Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwii8uAvKCG9DQlHyEGp81ZKJfY.roa
File:                     kwii8uAvKCG9DQlHyEGp81ZKJfY.roa (raw, json)
Hash identifier:          b+DuMh2BFqB5/F0e26KSW5WQOZk1opmRNaMgVRg5obs=
Subject key identifier:   93:08:A2:F2:E0:2F:28:21:BD:0D:09:47:C8:41:A9:F3:56:4A:25:F6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186E3DEAE6BA63032559331EF2D7F103F90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwii8uAvKCG9DQlHyEGp81ZKJfY.roa
Signing time:             Wed 15 Mar 2023 06:04:26 +0000
ROA not before:           Wed 15 Mar 2023 06:04:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:e3de:7c75/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e3:de:ae:6b:a6:30:32:55:93:31:ef:2d:7f:10:3f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 15 06:04:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9308a2f2e02f2821bd0d0947c841a9f3564a25f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:82:4a:23:61:c5:2c:c1:f5:69:2c:49:1c:
                    74:8b:76:9b:da:d0:d0:9c:a5:14:80:4c:a8:2b:c9:
                    b0:5d:c4:fe:a3:2a:fd:c5:72:b0:c7:4c:21:06:2f:
                    1a:b5:33:07:2f:3b:0b:a4:61:48:60:79:ed:5a:08:
                    76:18:ab:c6:99:95:aa:fb:41:4a:12:b9:7d:0d:68:
                    7e:79:2e:a6:a3:d0:ea:9c:05:62:2e:64:7a:bb:3a:
                    21:8f:7a:62:0c:af:54:67:9d:ed:c5:36:a3:21:27:
                    24:c4:c7:6f:3f:86:59:d4:03:a2:2c:f9:3b:c7:3d:
                    ae:0a:51:ee:3f:98:fc:fd:82:d8:bb:20:d4:ff:3e:
                    f9:a4:32:38:19:c1:90:7a:43:26:60:84:dd:91:64:
                    95:8a:f3:0f:3a:8f:9f:cb:d7:43:ca:41:0e:79:f4:
                    c2:1f:af:9c:78:1f:20:87:c6:bb:e5:fc:52:aa:b0:
                    71:75:71:68:f9:ed:5c:19:d8:97:1c:b1:6d:76:ef:
                    1b:df:a0:5c:b7:f4:de:5e:af:53:b9:ff:55:32:b4:
                    83:c4:73:a4:be:bd:87:5b:65:c4:6e:0c:98:53:6d:
                    e7:6e:9d:76:f4:ad:00:48:f2:9a:c6:b4:d4:d1:2e:
                    b8:ad:ee:e8:79:7f:55:4a:97:13:0b:20:fd:e3:4e:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:08:A2:F2:E0:2F:28:21:BD:0D:09:47:C8:41:A9:F3:56:4A:25:F6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kwii8uAvKCG9DQlHyEGp81ZKJfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:09:5f:1f:78:80:2a:1a:6f:42:99:fc:03:b7:63:77:75:0f:
         b8:61:5d:03:ba:02:02:e6:30:ce:48:4f:64:5f:b3:e3:5a:27:
         4b:a7:f7:c1:68:6f:0b:67:4b:7b:ce:e1:cc:2d:68:a2:d8:b2:
         29:93:1a:89:d2:25:37:90:07:3f:f2:65:aa:ed:b5:37:ff:36:
         9d:80:eb:07:fc:8d:a2:0a:22:56:56:3a:f4:e8:28:b8:df:1a:
         08:34:0f:15:53:0f:09:cb:ad:08:32:93:9b:ca:f2:e2:17:52:
         8d:cf:95:fe:d8:2d:6c:ed:b8:a2:6f:97:8d:0f:20:36:6a:d8:
         40:1e:12:83:e2:4b:aa:20:c6:d7:47:89:c1:a7:77:22:ad:84:
         c8:e4:fd:3c:f4:5b:97:c1:f2:77:4b:1d:d8:0a:b0:bb:97:4e:
         68:68:d0:db:3e:33:81:68:49:dd:de:5f:91:bd:b9:52:e9:5e:
         67:f7:0d:1c:13:1d:c8:d7:ca:23:dd:76:03:de:cf:98:07:d4:
         04:74:07:b9:af:5c:b0:7a:05:a6:f9:08:b1:b1:a3:1a:cb:3b:
         79:28:32:8d:3c:4e:95:62:88:d7:05:e8:fa:97:2f:24:af:5f:
         69:15:c1:1e:3a:a6:c0:09:64:c2:0b:32:7b:56:94:f2:2c:1f:
         1e:92:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:04:52 2025 by rpki-client