Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_CwbAE7dV39lgBkgd4LqcyZvnM.roa
File:                     h_CwbAE7dV39lgBkgd4LqcyZvnM.roa (raw, json)
Hash identifier:          pCRH+L511mlvZe9rq3BflC8q600+B8W02nlqKIs3oTc=
Subject key identifier:   87:F0:B0:6C:01:3B:75:5D:FD:96:00:64:81:DE:0B:A9:CC:99:BE:73
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EB4635C74E7697A70771ED06C15C7B0FC
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_CwbAE7dV39lgBkgd4LqcyZvnM.roa
Signing time:             Sat 06 Apr 2024 17:09:54 +0000
ROA not before:           Sat 06 Apr 2024 17:09:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:b4:63:5c:74:e7:69:7a:70:77:1e:d0:6c:15:c7:b0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  6 17:09:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=87f0b06c013b755dfd96006481de0ba9cc99be73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:54:7e:64:80:4c:c2:d7:2a:05:69:10:a8:
                    54:4c:19:d2:ee:b4:fc:b3:7e:c6:52:36:41:a4:84:
                    f8:0f:65:2e:c2:42:30:a4:84:3a:d1:78:59:8d:b7:
                    94:bf:41:38:2d:a7:28:f1:c2:6c:d6:2d:6b:8b:30:
                    33:84:33:be:31:d9:9d:fc:a3:9d:8f:23:74:93:75:
                    a0:b2:fc:50:04:bc:b2:fb:20:c8:7e:19:13:ea:3e:
                    de:22:37:61:63:f5:76:43:9f:7a:89:5d:5a:74:7f:
                    6e:5b:cc:c9:80:e2:15:cb:9a:fd:45:52:b3:24:57:
                    98:7f:cf:ef:43:22:f7:16:7b:ca:52:10:c2:f0:05:
                    21:95:8b:9d:0c:55:56:31:43:9c:d3:d8:2e:28:a3:
                    f7:15:c5:c3:17:23:28:d2:73:a2:d5:ba:e0:d8:d3:
                    bb:8e:dd:09:d3:f2:b0:37:99:d0:af:72:fd:bc:b6:
                    56:55:8b:2f:b0:1d:64:3f:5e:63:34:b2:de:58:8d:
                    94:cc:4f:5b:53:77:0e:9e:4c:88:55:4c:64:44:4e:
                    b8:b2:e7:ed:d4:7a:dc:b2:f3:44:43:4b:5f:ca:da:
                    8d:b0:3f:5a:d3:b5:90:af:00:df:f8:5e:3c:0c:2a:
                    5d:fb:f0:42:6e:bf:d2:35:0b:82:ef:4d:33:2e:24:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F0:B0:6C:01:3B:75:5D:FD:96:00:64:81:DE:0B:A9:CC:99:BE:73
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/h_CwbAE7dV39lgBkgd4LqcyZvnM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:8e:b6:7a:1f:af:a6:e0:12:05:cc:c0:be:56:9a:50:0d:93:
         b5:dd:2c:58:7d:f6:a8:2d:02:47:5e:a5:7b:10:2c:18:c3:50:
         43:1b:9b:f5:3d:e1:f7:05:30:31:7f:46:62:e8:d5:25:56:c8:
         8c:e3:7f:af:46:ef:16:b6:b1:e7:cf:44:29:09:91:e0:d8:af:
         57:61:0b:7d:9e:13:a4:5c:a9:23:42:dd:c1:6a:31:aa:b6:2b:
         78:84:72:6c:d9:02:4e:3d:25:95:c1:6d:29:10:00:5a:f8:5f:
         22:da:a6:c8:2f:fc:e8:d2:54:f5:b6:20:be:49:15:82:df:07:
         d6:83:34:28:15:4b:8e:cf:72:ff:36:a3:97:3e:5e:8b:b0:9f:
         c4:4b:5e:62:9c:fc:bc:9b:b6:64:6d:01:ca:07:bf:26:31:99:
         5b:55:58:b2:9a:a6:cd:68:fb:43:1a:54:8a:7f:f2:d9:01:60:
         b0:f4:70:29:5a:e1:4c:22:01:79:28:f1:79:1f:91:3a:d2:c5:
         3e:89:95:4e:5c:c1:c0:d3:2c:69:11:d1:d9:53:1e:8a:29:38:
         ec:f8:7a:e4:9d:63:07:01:33:2b:27:74:d6:a2:76:ca:3b:0a:
         e1:b6:37:aa:dc:2e:6a:2e:f0:4d:27:97:9d:a8:7b:ae:05:3a:
         31:b0:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:20 2025 by rpki-client