Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6z9CHpYfrrVq7lj3ePk_HzbjF8.roa
File:                     u6z9CHpYfrrVq7lj3ePk_HzbjF8.roa (raw, json)
Hash identifier:          JVP4yJtrS8FVG3RuJZ//hSALBDgwtBcdYNepmkWBggM=
Subject key identifier:   BB:AC:FD:08:7A:58:7E:BA:D5:AB:B9:63:DD:E3:E4:FC:7C:DB:8C:5F
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189A45343F35AFE18D3432A55FF1D0A4C66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6z9CHpYfrrVq7lj3ePk_HzbjF8.roa
Signing time:             Sun 30 Jul 2023 01:04:27 +0000
ROA not before:           Sun 30 Jul 2023 01:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:189:a453:20df/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:a4:53:43:f3:5a:fe:18:d3:43:2a:55:ff:1d:0a:4c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 30 01:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bbacfd087a587ebad5abb963dde3e4fc7cdb8c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:d0:87:03:df:1e:a9:10:27:66:c2:19:11:
                    25:f2:e6:e3:7e:29:2d:67:da:ff:ca:6f:b1:09:c1:
                    f5:ef:3a:b0:f7:73:3f:c3:84:f1:84:04:f5:77:30:
                    cb:37:39:76:34:d6:4b:43:23:8a:db:96:21:b4:ab:
                    17:4e:98:c5:31:9e:f9:f4:5b:e3:03:1d:aa:84:f3:
                    17:67:8d:94:9a:d0:19:73:11:2e:a7:c0:ee:bd:40:
                    1a:a5:80:bc:66:c0:fa:3f:88:68:78:ed:fe:59:0a:
                    f8:54:e7:7c:3c:47:83:70:08:80:5f:08:f6:20:8b:
                    eb:98:9c:34:0b:21:75:21:95:6f:c7:90:fd:15:da:
                    75:37:99:96:6e:d6:53:7d:d5:a8:99:22:3a:75:7f:
                    c4:ae:2c:ca:d8:b5:31:09:ae:7c:3d:14:26:32:68:
                    3b:4e:8a:8b:a6:4a:7d:a6:44:71:d9:01:46:5a:1b:
                    f1:b1:b3:4a:40:df:4e:e6:2a:de:76:5c:da:99:4b:
                    82:a6:ad:ef:20:27:9c:05:b0:cd:c2:7c:98:06:6f:
                    9f:21:66:e6:2e:95:12:8f:8c:ae:b0:d8:6c:70:7c:
                    75:93:ab:63:47:a4:0b:db:ea:92:26:fb:39:fe:ea:
                    70:84:e3:1a:13:db:27:ce:63:3e:2f:0f:7c:78:26:
                    c8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AC:FD:08:7A:58:7E:BA:D5:AB:B9:63:DD:E3:E4:FC:7C:DB:8C:5F
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u6z9CHpYfrrVq7lj3ePk_HzbjF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:d9:c5:dd:9d:b0:c8:23:ae:9e:0a:fd:e8:05:a5:3d:8e:
         f4:29:45:c2:fe:59:24:22:71:db:39:4e:55:34:6a:3c:01:67:
         bc:a5:17:31:f1:03:72:a4:a5:0e:68:97:60:d9:43:d6:db:8b:
         27:80:f7:4c:99:f2:42:ea:aa:06:50:e5:08:0f:e2:45:72:e4:
         ea:57:09:d3:92:8f:77:fc:41:d4:f8:0f:5a:c8:c1:0b:b1:33:
         6d:e2:f3:82:1f:fb:d2:5d:52:e9:cf:80:04:4b:6c:7e:d7:4e:
         f1:95:0a:d6:7e:96:31:e1:b9:46:85:12:f5:da:7f:19:17:49:
         6c:5c:d4:e8:d9:13:94:ce:4c:ac:17:15:41:0c:37:37:a7:45:
         66:c4:53:61:f7:ee:ac:a8:7b:10:86:ac:90:1d:3a:34:c0:3c:
         48:74:b8:4a:a5:7c:7c:b7:55:fe:7c:a6:e5:e8:38:41:2c:a8:
         95:c9:06:89:ac:19:59:eb:98:3b:3b:33:e5:24:52:75:81:48:
         4c:9d:40:11:3c:6a:5a:08:15:b6:30:ac:b9:15:b0:5a:e9:fb:
         d6:9c:87:1b:38:b8:a9:24:17:60:78:06:59:14:10:8c:8b:b5:
         56:d8:68:be:aa:25:36:b0:65:fa:1c:28:fe:16:5c:ab:c9:51:
         4d:ad:24:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:38:12 2025 by rpki-client