Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y708s2tsSEFdfjh8lBnQ3OBeqJk.roa
File:                     y708s2tsSEFdfjh8lBnQ3OBeqJk.roa (raw, json)
Hash identifier:          vKzWXcm260xAKV3JJiem52BBztNCQxFzzVybTnm7sIg=
Subject key identifier:   CB:BD:3C:B3:6B:6C:48:41:5D:7E:38:7C:94:19:D0:DC:E0:5E:A8:99
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0184DF68AB8F36245E738CB8AB5710BF7BB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y708s2tsSEFdfjh8lBnQ3OBeqJk.roa
Signing time:             Sun 04 Dec 2022 23:11:29 +0000
ROA not before:           Sun 04 Dec 2022 23:11:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:df:68:ab:8f:36:24:5e:73:8c:b8:ab:57:10:bf:7b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec  4 23:11:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbbd3cb36b6c48415d7e387c9419d0dce05ea899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e5:e0:b2:92:a7:46:6b:66:24:a4:4a:df:01:
                    ae:14:38:9b:73:95:8e:34:3a:81:f2:e9:53:27:de:
                    c6:60:62:37:12:f2:d3:4f:20:25:a6:6b:a3:91:2e:
                    8f:bb:1b:c3:b8:db:2c:49:a3:56:3d:2a:65:f2:01:
                    dc:0a:b3:d3:29:9b:55:37:51:a3:b5:2d:79:3f:db:
                    b2:c7:f6:64:bc:58:28:08:14:d7:9b:5d:15:57:ff:
                    8c:2b:51:6a:5e:9e:d4:b8:03:d3:d7:2e:d8:9e:1a:
                    cf:37:85:e1:c8:f7:f0:c0:a7:83:b5:d3:23:43:1f:
                    94:f0:12:11:a7:aa:d3:99:7e:6d:2c:3e:85:55:24:
                    3c:6e:0e:d8:fd:fd:41:ce:45:49:ea:e9:6d:45:2e:
                    18:7d:0c:aa:c2:9f:4e:bf:53:5e:07:0c:2f:7f:92:
                    61:01:c7:d5:8b:75:a0:8e:87:78:2d:b9:89:0a:76:
                    59:8b:43:ac:c7:56:b3:45:bd:64:59:c9:c6:27:7d:
                    28:fa:d0:fc:e7:1d:04:69:c2:a2:b9:90:1e:f9:88:
                    4e:93:e1:94:f8:39:d4:6c:75:07:9e:c7:b2:b5:0b:
                    bd:74:66:18:1f:ab:5f:0c:5a:59:14:d8:48:bf:2d:
                    c6:19:78:0f:a7:18:2d:ea:3f:ad:69:a4:59:f4:f5:
                    c5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:3C:B3:6B:6C:48:41:5D:7E:38:7C:94:19:D0:DC:E0:5E:A8:99
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/y708s2tsSEFdfjh8lBnQ3OBeqJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:d9:41:e5:fb:7c:3f:2c:27:bc:c1:5c:1b:68:fb:9d:99:0e:
         e3:e9:d5:03:56:a4:47:53:98:b4:31:db:f8:08:33:93:d0:17:
         9b:e1:78:67:c8:4c:5d:26:b8:71:da:59:4a:42:c3:6f:ba:d8:
         50:0e:8e:9f:0e:91:75:63:42:6b:d3:1b:ca:3f:e5:17:97:e6:
         55:b5:14:4e:01:9b:19:97:49:8d:e1:96:ed:1f:db:f1:8a:1f:
         63:45:b2:96:e5:22:2c:c9:ab:27:58:9c:e1:5a:14:45:b7:34:
         7b:dd:05:a0:96:5f:5e:73:b1:a1:32:57:ff:31:74:43:62:ac:
         f6:c6:1f:29:34:79:0d:5d:20:f4:1d:87:62:a0:5e:ad:ac:e0:
         13:71:af:51:e5:cc:4b:81:cc:d0:d1:0c:5e:cb:69:16:43:22:
         8b:b1:24:05:e5:b5:85:90:4d:00:78:05:20:ab:b0:45:2d:aa:
         e7:f8:db:12:65:f1:e4:65:56:2e:97:5b:a2:8e:a9:a0:38:3e:
         37:db:d7:64:04:4c:16:26:cd:fb:84:34:e3:5e:a0:0b:bc:19:
         f7:ea:b7:89:80:39:4e:bd:e5:58:d7:6f:25:58:84:33:af:9e:
         25:31:15:72:e5:55:0d:1c:f9:34:30:c1:d2:7f:ae:34:19:72:
         05:90:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:48:04 2025 by rpki-client