Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0IXJDWCYFdOysOM7fPJJw00f1kQ.roa
File:                     0IXJDWCYFdOysOM7fPJJw00f1kQ.roa (raw, json)
Hash identifier:          J8vsxX9LLAZ7qY2s8LBDHDfvLAjY3wq/6CEtXywhgL8=
Subject key identifier:   D0:85:C9:0D:60:98:15:D3:B2:B0:E3:3B:7C:F2:49:C3:4D:1F:D6:44
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       82F02BC8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0IXJDWCYFdOysOM7fPJJw00f1kQ.roa
Signing time:             Wed 11 May 2022 01:10:00 +0000
ROA not before:           Wed 11 May 2022 01:10:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
                          2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
                          2001:67c:64:ffff:0:180:b0a5:741f/128 maxlen: 128
                          2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196777928 (0x82f02bc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 11 01:10:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d085c90d609815d3b2b0e33b7cf249c34d1fd644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:d7:4b:c9:54:21:47:1f:94:c2:c6:64:d4:
                    e2:6e:65:80:86:e0:03:5b:da:81:a3:b5:77:56:93:
                    b5:42:1e:00:c6:82:a6:49:31:fa:af:d3:25:4e:51:
                    7f:14:76:87:bb:74:dc:e4:04:34:b2:74:b8:e8:b6:
                    74:46:1f:4c:cd:2d:b1:a4:8f:6f:e9:e0:53:1f:13:
                    ca:6a:e0:8e:c2:66:60:fb:d3:d5:f6:02:f3:fd:50:
                    86:3e:42:f1:3d:ce:fb:e4:0a:b7:a3:be:26:a2:2f:
                    f0:54:8f:5d:aa:71:80:40:d1:6e:e5:05:9a:0a:7b:
                    a7:8e:16:a3:34:e0:27:0c:0b:a1:83:dd:cb:aa:12:
                    6b:e1:bd:e4:47:d7:d0:86:79:81:44:c9:e5:68:2c:
                    6f:bf:4e:f1:4e:4d:de:eb:38:5f:73:6d:69:60:37:
                    bc:be:dc:72:75:5c:58:87:f4:dc:52:30:e1:94:4a:
                    e2:f8:b5:6a:a6:b8:35:00:de:7a:22:d7:9c:89:f1:
                    fd:7e:92:1f:68:3a:d0:41:a4:21:37:eb:da:88:18:
                    3c:ac:31:d4:e0:09:0f:5e:bc:90:e3:1a:0e:7e:96:
                    f1:6f:cf:09:41:2d:18:44:8a:61:5b:f7:d5:9a:a1:
                    55:d5:18:e6:2a:a2:2f:9b:ae:2e:fb:4e:1b:62:46:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:85:C9:0D:60:98:15:D3:B2:B0:E3:3B:7C:F2:49:C3:4D:1F:D6:44
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0IXJDWCYFdOysOM7fPJJw00f1kQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:b5:ef:26:d8:ea:37:3a:6b:01:97:06:cf:c9:4f:88:a4:77:
         6f:73:3c:3b:23:59:37:92:93:bc:d5:00:87:56:6c:d7:d8:ea:
         06:69:70:99:97:06:8a:d2:27:64:5d:96:19:22:d1:c8:5e:65:
         6f:72:30:19:6b:db:8b:e1:62:dd:b7:08:71:a1:f6:c9:4d:bc:
         ea:0e:5b:72:32:2e:d4:b5:cb:ac:75:dc:ab:9c:b9:37:f3:e5:
         8b:fa:5c:b4:c9:5e:8d:9b:c4:89:ef:e0:52:c2:b4:ec:a8:a5:
         32:13:62:0d:dc:c6:9d:48:93:89:99:ba:4a:ad:92:b6:88:5a:
         2f:9b:84:35:43:2b:d3:d5:ba:a0:54:b7:74:11:fa:33:ce:27:
         38:42:59:37:e7:2d:00:6d:5a:27:1d:f8:01:48:32:21:c9:83:
         2e:6a:1d:74:65:46:67:69:60:3e:1e:21:9c:34:88:f3:da:b5:
         8d:6e:94:fc:99:59:72:2a:46:10:2b:29:72:1c:0b:a9:41:15:
         22:cd:49:a1:10:de:36:9e:1b:32:c3:cf:a4:15:41:35:c7:32:
         2b:f3:f0:64:af:e4:7c:ae:91:02:13:38:37:bf:98:f2:7b:15:
         92:94:9f:0c:ab:9d:7e:90:4a:7a:84:53:01:6e:a3:f9:cc:59:
         54:14:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:06:17 2025 by rpki-client