:bc:cc:e7:79:47:9f:5d:46:28:52:4f:11:b9:
         4b:d0:b1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:59:45 2025 by rpki-client