Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vTBqyQUKNZZmKCmXG2LNXakdDow.roa
File:                     vTBqyQUKNZZmKCmXG2LNXakdDow.roa (raw, json)
Hash identifier:          7YKdWZUjYLgeBd/lBrUzYX5K8H1tMe7RF6BUtkuflTg=
Subject key identifier:   BD:30:6A:C9:05:0A:35:96:66:28:29:97:1B:62:CD:5D:A9:1D:0E:8C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018246A918834471A0D1E42943B894D5F176
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vTBqyQUKNZZmKCmXG2LNXakdDow.roa
Signing time:             Thu 28 Jul 2022 21:14:23 +0000
ROA not before:           Thu 28 Jul 2022 21:14:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:46:a9:18:83:44:71:a0:d1:e4:29:43:b8:94:d5:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 28 21:14:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd306ac9050a3596662829971b62cd5da91d0e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:ef:1e:91:ca:1a:76:a7:8d:c4:84:af:07:
                    dd:f2:e3:59:5a:84:48:37:2b:ca:5f:0c:4c:f4:fa:
                    1d:32:01:7b:43:35:95:c1:b3:7b:62:c5:74:bb:0d:
                    8d:f9:ad:56:2e:cb:67:02:50:22:e2:07:d5:4a:bf:
                    2c:94:af:a3:ec:92:5b:ef:8d:2c:42:e7:03:3d:54:
                    97:2c:51:b4:ac:d7:a4:46:56:3a:03:d2:a9:a1:78:
                    47:89:b6:c1:1f:7e:aa:b7:ef:28:ae:1b:e7:45:7a:
                    db:bc:f7:7e:d4:d9:f5:53:0a:a9:ec:0d:01:ae:8e:
                    55:9a:a8:26:19:0a:55:b0:93:ab:c1:a7:90:eb:cf:
                    42:c1:70:87:27:9c:d5:7b:89:62:d0:35:c7:1d:2b:
                    83:1e:36:be:ba:f0:4d:cf:20:c9:41:37:f4:af:8d:
                    b1:bc:4e:db:80:14:a8:77:ec:34:50:f9:fd:38:70:
                    e0:54:19:bd:6f:69:55:b4:3a:4c:33:78:bf:0d:0b:
                    4c:cb:9f:b3:0f:e0:d8:ff:f7:6e:84:88:13:2c:f1:
                    66:64:62:89:ba:49:d2:2a:04:36:c2:96:1f:90:76:
                    b8:5e:f5:34:84:a1:e5:13:de:f6:1e:de:d6:a1:da:
                    f5:d2:29:be:be:c8:2a:84:08:d1:e2:8d:83:5c:e5:
                    49:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:30:6A:C9:05:0A:35:96:66:28:29:97:1B:62:CD:5D:A9:1D:0E:8C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vTBqyQUKNZZmKCmXG2LNXakdDow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:ca:ae:1f:ce:24:1c:46:30:fe:a3:b6:92:0e:f9:20:4d:59:
         b2:72:57:91:3f:1b:cc:5c:8a:b7:10:3e:6d:5a:03:3e:e1:7b:
         3d:0b:6a:42:c3:8b:c3:06:ad:4c:31:af:67:d9:25:28:93:a5:
         76:85:b4:c5:79:51:e9:b5:96:ab:bc:31:6f:2f:36:17:2e:e0:
         2a:38:0b:14:9e:4b:05:2a:f4:4c:bf:28:48:31:7a:c3:39:75:
         22:22:fe:b9:02:e3:4b:e7:34:55:c3:0f:4f:05:21:ec:ac:99:
         90:90:d6:4f:84:2c:b4:88:31:73:e8:58:df:b9:07:07:8a:88:
         a6:8f:db:ba:fa:eb:18:34:4d:89:8b:95:d7:80:f3:ac:e9:76:
         15:2d:c5:aa:56:68:43:16:59:c1:26:b5:d8:53:e9:5c:ce:aa:
         7c:88:b0:ab:4a:24:06:a6:b1:94:0f:ef:4e:61:3a:38:3b:8b:
         fd:f0:0d:5e:6d:61:cc:fa:30:94:46:23:35:e5:9d:bc:4a:c1:
         e7:6a:55:1a:8c:df:32:1c:48:ac:2f:ea:7a:a6:4d:9b:e2:40:
         fe:35:68:0c:80:3d:63:92:c9:c4:56:88:92:12:9e:18:b0:c2:
         3e:eb:40:7f:3e:76:06:c5:29:38:84:bd:3b:cc:f4:19:49:a0:
         33:df:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:54:28 2025 by rpki-client