Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVHzNSZs26sRemN425yqJRF_4AQ.roa
File:                     qVHzNSZs26sRemN425yqJRF_4AQ.roa (raw, json)
Hash identifier:          2QX5J+MHcgmS6h7xGhXPoyunsIIV8M4EMk9DtmS398o=
Subject key identifier:   A9:51:F3:35:26:6C:DB:AB:11:7A:63:78:DB:9C:AA:25:11:7F:E0:04
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187B43FEF2A675D80CA58F0C22F6675E3D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVHzNSZs26sRemN425yqJRF_4AQ.roa
Signing time:             Mon 24 Apr 2023 17:11:41 +0000
ROA not before:           Mon 24 Apr 2023 17:11:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b4:3f:ef:2a:67:5d:80:ca:58:f0:c2:2f:66:75:e3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 24 17:11:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a951f335266cdbab117a6378db9caa25117fe004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:f8:b9:fb:5e:87:6d:c4:3d:04:ef:4b:4a:
                    2a:fe:fc:41:f2:3b:d3:66:ac:7b:80:10:52:7f:97:
                    3f:35:3f:78:56:51:17:c6:4b:1e:85:70:19:62:c7:
                    8d:96:f8:f5:43:df:97:aa:68:12:bc:2e:74:ed:3a:
                    47:f5:4a:8d:11:7f:18:68:e1:ec:cb:aa:9b:33:35:
                    d9:af:6d:d5:2e:c2:a9:de:c2:5b:b0:9f:2f:b4:d9:
                    93:d7:0d:31:7e:17:0a:39:0d:6c:1c:ee:14:37:5d:
                    7a:d2:87:91:a6:fa:f1:a5:b0:37:8d:68:24:de:1b:
                    d4:e4:eb:9c:2d:78:77:46:0c:d3:28:17:28:08:70:
                    eb:3b:f6:ba:08:c6:f8:6f:9a:30:34:a0:48:31:a4:
                    a5:7c:a5:0c:4a:05:c5:60:7d:bb:28:97:6c:28:6a:
                    0e:2b:88:bb:3d:4d:3f:ae:2c:cb:80:f8:1d:03:c3:
                    82:ca:43:1f:04:2d:94:68:70:04:3e:72:43:e1:07:
                    71:30:6c:5d:27:8f:f3:f4:91:31:12:4e:2b:87:97:
                    95:9f:23:5b:1b:54:17:0a:26:15:1c:1b:f0:2e:e7:
                    41:ab:ad:3e:f7:e0:cf:55:9a:9a:a0:c6:cc:89:6d:
                    84:37:87:58:28:4d:11:2c:58:30:35:98:ea:ba:50:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:F3:35:26:6C:DB:AB:11:7A:63:78:DB:9C:AA:25:11:7F:E0:04
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qVHzNSZs26sRemN425yqJRF_4AQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:05:6b:ad:53:a9:f9:8a:25:00:3e:f2:ac:48:f7:3c:b5:79:
         f0:7f:10:5d:b0:db:9b:70:be:73:8e:bb:5e:ca:1f:f5:7f:98:
         8b:2f:de:c5:08:e7:b7:75:77:aa:1c:c9:7e:fc:74:20:c8:1b:
         f6:0a:8b:0c:0d:b4:a1:7f:ec:32:f0:b0:d1:34:94:7d:f2:95:
         6a:33:02:3c:48:24:b3:84:16:29:a2:ab:b4:b4:0f:c0:13:cf:
         88:cb:65:31:16:92:8e:5e:43:6a:1a:2f:c2:a5:cb:70:93:f7:
         9d:0e:6d:56:32:a8:70:cf:eb:12:62:78:e7:9e:4c:d4:23:f9:
         58:ca:12:f5:73:49:5e:67:6e:53:ab:12:1e:30:17:4b:e1:bf:
         c2:3f:48:1e:49:e6:be:2f:7a:bd:66:6b:db:0d:48:4c:4b:55:
         c2:e9:65:6e:1e:11:fe:e7:dc:e7:e9:79:cf:d5:6b:75:67:52:
         a4:7f:0b:3b:37:40:50:18:17:7e:cf:13:a1:5b:2d:30:46:9a:
         95:34:10:64:3c:94:10:50:cf:62:11:87:c9:cf:14:f3:28:8c:
         20:27:0e:40:cc:a7:71:2c:df:00:e6:a5:62:f3:f6:88:5f:28:
         e5:a8:2b:a2:09:f0:01:28:a6:6c:f2:cf:43:72:45:40:ce:f2:
         a9:fd:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:08:33 2025 by rpki-client