Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvES6wo58ale6fw0oNvdcMekxgA.roa
File:                     vvES6wo58ale6fw0oNvdcMekxgA.roa (raw, json)
Hash identifier:          7IFEhAthHh+nRosXNOToXxSYo4YFU3WMkdhiSHXw9OQ=
Subject key identifier:   BE:F1:12:EB:0A:39:F1:A9:5E:E9:FC:34:A0:DB:DD:70:C7:A4:C6:00
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018898FD8749FBB10AA92B845C592DD83174
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvES6wo58ale6fw0oNvdcMekxgA.roa
Signing time:             Thu 08 Jun 2023 03:12:12 +0000
ROA not before:           Thu 08 Jun 2023 03:12:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:98:fd:87:49:fb:b1:0a:a9:2b:84:5c:59:2d:d8:31:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  8 03:12:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bef112eb0a39f1a95ee9fc34a0dbdd70c7a4c600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:bd:7e:a7:ea:93:17:14:56:38:77:d3:ad:
                    17:37:76:9d:51:89:86:44:59:fd:05:86:aa:c2:79:
                    a2:79:20:36:9a:e3:0c:b5:e7:e2:ec:c1:69:ae:4f:
                    0a:4e:91:01:f6:f5:69:ca:54:f4:43:dd:65:7c:48:
                    7b:81:f3:11:87:dc:6c:d6:2a:b6:0b:43:25:6f:a7:
                    02:7d:f2:44:60:cf:5c:48:eb:75:4d:50:4a:cb:ed:
                    44:bb:85:41:48:b2:ce:cd:9e:3f:70:02:10:f8:cb:
                    e8:f3:91:7e:c5:f3:bf:4d:11:b9:ef:76:7e:56:09:
                    a8:58:d4:0f:4d:27:4e:8e:7d:48:6b:8e:c4:c5:1f:
                    c1:57:c3:bf:36:fe:ae:e4:f1:0d:62:cc:dd:ca:a4:
                    d0:25:04:36:03:62:b4:0b:9b:55:1b:6f:63:45:31:
                    10:79:44:22:ce:57:1b:ae:37:50:29:aa:3e:01:66:
                    3d:62:bd:89:98:2a:02:79:ba:5c:35:ab:73:de:fa:
                    fb:bd:b5:02:b3:3d:79:ee:28:a5:4a:01:34:17:fe:
                    28:47:d0:2f:d4:14:46:84:42:f4:ed:42:a4:05:10:
                    ee:0f:7f:ca:98:68:d8:76:33:d2:a2:78:2e:ba:26:
                    8e:82:1c:1c:81:3d:ed:bc:8d:0c:e0:9b:a8:e7:6b:
                    3e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F1:12:EB:0A:39:F1:A9:5E:E9:FC:34:A0:DB:DD:70:C7:A4:C6:00
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvES6wo58ale6fw0oNvdcMekxgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:94:79:7d:b0:95:db:36:31:87:aa:39:a3:d7:79:f2:3d:d5:
         ce:3d:ef:68:b6:ca:60:87:0a:e8:cb:1d:b7:fd:44:89:11:a5:
         00:d1:24:b3:44:28:e9:10:a2:fd:58:c0:db:0c:54:cf:8e:37:
         76:d9:81:ad:b7:5b:0d:a2:a3:ef:4e:24:c4:24:f1:d6:24:f4:
         3b:55:e3:67:5d:83:ca:3e:39:39:52:6a:30:98:68:b3:5a:6e:
         3f:e4:1c:86:da:04:ff:6d:18:cc:c8:c1:d0:50:f3:bb:0b:bd:
         b1:3a:4e:85:84:5c:e1:50:92:0d:0b:31:8a:f1:3a:b2:0c:80:
         30:53:45:4f:1b:46:3b:a9:98:d9:f7:3d:f3:87:82:1c:85:09:
         9b:e0:92:f9:cf:ee:5e:38:a3:bb:68:aa:e2:6c:c7:0a:81:d9:
         aa:8e:0f:e0:a1:5d:f9:78:8c:67:e6:91:c0:a8:6d:cb:e4:b2:
         98:c5:6e:4e:2e:93:ca:a5:ab:ce:c3:7d:6a:0b:a2:27:89:e9:
         5e:0d:c6:c8:2d:c8:04:92:28:4d:1a:42:99:12:4b:d3:2b:32:
         16:57:0c:6e:3f:4d:ea:c8:8a:e2:19:cb:0d:63:08:93:05:04:
         09:53:bc:9b:5b:39:5e:e9:bf:6d:a9:d2:67:fa:bb:34:ee:44:
         44:87:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:22:19 2025 by rpki-client