Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jPt46NJvcVymNYY_27_BoDut4u0.roa
File:                     jPt46NJvcVymNYY_27_BoDut4u0.roa (raw, json)
Hash identifier:          /s7RJvIWG/Y4kr42tcGNTlJvjXvIAxWdEzwirBb2Dp0=
Subject key identifier:   8C:FB:78:E8:D2:6F:71:5C:A6:35:86:3F:DB:BF:C1:A0:3B:AD:E2:ED
Certificate issuer:       /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial:       018C1613BE571374F15629817989F574F29C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jPt46NJvcVymNYY_27_BoDut4u0.roa
Signing time:             Tue 28 Nov 2023 13:17:21 +0000
ROA not before:           Tue 28 Nov 2023 13:17:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/96 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:16:13:be:57:13:74:f1:56:29:81:79:89:f5:74:f2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
        Validity
            Not Before: Nov 28 13:17:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8cfb78e8d26f715ca635863fdbbfc1a03bade2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:fe:a7:51:58:aa:63:8f:02:11:95:0c:ed:
                    f4:63:f0:b9:79:e6:b1:0c:e3:92:09:f7:fc:d6:61:
                    ac:bf:43:bd:62:0e:4b:cf:98:7d:e4:49:66:07:fc:
                    5a:7a:33:68:3c:28:1a:6b:65:24:0b:32:2f:c6:ed:
                    e7:68:9c:08:76:22:b1:d3:13:cf:54:f7:3d:be:53:
                    6a:10:c5:2c:2a:92:3c:ef:1e:a8:05:b4:be:a4:0c:
                    8b:b7:de:18:c3:3e:8d:9f:ff:7b:6c:c6:1a:be:85:
                    c6:c1:c6:e4:ea:e8:9d:07:4a:2f:4c:5b:6b:f0:a2:
                    dd:75:70:2b:d5:a4:2e:b3:15:ee:6f:46:84:79:9a:
                    3d:3b:14:25:72:a3:d2:b4:36:0e:1c:03:54:aa:51:
                    be:e3:ad:e9:dd:a2:c5:35:49:46:01:44:60:f2:02:
                    17:ad:cf:c7:f7:e3:bc:99:92:a9:ca:21:fc:d6:92:
                    5b:b8:71:e6:9d:cf:67:a8:67:f9:a2:a6:82:b5:41:
                    1e:92:53:b9:eb:f2:d4:06:62:0e:8f:cb:76:b9:88:
                    82:e0:48:07:c6:47:3d:12:b6:57:f4:82:13:f7:1c:
                    fd:ba:06:c4:39:66:32:8d:78:fe:7e:26:59:55:8d:
                    9c:72:4a:4b:42:c6:f7:a6:b1:4e:6b:52:c4:1e:a6:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FB:78:E8:D2:6F:71:5C:A6:35:86:3F:DB:BF:C1:A0:3B:AD:E2:ED
            X509v3 Authority Key Identifier:
                keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jPt46NJvcVymNYY_27_BoDut4u0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:a7:12:9d:1e:d3:8e:9e:4b:91:cc:59:03:a2:bb:d1:24:70:
         d8:76:a3:a1:3e:99:08:8f:59:16:c9:7f:dc:c5:f9:f7:d0:a5:
         9d:a8:1f:67:e6:40:3f:50:6e:ea:54:c5:78:13:59:ac:52:08:
         49:a4:00:3a:84:9b:db:27:ab:38:ea:14:d4:c4:57:a0:cc:68:
         0f:65:0d:b0:aa:f6:1e:ed:6d:22:70:9c:cd:38:50:80:37:a2:
         f4:96:0f:d9:e0:d9:31:db:bb:74:5b:f8:ba:af:61:0b:ff:99:
         6e:dd:ce:23:88:cb:ef:6c:c9:90:ff:64:4f:60:a4:fa:8e:27:
         82:c1:a0:27:8f:bd:f4:57:c4:69:f8:ed:a7:85:b4:99:b9:6c:
         2a:7f:08:d9:12:c3:a2:41:e5:81:15:d2:e9:b8:9f:c8:b4:94:
         57:bc:20:c7:7c:6b:45:a6:aa:31:e8:d5:04:ef:25:bb:a9:bc:
         55:5f:e4:c3:37:75:1a:a4:a8:f4:35:9e:23:6f:a8:bd:60:0b:
         69:0f:e0:6c:bd:6b:d8:40:9b:4a:8b:e3:71:bf:8d:a7:8c:07:
         cc:61:d4:4d:ce:77:46:98:85:60:c3:e9:02:25:63:56:8b:e6:
         d1:91:ea:47:8b:9a:f3:13:62:b6:db:3d:f3:ed:97:01:93:40:
         d6:53:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:22:25 2025 by rpki-client