Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDehuxU4XSjiWiyzF6WKsotada4.roa
File:                     vDehuxU4XSjiWiyzF6WKsotada4.roa (raw, json)
Hash identifier:          SMK7+EAPVOG/gMoeR6xByqINy5YA7cH3KAzOCFnvFDs=
Subject key identifier:   BC:37:A1:BB:15:38:5D:28:E2:5A:2C:B3:17:A5:8A:B2:8B:5A:75:AE
Certificate issuer:       /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial:       018C17C69E1FF956E42F71F32FD0C4FD8E7F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDehuxU4XSjiWiyzF6WKsotada4.roa
Signing time:             Tue 28 Nov 2023 21:12:21 +0000
ROA not before:           Tue 28 Nov 2023 21:12:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/96 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:17:c6:9e:1f:f9:56:e4:2f:71:f3:2f:d0:c4:fd:8e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
        Validity
            Not Before: Nov 28 21:12:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc37a1bb15385d28e25a2cb317a58ab28b5a75ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:b5:dc:89:41:fb:fd:48:71:61:f9:6a:71:
                    78:7b:23:d4:0f:81:ff:a4:24:a4:21:78:af:ea:41:
                    79:48:d9:5a:fb:8a:ca:05:b9:8d:c5:a2:b7:20:62:
                    c6:42:06:66:46:24:f6:70:8b:c7:b3:e7:a0:fa:9b:
                    c1:c2:2f:e1:50:87:af:d1:50:b7:18:6b:54:8c:98:
                    a8:74:1a:f9:0a:e7:0d:0f:1e:d6:88:e9:85:ae:e5:
                    fa:bb:a7:09:55:da:da:6b:44:c8:42:d2:b3:dd:54:
                    92:17:3f:cf:b7:50:d6:ab:38:d9:37:4b:92:49:d0:
                    d3:9a:49:1c:ab:cc:2f:f5:96:9b:79:02:5c:e0:73:
                    cb:02:7f:10:8b:32:c6:ee:ab:61:ac:db:91:ec:34:
                    3c:46:fc:c6:87:4d:c2:27:c4:6f:cb:81:75:db:39:
                    1e:70:28:3d:28:d8:ee:13:be:d8:0d:f9:0a:8c:50:
                    93:6a:ce:3e:b3:fb:0a:0d:b2:90:c9:c2:ae:af:d0:
                    bc:66:06:01:3c:69:30:01:b7:fc:7f:8a:58:fb:e7:
                    a6:93:b6:bc:aa:79:d7:3d:fd:66:ac:bf:f5:f3:1b:
                    fc:44:63:ae:9a:1a:6f:fa:da:0b:3c:5f:53:44:04:
                    19:cd:70:5e:be:df:54:5a:e0:02:c7:62:9e:32:52:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:37:A1:BB:15:38:5D:28:E2:5A:2C:B3:17:A5:8A:B2:8B:5A:75:AE
            X509v3 Authority Key Identifier:
                keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/vDehuxU4XSjiWiyzF6WKsotada4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:56:0e:18:62:1d:ce:dd:b1:48:a5:f9:f3:1d:ce:09:d3:d3:
         a7:05:ef:fa:14:85:76:96:e6:ae:b2:99:1d:88:77:4b:07:46:
         43:6d:ca:ca:32:51:4c:f5:b5:95:05:d3:f2:28:5d:1e:35:31:
         b9:45:07:15:58:28:2a:5e:47:c2:ad:47:59:8d:f5:b6:d3:8f:
         ef:39:4e:8c:31:2a:cc:03:02:d9:f7:b5:5d:22:9f:2d:fb:ce:
         6f:72:72:c8:2d:f0:5c:4f:dd:f9:b9:43:c0:cf:82:05:ca:b5:
         04:c6:fa:75:73:46:70:42:5a:65:20:db:00:fe:43:c2:3e:21:
         30:70:cb:69:71:f2:42:7e:aa:5d:8a:42:77:d2:8a:33:44:b0:
         fb:24:a6:da:b0:e4:c1:94:85:6b:fc:ee:90:ac:68:83:4c:d2:
         39:4b:ff:6f:0f:3c:6e:85:ed:22:ca:c1:14:fd:cc:26:51:13:
         bd:43:85:7e:62:7e:a2:87:9a:e3:a8:1e:6a:b8:1f:6a:45:db:
         bb:48:1a:32:93:d4:ce:ca:c6:87:cd:ae:f9:b2:04:b9:e8:40:
         77:82:17:0f:cd:b2:6f:fb:b6:16:9a:af:f7:2e:22:45:17:92:
         a4:0f:f7:87:09:33:37:9a:f5:f2:17:2d:3a:ed:76:73:7b:18:
         c5:4b:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:07:15 2025 by rpki-client