Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6D_esmpXRrUAAXy0_Z9cMsNK5Cs.roa
File:                     6D_esmpXRrUAAXy0_Z9cMsNK5Cs.roa (raw, json)
Hash identifier:          /ij8KXfjKwEf4AyQy3idlw2gQCebz7RmCyRgferIRAw=
Subject key identifier:   E8:3F:DE:B2:6A:57:46:B5:00:01:7C:B4:FD:9F:5C:32:C3:4A:E4:2B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       68EBE05D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6D_esmpXRrUAAXy0_Z9cMsNK5Cs.roa
Signing time:             Tue 08 Feb 2022 14:04:26 +0000
ROA not before:           Tue 08 Feb 2022 14:04:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760288861 (0x68ebe05d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb  8 14:04:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e83fdeb26a5746b500017cb4fd9f5c32c34ae42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:f3:51:f3:62:fb:1d:8b:20:ff:1e:56:da:
                    b9:ea:a1:37:4b:dd:67:f7:af:3b:47:f4:e9:48:18:
                    c9:47:7d:c8:1d:f3:38:01:87:96:6f:71:e3:72:90:
                    d3:31:71:4a:c9:c1:9b:c9:4a:1c:9f:11:a9:b1:53:
                    0a:4c:0d:b5:40:cd:b0:17:9e:4f:61:bd:12:5c:eb:
                    96:7d:da:e8:fd:9f:99:c1:90:cc:7f:0f:a4:b0:2f:
                    32:75:70:e2:e7:64:58:0b:83:78:5f:9f:9d:44:07:
                    9e:3d:9f:c1:0b:ba:83:8f:b6:d9:e6:53:e8:e9:42:
                    fe:07:61:32:dc:02:16:68:67:d3:e0:e9:50:de:9c:
                    d4:04:2c:d0:76:6a:51:8a:c3:6a:72:18:e4:e3:28:
                    c7:a7:2a:f5:b6:9e:7e:7e:8b:27:42:e7:0c:a3:62:
                    0f:57:44:06:ad:3f:ee:f2:11:f1:17:7c:f1:d7:98:
                    17:34:28:f5:b8:82:68:b2:6e:09:2a:5f:5c:e6:e6:
                    10:ed:de:48:6d:7e:e6:cb:6a:1e:6a:4d:10:34:32:
                    6a:6a:03:e5:ed:56:95:b8:ca:b4:9b:c2:49:08:36:
                    60:ce:e1:da:ff:af:c5:a7:7b:da:20:9f:78:6a:b0:
                    f4:30:73:50:e2:cd:ca:1e:44:3a:c9:70:8e:d0:5a:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:DE:B2:6A:57:46:B5:00:01:7C:B4:FD:9F:5C:32:C3:4A:E4:2B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6D_esmpXRrUAAXy0_Z9cMsNK5Cs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:25:e5:32:2a:c9:a6:ae:f2:13:a2:0b:53:14:88:07:b6:77:
         f7:98:33:2d:59:22:11:79:ba:ec:3d:da:a0:f1:93:54:b3:b3:
         2c:e7:36:6d:45:68:e0:e1:a9:5f:69:87:86:12:f8:35:44:ee:
         28:cc:fe:92:d7:6c:5b:5d:6e:1a:51:04:26:8c:80:34:35:4c:
         8c:40:8f:d5:66:b3:93:36:81:2a:34:33:23:39:52:b8:8b:62:
         aa:bc:c8:3d:68:df:46:ea:15:7f:ce:9e:e9:f5:f0:a8:dd:40:
         6b:23:c6:87:ba:be:57:aa:83:01:41:41:b1:b3:9a:91:dd:ba:
         e6:16:43:07:7c:a1:fa:e3:c2:17:fd:94:c5:f6:41:5f:13:b4:
         e9:fd:eb:eb:06:b0:c4:c7:17:ad:2c:26:b6:b0:7d:4c:86:c6:
         5f:93:88:e1:c0:a1:ec:98:5f:81:50:83:40:9d:3c:2d:51:d6:
         72:44:41:11:b4:25:89:50:da:bf:51:3a:2a:1c:b1:e2:ea:87:
         ab:78:66:bc:f5:b8:00:ca:a6:30:19:70:f1:cf:94:34:40:e0:
         94:75:3b:ff:8f:98:01:17:3a:33:eb:8a:f1:6a:b6:37:a3:62:
         7c:ae:b2:12:af:89:17:20:79:c7:43:55:f6:56:f6:e1:44:a8:
         7d:06:36:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:44:48 2025 by rpki-client