Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWg8CorbJeC87dT39hAHt_-8h3g.roa
File:                     rWg8CorbJeC87dT39hAHt_-8h3g.roa (raw, json)
Hash identifier:          dVabWiohd8zAZDz1yVXDdo+0owjDuNODM5/4iklxzFA=
Subject key identifier:   AD:68:3C:0A:8A:DB:25:E0:BC:ED:D4:F7:F6:10:07:B7:FF:BC:87:78
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       8DF30606
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWg8CorbJeC87dT39hAHt_-8h3g.roa
Signing time:             Sun 19 Jun 2022 01:09:44 +0000
ROA not before:           Sun 19 Jun 2022 01:09:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
                          2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
                          2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381514246 (0x8df30606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 19 01:09:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad683c0a8adb25e0bcedd4f7f61007b7ffbc8778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3f:cc:58:2b:98:57:88:23:7f:de:5d:67:c7:
                    d4:c8:5e:16:90:47:91:d2:7e:66:22:4e:dc:c9:3b:
                    2a:41:4b:db:fb:89:1f:17:1b:99:70:7a:16:ac:12:
                    3e:aa:23:c9:36:18:35:4e:83:a9:f1:a6:e4:9d:ea:
                    51:b4:be:09:4a:0d:d6:51:20:1a:d8:86:33:76:3f:
                    57:ac:50:c4:70:4b:27:39:fa:ae:42:76:ea:4d:d1:
                    be:f8:45:ff:38:64:ec:84:2d:02:3a:02:7a:b3:ff:
                    81:6e:b4:be:e9:76:1e:0b:2c:f1:b5:ca:4d:16:6e:
                    4f:33:63:d8:40:12:d4:5f:54:e1:86:86:95:ef:21:
                    3a:7d:85:ce:47:5c:6c:6c:ad:54:a6:09:dd:d5:c0:
                    61:95:17:ae:06:39:f9:94:18:6a:07:48:a3:09:21:
                    de:cc:3b:da:48:92:c9:ed:b7:6f:7a:3e:45:7f:b7:
                    2c:7c:f9:0d:63:75:3d:9c:53:16:3d:32:e0:74:f7:
                    54:d0:99:d1:af:a7:2d:7a:5c:e1:5d:07:a1:10:4c:
                    6b:00:5e:83:0f:56:73:b0:42:cb:c7:a3:00:ec:96:
                    62:dc:b3:0a:ea:b2:6c:46:c9:14:3e:44:3f:16:8e:
                    c0:85:9a:7a:f8:44:4c:1c:5f:d0:c7:41:df:b6:eb:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:68:3C:0A:8A:DB:25:E0:BC:ED:D4:F7:F6:10:07:B7:FF:BC:87:78
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWg8CorbJeC87dT39hAHt_-8h3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:f1:1a:22:b8:02:3a:91:85:b9:ce:67:77:c3:97:6c:f3:84:
         c9:09:92:80:05:29:9a:87:b1:4b:dd:f0:7b:38:bd:b5:23:26:
         1d:8b:fd:2c:60:54:6a:ae:4c:59:b1:03:0c:0d:f9:d4:0c:4c:
         5c:5d:8f:a3:5d:ea:f0:f0:1b:67:5c:74:0a:73:52:7f:9c:47:
         34:be:8e:7b:b4:56:8e:5f:3d:df:a8:84:82:9d:6c:b5:92:c3:
         04:71:18:02:f7:30:a5:ee:00:9a:f5:e8:c4:1f:4d:35:e2:28:
         e8:ee:7d:e0:24:49:75:3e:97:cc:ad:1d:39:db:77:26:ec:5a:
         99:e6:a2:d5:c7:1e:47:09:f7:5b:3c:b5:ff:7c:5f:08:9c:2b:
         80:ed:2e:78:96:e1:5e:c2:cf:aa:90:80:09:c4:08:fc:fc:99:
         9e:77:59:da:0d:77:c6:dd:7c:3c:78:68:86:0a:8e:c4:e7:eb:
         02:97:ed:86:ca:62:43:0d:26:d4:a9:a5:22:4f:61:b0:fc:69:
         ae:fd:b9:48:48:79:ba:8b:11:49:49:29:d3:58:d8:b0:ca:b2:
         55:71:44:d7:23:c4:b2:d1:58:0b:6d:f5:98:7f:9b:04:ee:64:
         f7:36:8e:cd:2e:cf:7d:98:f4:19:fb:19:d5:af:20:28:22:ad:
         e8:74:f1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:39:12 2025 by rpki-client