Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wunnVLwa0WjK8UUJFmktpPGSU3o.roa
File:                     wunnVLwa0WjK8UUJFmktpPGSU3o.roa (raw, json)
Hash identifier:          gwcPmSMBCmmxAxVOhUeZ9j5jJ+1aEc2CMooKH0M9Vww=
Subject key identifier:   C2:E9:E7:54:BC:1A:D1:68:CA:F1:45:09:16:69:2D:A4:F1:92:53:7A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189439786F3BA683A9C8D886D74F2AEC259
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wunnVLwa0WjK8UUJFmktpPGSU3o.roa
Signing time:             Tue 11 Jul 2023 06:15:51 +0000
ROA not before:           Tue 11 Jul 2023 06:15:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:43:97:86:f3:ba:68:3a:9c:8d:88:6d:74:f2:ae:c2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 11 06:15:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2e9e754bc1ad168caf1450916692da4f192537a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b5:3d:18:a8:28:bb:a7:8c:b4:c4:d9:9f:6b:
                    9a:1e:a8:70:98:82:57:09:fd:a2:d2:1c:0a:55:6e:
                    51:7c:ed:c8:36:19:0e:9d:09:69:99:93:e0:d9:66:
                    90:98:7c:e3:e0:aa:1d:96:c8:3b:31:4c:8d:59:3c:
                    fa:24:aa:f3:51:5d:ab:a8:93:44:ce:e3:77:85:ed:
                    e5:64:12:30:ca:8c:8b:d4:34:25:e0:2c:54:18:f2:
                    e2:1a:36:f0:27:4b:b0:3b:fa:d8:e5:a4:c3:85:e6:
                    56:a2:93:e3:e5:e3:67:a0:ae:48:14:83:e1:67:ff:
                    89:1c:b6:d8:8f:80:71:6b:fb:36:d8:f8:2b:0d:49:
                    96:48:0e:f7:08:48:11:10:85:6e:8d:55:e3:3a:73:
                    f0:00:ce:1c:20:3c:58:20:13:89:f6:8d:29:e4:4b:
                    21:14:ce:36:06:99:90:60:2e:af:78:92:f2:d1:23:
                    73:ab:82:f5:67:4a:6f:0e:4d:83:6a:d9:7d:75:9f:
                    7f:80:1b:44:41:bb:1b:dd:ad:2a:fd:2a:38:1c:44:
                    1c:95:61:40:6d:3b:98:bd:48:d1:44:74:d4:30:e4:
                    6a:05:06:f5:9b:24:20:13:5c:d7:e3:ff:6c:63:b4:
                    28:c0:1b:66:19:0c:38:fa:6d:3b:ed:19:a5:69:63:
                    a5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E9:E7:54:BC:1A:D1:68:CA:F1:45:09:16:69:2D:A4:F1:92:53:7A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wunnVLwa0WjK8UUJFmktpPGSU3o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:ca:08:a8:86:ad:6d:68:6e:33:2a:b1:b1:9b:6d:02:97:97:
         41:d3:e6:e7:36:73:6b:b4:35:89:2f:cf:8b:56:a3:84:3c:28:
         3b:8a:c7:12:3f:90:9c:52:a7:fe:5f:c8:db:d7:5c:09:f8:05:
         62:a4:28:11:9b:ec:43:a1:b2:2f:e6:40:5f:da:71:72:0a:7a:
         b4:8c:5c:bc:c2:81:89:01:76:21:4a:f5:3b:f5:5a:13:f1:84:
         c2:5f:7e:64:84:9a:67:2a:e2:a4:b6:61:62:f1:78:17:83:ed:
         8d:34:06:4b:6c:9e:23:61:6d:04:8a:d3:6e:bf:ad:ac:12:54:
         b8:e9:9c:62:26:b1:4d:3f:79:44:af:de:bb:22:6d:46:cc:93:
         4c:4b:01:04:11:a4:78:a9:ed:b8:fc:cd:05:0f:24:e2:a2:a0:
         a6:96:dd:79:c7:07:89:e8:69:43:42:89:65:da:14:22:1b:4f:
         3f:87:ef:d1:47:af:86:52:00:32:c8:95:b7:df:ca:43:c2:1d:
         7d:97:1d:8f:30:ea:99:23:fd:5a:fe:92:2d:fb:b9:33:d8:a9:
         47:ed:15:fd:7f:e9:1d:d3:9a:64:0e:56:44:b6:1a:fe:9f:5f:
         fb:e4:af:d1:86:52:d5:69:6d:26:7a:80:d1:14:ea:fa:a7:a3:
         dc:cc:f7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:31:08 2025 by rpki-client