Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCJJVP457NtNSNPS1z64BdsQ6yM.roa
File:                     zCJJVP457NtNSNPS1z64BdsQ6yM.roa (raw, json)
Hash identifier:          IWMItR4DREAoao7owIHBJq8vV/F2q+kAxH+kxxr7Uwc=
Subject key identifier:   CC:22:49:54:FE:39:EC:DB:4D:48:D3:D2:D7:3E:B8:05:DB:10:EB:23
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018895552FA52AE0E109533D778474FC7032
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCJJVP457NtNSNPS1z64BdsQ6yM.roa
Signing time:             Wed 07 Jun 2023 10:09:27 +0000
ROA not before:           Wed 07 Jun 2023 10:09:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:95:55:2f:a5:2a:e0:e1:09:53:3d:77:84:74:fc:70:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  7 10:09:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc224954fe39ecdb4d48d3d2d73eb805db10eb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:70:22:50:6e:11:d5:ef:90:da:81:66:4a:
                    a6:c2:c5:33:6f:d8:e1:a9:1b:36:6f:a1:5b:32:6e:
                    6b:6a:7f:ed:58:18:d2:95:fc:14:db:31:ea:a7:84:
                    97:53:09:62:ad:ca:ba:b4:8d:41:50:1b:44:22:40:
                    7e:80:06:7d:96:1d:2d:77:88:f0:9b:51:36:01:e9:
                    52:6e:2f:43:0a:69:e4:3e:c1:f5:92:3c:2a:23:72:
                    df:e0:ad:9d:f8:05:db:aa:1b:c4:57:8e:8b:c9:68:
                    f1:5a:44:15:43:70:ac:f9:56:73:48:d8:16:e3:18:
                    c1:64:aa:e1:54:06:22:6f:47:3b:33:95:fe:f1:1a:
                    c5:2d:5b:b1:98:28:55:25:94:98:f7:16:c1:64:55:
                    7f:1c:72:68:5f:8b:6e:6a:fd:4b:88:64:7a:f1:af:
                    10:3a:c6:23:93:ae:cf:7d:d2:ae:91:f4:a3:8a:99:
                    1b:99:23:6d:e5:b0:e2:cc:83:37:a1:f5:5f:15:a8:
                    36:52:2b:e3:fa:86:9f:9c:9e:e1:28:e2:1a:70:79:
                    22:34:ce:8d:af:37:ac:ef:04:ff:92:a2:21:ea:65:
                    4d:7b:73:6b:f9:8b:92:05:59:65:8e:56:7f:32:62:
                    81:44:b3:8a:36:ac:8f:ee:ca:53:97:4e:1b:fe:5b:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:49:54:FE:39:EC:DB:4D:48:D3:D2:D7:3E:B8:05:DB:10:EB:23
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCJJVP457NtNSNPS1z64BdsQ6yM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:03:69:d3:99:37:94:e3:2e:8a:22:56:96:24:9c:8e:90:86:
         0b:12:09:5b:41:4b:2f:c0:f7:df:85:78:29:99:2f:f2:a0:b1:
         7c:d2:94:58:59:f7:c6:eb:c0:20:f9:8f:96:3c:5b:4c:33:d1:
         3e:10:2d:49:b7:22:d3:60:d8:3a:87:29:9c:fe:94:54:d0:00:
         46:91:5b:f6:6b:c1:1d:0e:37:b7:8f:05:4d:f4:6b:64:72:5c:
         56:34:56:09:5e:16:de:88:43:14:be:72:dc:55:ce:c2:a9:45:
         7b:6f:8d:96:6d:17:06:94:70:cb:b1:db:ad:c6:07:a6:d5:61:
         36:79:0f:b5:d5:04:94:d7:25:ed:f2:53:72:1a:b8:99:3b:6b:
         0d:32:9c:5a:d3:17:2d:6b:99:ca:99:8b:0d:19:9b:6b:21:1e:
         f4:33:f6:64:cb:e9:de:45:e4:64:14:9f:ab:cd:36:77:e3:ce:
         1e:19:93:eb:67:7d:ba:96:2e:3f:57:2f:3e:97:56:ba:bf:08:
         d7:85:41:2e:de:65:eb:92:d9:d1:ce:bc:7e:ca:95:56:a9:5d:
         ca:bc:23:72:a9:c1:4e:b1:31:fd:9a:f4:09:63:e8:82:1d:8d:
         dc:ed:c3:26:eb:71:96:51:2b:15:0f:aa:39:5e:07:ba:98:44:
         56:8d:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:10:20 2025 by rpki-client