Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RRLf0n0LN7jDTl3xdQzyHPFZI9g.roa
File:                     RRLf0n0LN7jDTl3xdQzyHPFZI9g.roa (raw, json)
Hash identifier:          rKqA/rn4u+2nzpVXV6qxuMsmSgsSRLiYCO2Jki9o5d8=
Subject key identifier:   45:12:DF:D2:7D:0B:37:B8:C3:4E:5D:F1:75:0C:F2:1C:F1:59:23:D8
Certificate issuer:       /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial:       018AF1CEBA61D08A430A88260B43273F89AD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RRLf0n0LN7jDTl3xdQzyHPFZI9g.roa
Signing time:             Mon 02 Oct 2023 19:12:51 +0000
ROA not before:           Mon 02 Oct 2023 19:12:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f1:ce:ba:61:d0:8a:43:0a:88:26:0b:43:27:3f:89:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
        Validity
            Not Before: Oct  2 19:12:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4512dfd27d0b37b8c34e5df1750cf21cf15923d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:b0:4f:18:86:65:17:54:fd:d7:12:96:a7:
                    ba:90:51:0f:6b:ac:d1:24:9f:4b:53:cd:c7:c5:33:
                    c8:62:33:fc:a3:58:3a:e2:ef:27:4b:3b:f8:c4:27:
                    03:cd:b4:d7:b9:92:e8:db:17:f3:47:e3:7f:81:36:
                    e9:b5:5a:54:e8:e5:d6:38:dc:ea:6f:3d:1e:46:ab:
                    99:38:b4:cb:a5:8b:76:63:b8:79:ce:a7:1e:c5:f2:
                    ed:d6:e0:72:85:87:1f:f9:ee:a4:2f:ac:43:a7:10:
                    89:e5:26:61:21:7d:dc:f5:a8:ca:4c:39:45:92:e5:
                    a9:5f:e6:1b:5c:de:07:86:38:ed:e1:c4:7c:cb:d4:
                    98:88:1c:bd:d6:95:a8:f2:ca:75:43:c3:0f:ee:32:
                    1c:0e:e8:f9:e6:e1:3a:be:2e:c5:45:58:42:16:1e:
                    5e:d6:aa:08:e6:30:20:f9:bd:c8:39:3e:9a:84:cb:
                    3d:6b:0b:72:13:32:d3:29:24:5b:d6:e6:99:a3:1a:
                    ea:8a:9e:ba:f1:e5:40:43:a9:95:98:f7:90:5a:21:
                    82:92:16:bb:18:92:9d:cc:2a:22:dc:56:78:a8:44:
                    2a:24:cb:a3:f9:5d:27:95:f1:af:b0:86:58:dd:94:
                    3a:9d:99:5d:5b:98:5a:be:8d:21:73:72:fc:eb:cd:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:12:DF:D2:7D:0B:37:B8:C3:4E:5D:F1:75:0C:F2:1C:F1:59:23:D8
            X509v3 Authority Key Identifier:
                keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/RRLf0n0LN7jDTl3xdQzyHPFZI9g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:16:3f:8c:8d:f7:8a:22:43:76:ba:17:c1:0a:45:ac:98:2a:
         e1:85:0a:dd:ba:ef:54:6d:7c:dd:86:41:c6:e6:6f:eb:8a:fa:
         9d:c6:76:3d:c5:fb:2d:87:e1:8f:fb:82:a6:87:a1:6a:37:c1:
         06:dc:2e:23:b5:3d:7e:5a:ed:58:b9:eb:64:06:84:11:93:24:
         d6:55:e5:15:2e:aa:ab:cd:d2:65:74:c3:7f:0c:a3:fb:4b:92:
         d8:2f:a0:73:2c:c5:a7:0f:10:1c:48:cb:00:55:ec:bd:2c:e5:
         29:11:e5:fc:21:77:0a:09:a4:75:12:71:35:e8:8c:93:29:22:
         50:81:e2:dd:f6:08:b3:b5:fd:86:15:72:01:f7:9f:23:44:bf:
         70:34:7f:88:8a:cc:84:f4:a7:a8:18:09:7a:db:f4:5e:48:84:
         7e:64:63:07:f5:7e:bf:96:46:51:6f:c1:df:dd:2c:34:b0:8c:
         a4:e7:37:18:eb:4d:f4:69:f4:ee:ea:de:08:c9:c4:7f:17:33:
         a9:8a:f5:3e:2d:77:9a:f3:8f:8b:c8:f3:93:73:58:5f:c0:ac:
         46:d1:78:b7:b9:d1:cf:b4:b1:a5:c1:0e:a1:96:46:2a:92:df:
         47:6a:93:f9:9d:6d:06:c7:c3:49:d1:a7:f9:25:ac:a5:5a:b3:
         d8:5b:99:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:33 2025 by rpki-client