Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-WHXti4Hvau8Dda0cPx2R6mh9Vw.roa
File:                     1-WHXti4Hvau8Dda0cPx2R6mh9Vw.roa (raw, json)
Hash identifier:          X0b80svOacAek9hOtT144fgOGRabHk+Bj6OwDJmn9/Q=
Subject key identifier:   F9:61:D7:B6:2E:07:BD:AB:BC:0D:D6:B4:70:FC:76:47:A9:A1:F5:5C
Certificate issuer:       /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial:       018C6E396C7E849FA757C0486CEB46918BA0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-WHXti4Hvau8Dda0cPx2R6mh9Vw.roa
Signing time:             Fri 15 Dec 2023 16:05:06 +0000
ROA not before:           Fri 15 Dec 2023 16:05:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/96 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18c:6e38:913a/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6e:39:6c:7e:84:9f:a7:57:c0:48:6c:eb:46:91:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
        Validity
            Not Before: Dec 15 16:05:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f961d7b62e07bdabbc0dd6b470fc7647a9a1f55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:8a:d9:eb:59:61:59:07:3e:af:44:bb:0d:
                    39:7e:2d:52:58:b7:43:c0:b2:33:d7:4a:72:41:4b:
                    b6:3e:dd:ab:b6:4c:6a:f0:b5:01:7d:ed:df:cd:47:
                    0e:df:81:94:7b:96:e9:55:97:1e:26:27:d7:4c:62:
                    3d:ca:e1:21:61:cf:cd:6c:52:ad:df:89:d5:7b:0d:
                    1c:81:5a:18:03:9f:ad:ed:68:23:08:3e:0a:1c:80:
                    75:3a:2e:93:7a:4e:fd:9c:75:95:d5:df:6d:a4:1d:
                    1b:f2:43:65:71:51:87:07:6f:f8:13:e1:b9:a3:d6:
                    3d:7b:2f:59:60:da:07:63:49:f6:87:1d:3f:36:2b:
                    27:71:8a:a9:1e:17:a2:3f:61:fc:b6:28:9f:ff:d4:
                    5f:c0:01:76:62:22:fa:bf:a9:fd:2f:42:80:31:91:
                    95:7c:0c:c4:79:23:bb:5a:1a:7f:8b:cf:b6:2e:86:
                    3a:0f:92:71:cb:ed:a1:32:de:e0:53:fd:a4:bd:ff:
                    ac:88:04:48:08:0a:6c:52:9c:39:e9:77:c7:d1:56:
                    ba:09:8e:0f:26:9a:7a:07:af:8b:ff:76:60:49:ed:
                    d1:9b:8e:f8:89:dc:ae:86:93:ee:27:c8:30:1b:59:
                    f4:0b:fd:bc:e7:2a:79:71:4e:4e:a4:70:b3:97:fb:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:61:D7:B6:2E:07:BD:AB:BC:0D:D6:B4:70:FC:76:47:A9:A1:F5:5C
            X509v3 Authority Key Identifier:
                keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-WHXti4Hvau8Dda0cPx2R6mh9Vw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:ae:8a:e1:fc:12:55:ab:2a:cc:23:aa:85:14:8f:45:02:73:
         cc:bc:ef:fc:84:a6:fb:f2:57:f2:7f:3a:27:61:f8:3e:0c:7e:
         bf:a4:ca:2f:9c:60:d0:5b:c7:83:53:ce:4c:9b:5a:d9:08:1d:
         9a:c4:53:f7:38:e9:9e:f3:04:16:1a:22:ef:96:d1:3a:25:c8:
         67:e5:22:17:0d:20:42:d6:a5:2d:53:76:88:7b:a8:f5:72:c1:
         78:df:97:9c:0e:92:c8:97:d9:7e:97:bf:77:5b:76:d1:19:79:
         05:38:44:8a:ce:d6:12:e8:95:59:18:cd:79:7e:1a:29:5f:c5:
         e8:f9:b4:84:ea:d6:a7:bb:a4:b6:ca:38:5e:05:e6:65:8b:08:
         26:df:d6:25:b0:34:e9:e6:d9:e3:8f:a9:e9:4e:e7:6b:69:cf:
         ee:26:ce:ed:ab:d7:ad:ac:09:aa:9e:2f:ea:f8:73:35:3a:3d:
         06:60:4e:bb:a9:c6:ec:cb:77:71:3b:87:15:2b:41:b1:4f:f0:
         c5:92:16:eb:82:3d:c4:84:6a:65:22:12:22:3d:88:8f:0f:64:
         00:30:0c:bf:1f:96:52:43:e2:81:39:b1:f6:bd:92:b3:9e:b0:
         e6:e0:87:67:6b:af:51:98:4d:47:b4:a4:85:c8:45:af:cd:58:
         48:ba:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:18:50 2025 by rpki-client