Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzxam7aHtFQtvWXrO5p-lprIjaE.roa
File:                     kzxam7aHtFQtvWXrO5p-lprIjaE.roa (raw, json)
Hash identifier:          mXe0wdiNF4bQDyqb83kIy3GaUcJ//F05fGmd8XefWg0=
Subject key identifier:   93:3C:5A:9B:B6:87:B4:54:2D:BD:65:EB:3B:9A:7E:96:9A:C8:8D:A1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018325655CF91766C87F8BAE98CEFDD6C8C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzxam7aHtFQtvWXrO5p-lprIjaE.roa
Signing time:             Sat 10 Sep 2022 03:15:43 +0000
ROA not before:           Sat 10 Sep 2022 03:15:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
                          2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
                          2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:25:65:5c:f9:17:66:c8:7f:8b:ae:98:ce:fd:d6:c8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Sep 10 03:15:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=933c5a9bb687b4542dbd65eb3b9a7e969ac88da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:29:4d:73:4c:61:6e:b3:53:63:90:23:bf:
                    80:da:02:a8:6c:3c:58:09:4a:4c:97:0d:68:50:de:
                    3b:a3:92:3f:ee:6f:c8:34:b0:81:e5:6c:9c:04:e1:
                    29:f2:79:35:a6:15:21:44:fa:66:67:93:3f:0b:38:
                    11:4f:73:42:85:65:f7:f0:e7:48:e0:1f:a5:55:8a:
                    ca:f5:84:e4:3f:90:d6:83:59:cd:ac:40:80:b4:e2:
                    9a:13:b9:9c:7b:87:e1:d6:7b:b9:76:06:86:d2:ba:
                    0e:48:23:4c:ad:d7:3b:8a:38:2e:de:8b:ab:af:ca:
                    04:fa:05:8f:4f:27:99:50:fe:6e:19:ff:84:36:ce:
                    00:fe:7b:3b:87:dc:84:e9:57:a5:97:c5:b3:eb:ee:
                    43:79:21:55:f5:e3:d2:d2:2a:7e:7e:b7:79:db:e6:
                    dd:b3:d1:f2:b8:9c:62:9e:68:9e:5b:00:d2:fa:6b:
                    ff:00:82:8d:af:a5:25:12:e0:1f:c0:92:b2:69:0c:
                    a0:13:3a:5e:18:32:56:6f:e0:4b:a4:89:c9:f9:6a:
                    f8:ea:a6:19:4c:4e:14:ae:42:51:6a:2a:82:aa:11:
                    a8:5c:21:68:f3:1e:b6:01:9e:b3:15:53:c7:17:67:
                    d1:5f:5b:57:e8:85:23:b0:2d:15:3d:6a:cc:d5:d7:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:5A:9B:B6:87:B4:54:2D:BD:65:EB:3B:9A:7E:96:9A:C8:8D:A1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzxam7aHtFQtvWXrO5p-lprIjaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:53:d0:0d:41:e2:a8:ca:88:e4:a1:aa:f0:6a:f3:e0:79:
         72:8d:62:93:c0:10:79:47:40:8e:44:7d:65:73:55:c2:1e:5b:
         64:28:bb:eb:40:8d:98:d5:c4:f2:0e:ca:14:05:88:8e:bd:59:
         af:09:af:51:df:b5:e1:1b:e2:be:9d:30:c4:14:4d:19:dc:ca:
         aa:80:84:2a:cd:d8:30:25:28:78:14:c9:e2:b0:95:80:e6:7d:
         ae:6c:06:63:cf:48:f5:fc:8b:39:45:c9:51:c9:1a:d6:fd:9b:
         9e:d2:05:43:3a:f0:bb:5e:e7:5d:42:57:e9:6b:93:4e:f9:f2:
         1f:90:6e:f6:f8:e8:81:b5:31:20:34:4d:10:bc:94:74:2f:a2:
         1f:60:0b:d7:0c:fa:af:1c:0a:7e:f7:f9:07:90:6b:16:8c:5f:
         4f:0d:51:90:f6:e5:74:f6:52:78:fc:24:60:29:58:82:47:c2:
         a9:f5:03:44:2d:fa:f1:50:4d:25:b0:60:fa:b1:74:2e:4f:e9:
         31:02:bf:fd:e0:32:e2:6a:4e:3a:8c:bd:ed:89:7e:ab:a4:dc:
         be:dd:55:b0:70:2b:af:ff:f7:47:cd:6f:c2:1e:53:29:79:f9:
         ee:83:9c:d0:03:42:84:97:95:50:27:dc:14:3c:38:29:3a:04:
         af:3b:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:33:07 2025 by rpki-client