Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sPtGkqdeZrAqcny2EOD1hTl7498.roa
File:                     sPtGkqdeZrAqcny2EOD1hTl7498.roa (raw, json)
Hash identifier:          Ja2FGGa6R4WC8lJvqTYyWDDTSB9SeWIsKUF4NA5zHpg=
Subject key identifier:   B0:FB:46:92:A7:5E:66:B0:2A:72:7C:B6:10:E0:F5:85:39:7B:E3:DF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018455ACB658A77D8439E7CA55B248E259D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sPtGkqdeZrAqcny2EOD1hTl7498.roa
Signing time:             Tue 08 Nov 2022 05:18:12 +0000
ROA not before:           Tue 08 Nov 2022 05:18:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
                          2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:55:ac:b6:58:a7:7d:84:39:e7:ca:55:b2:48:e2:59:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Nov  8 05:18:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0fb4692a75e66b02a727cb610e0f585397be3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:38:5c:03:e0:35:fb:78:f9:8b:d5:0c:69:
                    12:49:c6:d2:ad:0b:d0:27:b7:df:26:77:6c:08:f1:
                    8c:83:71:2b:ff:f0:76:66:86:bd:c3:f0:6a:e3:84:
                    60:14:22:6c:1e:28:d7:d4:52:40:80:19:40:62:80:
                    0b:ce:5b:8d:ed:8d:84:70:78:99:75:22:fe:78:67:
                    11:11:7c:d1:80:46:2f:8a:c3:0b:09:68:2d:a0:cc:
                    f4:a1:bc:2a:9a:1f:6c:45:78:56:75:41:df:b3:6e:
                    e6:df:bc:29:b9:b9:f1:57:37:87:76:b5:41:7e:19:
                    b7:fe:f1:31:c0:95:29:8f:b0:78:9a:77:66:39:be:
                    c0:54:43:ab:62:8d:b9:bc:d9:e3:29:33:7a:31:2e:
                    0d:2e:f7:96:13:23:07:fe:0d:9f:f6:ef:63:7a:66:
                    62:a0:c4:fa:cd:fe:5e:49:a8:4e:45:59:99:e6:2b:
                    fb:ed:c8:92:64:cd:eb:3e:9c:28:0d:19:19:dc:bc:
                    c0:75:87:0d:dc:95:73:db:46:56:33:f3:ff:5f:54:
                    6f:01:92:f9:4d:41:c4:79:dc:75:30:4b:18:8a:dc:
                    ee:ab:c1:11:40:c7:83:9f:a2:f8:fa:f2:12:51:e4:
                    7b:a2:8a:75:4f:31:55:16:25:b4:8b:49:d7:3f:34:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FB:46:92:A7:5E:66:B0:2A:72:7C:B6:10:E0:F5:85:39:7B:E3:DF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sPtGkqdeZrAqcny2EOD1hTl7498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:75:66:04:73:03:10:06:95:fc:d6:20:c9:4a:21:e6:2f:
         96:48:ab:9f:ab:a5:15:42:53:ca:04:6b:be:ee:50:27:24:7e:
         16:7f:10:94:bd:1c:1b:e4:b8:c6:bf:61:59:c6:db:8a:75:b6:
         9e:70:a6:b9:f2:5d:35:dc:11:1e:98:9b:eb:b9:be:a9:e2:2f:
         1e:9e:4a:eb:b1:9a:aa:18:00:f8:14:44:8b:00:ec:dc:62:42:
         f4:02:2f:41:a3:01:f9:a0:77:63:0a:be:ed:33:80:48:64:28:
         e5:f1:a6:ee:e8:6d:6b:e1:8b:68:51:53:1b:d3:88:64:bf:8c:
         26:9e:d1:c8:3a:3d:62:15:75:5e:a7:ef:6f:81:b8:35:e3:26:
         a7:78:14:4c:2b:91:2b:31:af:1a:45:cd:22:7a:48:36:08:ea:
         0f:1b:69:22:60:e1:cb:7d:9a:2e:60:85:3c:4b:b6:aa:8b:e2:
         9d:0d:ef:cd:6d:90:ee:24:22:5e:a0:0b:5d:a9:0d:6d:c2:3c:
         95:4e:37:41:11:ca:ea:45:f8:c3:e1:77:4f:42:ed:17:7e:73:
         08:ae:24:32:92:4a:6a:6b:95:e1:b2:98:c1:66:e7:39:18:be:
         90:a9:71:fd:25:37:51:79:22:8c:da:e0:bc:9f:0e:78:87:9c:
         3a:7a:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:17:59 2025 by rpki-client