Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nk3qOOz7F8j-kJMrhwNzj_aDGAo.roa
File:                     nk3qOOz7F8j-kJMrhwNzj_aDGAo.roa (raw, json)
Hash identifier:          VUDl+Z1qWsnXe5TfEG72TtgG4E0ov10RSNI8ZIOxCAE=
Subject key identifier:   9E:4D:EA:38:EC:FB:17:C8:FE:90:93:2B:87:03:73:8F:F6:83:18:0A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       7B223234
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nk3qOOz7F8j-kJMrhwNzj_aDGAo.roa
Signing time:             Thu 14 Apr 2022 05:09:54 +0000
ROA not before:           Thu 14 Apr 2022 05:09:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065838644 (0x7b223234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 14 05:09:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9e4dea38ecfb17c8fe90932b8703738ff683180a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:08:bc:4c:28:f5:81:81:ed:2f:af:b5:7c:
                    51:95:23:11:5b:8e:17:fe:77:60:ac:0a:a6:a1:a7:
                    2f:bd:97:d6:40:4b:8c:59:2b:09:cd:74:b8:a3:3a:
                    d4:b2:4e:e1:04:b6:ce:22:bd:45:d2:94:e4:72:ab:
                    e4:0b:3e:75:c9:7a:86:9b:c6:d1:8c:01:58:66:ee:
                    5f:9b:30:16:cc:03:6e:99:e3:95:a5:47:50:26:33:
                    05:d2:c3:b4:c5:ec:5d:08:2a:b6:87:25:dc:38:e7:
                    ca:e0:43:64:cc:1c:96:7f:6e:02:26:27:e6:58:73:
                    d9:40:db:dd:81:a6:b8:98:94:f3:d1:52:fc:4a:61:
                    37:2a:f8:32:43:c8:ba:6f:91:75:1f:90:79:aa:e5:
                    a7:0a:7e:14:da:9f:d7:1a:fe:03:b4:c7:1a:81:9d:
                    f8:d4:fa:c2:88:18:30:33:5a:fa:86:26:d2:67:a4:
                    35:4f:84:2c:db:f3:63:63:42:74:91:6f:30:13:ee:
                    f9:cd:b8:66:d7:23:e9:44:4b:ad:06:3c:82:a7:4c:
                    5c:b6:42:e5:04:24:e1:ad:03:26:72:43:6a:2d:09:
                    b4:6e:bc:87:bf:e1:98:0e:ea:81:8c:fe:96:42:21:
                    48:a5:eb:bf:84:53:84:82:cb:e6:f2:83:3e:8d:da:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4D:EA:38:EC:FB:17:C8:FE:90:93:2B:87:03:73:8F:F6:83:18:0A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nk3qOOz7F8j-kJMrhwNzj_aDGAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:fc:82:29:df:5c:44:72:a7:af:89:11:5f:aa:dc:4c:9d:f8:
         1e:17:06:8d:63:95:8d:3b:cd:b4:6a:8d:1e:44:ce:f8:07:62:
         3b:7b:d9:28:fc:82:41:6e:56:77:aa:4f:9a:08:c2:09:b4:3e:
         03:b7:55:fa:50:ff:b4:08:8e:49:3c:91:dd:1f:e7:40:b0:72:
         59:74:ca:80:15:9b:3d:ac:f1:04:51:65:ef:f6:22:97:a4:99:
         31:c2:ae:6c:ac:51:f8:d8:dc:ed:6e:25:d4:59:b7:ef:f6:55:
         bb:5e:9a:ee:37:48:21:15:2a:78:c1:35:86:19:b8:ab:75:3d:
         7a:f2:f4:78:99:74:c3:9e:8b:e5:96:df:e4:b7:62:01:a3:16:
         1d:b3:06:9d:21:43:76:2d:ea:af:9c:4a:3b:2b:ab:71:54:34:
         eb:41:67:c3:93:f2:b6:7c:39:85:85:95:83:32:1d:69:de:86:
         a4:76:ed:66:1d:81:60:20:4f:94:02:11:29:56:3c:b7:31:f1:
         a9:38:e5:13:b4:bb:c2:21:d7:00:ff:81:f5:55:06:55:44:70:
         13:c3:0f:34:dd:9a:8e:c8:07:2e:b4:c8:d2:51:5e:6e:8b:36:
         d0:9b:31:10:94:1e:70:78:b7:6d:47:c5:08:c2:4c:f7:2d:a5:
         50:4e:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:30 2025 by rpki-client