Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjrCvCKUDlBy6XLUn4bg0GL-QJg.roa
File:                     vjrCvCKUDlBy6XLUn4bg0GL-QJg.roa (raw, json)
Hash identifier:          WqZGrtaR1pO1aqqEzwFTGOy1C07GkresWU8mhG1qiDo=
Subject key identifier:   BE:3A:C2:BC:22:94:0E:50:72:E9:72:D4:9F:86:E0:D0:62:FE:40:98
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01897DF1D2D2FAD173DD230E88A11DDC88D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjrCvCKUDlBy6XLUn4bg0GL-QJg.roa
Signing time:             Sat 22 Jul 2023 14:12:27 +0000
ROA not before:           Sat 22 Jul 2023 14:12:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:7d:f1:d2:d2:fa:d1:73:dd:23:0e:88:a1:1d:dc:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 22 14:12:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be3ac2bc22940e5072e972d49f86e0d062fe4098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:10:ae:83:2b:07:5a:dc:bf:f6:17:3a:28:
                    72:59:d6:74:05:9a:76:32:0d:a3:92:d2:e7:7f:53:
                    6e:67:b6:d4:e0:f7:47:75:44:9a:f3:01:d2:35:b4:
                    63:18:94:b9:b9:09:41:5c:15:aa:2a:14:91:35:55:
                    c4:9d:c3:5d:11:41:9e:13:c4:ad:ea:6f:7b:ba:bf:
                    2e:77:d8:6c:55:74:c3:bd:56:7f:42:9a:3f:3e:17:
                    4a:bd:74:80:60:0b:6f:df:79:83:c9:be:d6:b8:70:
                    23:02:df:b6:90:12:ed:78:5a:a6:09:e0:df:aa:2f:
                    cf:5d:36:1a:50:0f:31:82:01:56:72:68:e4:a2:46:
                    51:49:d5:ba:41:31:f7:7a:cf:0b:b3:20:46:67:ec:
                    95:6b:e4:9c:c7:31:52:74:8f:3c:ee:c4:32:00:c1:
                    13:88:05:dd:07:54:fa:f6:fa:b2:25:90:f6:7a:c1:
                    15:52:ad:86:a9:4b:9d:91:6b:55:0f:0f:19:66:0f:
                    a7:0f:ee:0e:df:72:9a:e5:f0:bc:91:53:8e:0b:4a:
                    9e:5a:5b:43:87:13:d3:67:1a:7e:38:4e:d9:54:d9:
                    53:b5:29:35:32:2e:67:86:a0:0c:26:bc:21:b6:e5:
                    70:db:14:da:15:15:26:81:25:ad:9c:f5:36:2c:f3:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3A:C2:BC:22:94:0E:50:72:E9:72:D4:9F:86:E0:D0:62:FE:40:98
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjrCvCKUDlBy6XLUn4bg0GL-QJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:19:c3:55:14:dc:93:de:6a:58:5d:6d:8d:7e:3d:51:f5:8c:
         29:45:f1:8a:aa:1e:4c:ad:9d:27:fb:79:c6:78:cb:80:b9:6d:
         cb:bb:e5:fa:2b:31:1b:55:5e:21:c1:77:84:c7:a3:59:88:23:
         96:4f:20:76:d2:45:2c:b7:f0:45:9c:88:a0:58:93:af:8c:ef:
         38:0f:3b:4f:85:83:5f:4c:05:df:4d:9c:bb:d2:5d:d8:39:29:
         6b:28:aa:03:2c:71:81:27:89:42:d9:8a:c6:73:9a:5e:e9:97:
         6d:3b:66:32:8f:ce:2c:bd:d2:9d:a7:e6:a5:84:d6:da:c1:c4:
         09:d9:41:91:f1:cc:d3:18:30:75:bc:f2:38:47:b3:33:13:c3:
         dc:3a:d3:3c:21:5f:94:37:6f:e6:8c:c5:77:97:93:8a:70:ad:
         4b:40:5b:9b:8b:55:7d:81:bb:b5:7f:bb:10:61:c2:6d:ae:74:
         7c:ba:45:1d:4c:2b:c8:ef:b1:1d:e6:2e:40:dc:3a:76:a6:d5:
         63:39:c5:82:18:7a:13:a6:64:90:f6:2f:c5:32:d5:c0:03:bf:
         0b:91:01:e9:eb:54:9c:87:65:24:0d:b2:bf:9a:ea:3d:5e:2e:
         6c:c2:8a:be:45:d6:b8:74:61:e2:ef:1e:b1:97:2a:5f:38:18:
         c9:0c:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:33:43 2025 by rpki-client