Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uW-5VIovNvthdNlSwZrRSUJOJQE.roa
File:                     uW-5VIovNvthdNlSwZrRSUJOJQE.roa (raw, json)
Hash identifier:          Qagof7sd8PYc8LQN1NpbGrnHXjHoZG3BOps8fPIEncY=
Subject key identifier:   B9:6F:B9:54:8A:2F:36:FB:61:74:D9:52:C1:9A:D1:49:42:4E:25:01
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01865757FFA24FEF1FF62452BA91C6E76254
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uW-5VIovNvthdNlSwZrRSUJOJQE.roa
Signing time:             Wed 15 Feb 2023 23:10:30 +0000
ROA not before:           Wed 15 Feb 2023 23:10:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:57:57:ff:a2:4f:ef:1f:f6:24:52:ba:91:c6:e7:62:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 15 23:10:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b96fb9548a2f36fb6174d952c19ad149424e2501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:11:4e:79:99:7b:3a:36:a8:60:65:0b:53:
                    6a:e8:56:ed:cc:d6:13:f2:91:15:9c:ff:5b:a4:8e:
                    a9:00:ac:1b:ab:fb:5c:b3:6d:b9:d8:08:0d:58:30:
                    e1:b1:d1:b0:50:28:3c:be:46:59:1e:3a:c8:e3:d0:
                    b8:92:fd:98:fd:21:9c:bc:ee:8b:f6:e7:25:9b:d3:
                    ee:8c:03:08:d3:49:5f:8d:02:ba:c9:e2:aa:9e:07:
                    20:7f:25:ee:8d:a7:85:3b:40:51:16:ac:a8:fa:4d:
                    41:ce:72:05:57:3b:2d:20:51:2c:5d:1c:8e:cb:4e:
                    e1:4d:2c:34:b5:c4:63:da:a2:0a:b5:b3:84:b1:a4:
                    5d:6b:b9:eb:91:b4:61:17:d3:2f:d3:f2:58:7d:48:
                    4d:31:1b:22:e8:12:f0:8f:c5:3b:c9:ed:33:79:68:
                    6c:4a:95:26:04:17:f6:8e:11:6b:f8:95:8a:3c:cb:
                    cd:99:88:12:aa:b3:e6:7f:05:22:a1:1f:e6:21:0f:
                    00:e4:dc:25:17:51:f0:4d:18:40:80:44:51:a7:4f:
                    74:8d:62:8f:be:b5:42:bb:70:31:43:34:74:06:bb:
                    23:45:18:9d:21:f9:e2:c0:fa:c2:45:03:31:cd:c7:
                    78:0f:5b:2e:af:43:2c:a3:91:69:e2:50:2a:26:64:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6F:B9:54:8A:2F:36:FB:61:74:D9:52:C1:9A:D1:49:42:4E:25:01
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uW-5VIovNvthdNlSwZrRSUJOJQE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:d8:00:e9:b1:ce:6e:bf:60:11:5b:71:f5:c0:3a:fb:a9:86:
         d8:25:b9:9b:af:c5:09:7a:44:e8:05:d6:17:71:ae:24:16:50:
         52:07:98:aa:9d:65:cd:ba:bb:aa:17:ee:a9:b3:97:8f:24:f8:
         ad:83:fc:c3:73:e2:c2:09:5d:a2:d1:c2:9a:8d:f8:c4:c9:69:
         e4:7b:ed:73:9c:fe:a0:46:85:8d:e1:8a:71:e7:24:c2:28:a2:
         b6:e5:21:d4:44:e5:8f:c2:08:47:6d:86:5e:dc:c0:2d:6d:f0:
         18:7b:95:c5:2c:32:83:be:73:17:f7:4d:50:20:a5:d5:84:e0:
         6e:fe:28:ce:4d:ad:bd:bd:0d:f9:37:b3:ad:bf:ca:90:2e:34:
         91:c3:d8:03:70:d2:c5:65:7d:5a:20:4d:74:7f:0c:a2:73:c1:
         e4:90:c3:92:c4:ae:93:b2:53:92:c7:4b:c2:c6:a6:42:e1:fd:
         81:f8:f1:b1:23:65:4b:39:14:d1:1e:24:4d:42:e4:70:28:54:
         c8:2f:86:09:63:26:ab:0b:9b:38:a0:a5:cb:a2:d4:1b:3b:18:
         92:01:31:80:7f:8d:aa:b8:84:7f:c9:d0:c9:91:cf:9c:1d:90:
         96:90:b0:bc:ac:9f:55:6f:ef:96:bd:7f:c8:83:38:dd:f7:16:
         3e:a2:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:31:32 2025 by rpki-client