Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vVsn1nl4FW-_7AHA1tgMkZs0HlY.roa
File:                     vVsn1nl4FW-_7AHA1tgMkZs0HlY.roa (raw, json)
Hash identifier:          7c8LCuY4VMgC2Ri/qDLf3dToJABEKV09uL7DvMpAw8s=
Subject key identifier:   BD:5B:27:D6:79:78:15:6F:BF:EC:01:C0:D6:D8:0C:91:9B:34:1E:56
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       800A8AF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vVsn1nl4FW-_7AHA1tgMkZs0HlY.roa
Signing time:             Sun 01 May 2022 03:10:49 +0000
ROA not before:           Sun 01 May 2022 03:10:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148174584 (0x800a8af8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May  1 03:10:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd5b27d67978156fbfec01c0d6d80c919b341e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:11:40:8f:f6:cb:37:23:de:e2:aa:c9:b7:43:
                    39:c9:a3:65:94:c3:92:d4:ce:71:04:0d:4d:84:aa:
                    80:0d:c4:3e:3a:54:1e:00:27:e1:8e:44:dd:c2:f3:
                    6d:ae:19:ae:25:88:b6:47:05:1e:8a:60:14:66:8b:
                    ff:5e:02:bc:a6:15:36:18:51:c3:32:f7:3a:a4:08:
                    c1:5d:ce:3d:6f:b5:68:86:dd:43:f0:81:42:61:10:
                    86:37:4c:6f:fb:56:af:2e:e4:fb:d2:a6:57:36:44:
                    30:51:44:9e:a3:44:3a:40:90:16:19:17:3e:e0:8b:
                    c8:cb:a6:59:f0:5e:f9:40:78:cb:2e:71:57:78:0f:
                    2d:8f:ee:25:bd:72:4b:08:e3:9d:65:e9:c8:79:4c:
                    9c:87:19:ea:fc:bc:b5:c2:a7:2f:af:18:e3:78:80:
                    64:99:54:53:d3:69:3b:a4:02:1c:80:0c:83:55:2c:
                    cd:d6:fc:82:e4:7c:b5:15:47:b8:f3:6e:02:c3:d8:
                    43:c0:21:5c:75:6e:8d:43:fe:d7:2c:e1:ef:7b:c3:
                    7c:33:46:f4:04:14:ff:3c:09:fc:bf:55:30:4b:19:
                    d4:ca:f3:97:45:65:2b:2e:fe:df:15:86:f9:06:d6:
                    44:0f:40:89:91:20:04:f7:bf:70:fb:5e:25:b8:2a:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5B:27:D6:79:78:15:6F:BF:EC:01:C0:D6:D8:0C:91:9B:34:1E:56
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vVsn1nl4FW-_7AHA1tgMkZs0HlY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:57:3e:1b:bb:2f:21:67:de:02:5a:b8:80:90:d6:c7:f1:b4:
         c8:02:1f:f0:cf:12:fe:6e:31:b1:49:18:36:34:e2:76:b7:db:
         e1:c9:01:87:d4:ef:1f:50:b3:69:74:2b:cb:8f:60:b2:93:96:
         04:c4:97:4e:5a:af:d0:c7:bd:27:fc:3f:6f:d4:2b:1e:f8:cf:
         c6:47:a5:40:5d:03:6c:28:a9:27:e9:10:a4:ea:84:d7:a9:b9:
         e2:b8:a2:ac:1c:72:fc:2b:ed:96:08:69:7d:6c:3e:70:97:af:
         4b:b4:b8:f3:61:78:a0:65:a1:15:9b:0f:11:75:65:5c:08:1a:
         e3:96:41:a6:3b:53:66:ac:a4:fa:c9:75:3d:77:29:7d:40:05:
         0b:37:d7:c3:fd:81:0d:1c:df:3f:e1:de:1c:45:95:8c:54:1d:
         5d:32:cb:df:c3:d7:b9:8e:ff:ca:12:05:ec:15:1a:fb:10:1f:
         7b:3b:59:eb:d0:af:c0:95:84:a6:69:36:f7:37:88:47:4b:dc:
         4a:a5:91:76:f2:ea:43:89:2c:1b:01:15:d6:59:91:77:be:b1:
         c8:aa:36:65:4f:93:2f:f2:f2:6d:ab:1b:dc:7b:2f:f5:12:b8:
         8f:8c:f3:28:dc:47:f5:5a:f9:4e:6b:c2:8b:7c:c6:f9:07:ff:
         c3:6c:72:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:25:37 2025 by rpki-client