Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVfmHYG0_X_8BcskYXoXcLv-el8.roa
File:                     BVfmHYG0_X_8BcskYXoXcLv-el8.roa (raw, json)
Hash identifier:          iOxghiCmXdTwg12i9YiJmYiF43wZmyT77XOe33nQI9M=
Subject key identifier:   05:57:E6:1D:81:B4:FD:7F:FC:05:CB:24:61:7A:17:70:BB:FE:7A:5F
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A4471A115FBC0748AE0D1F7AA9F0AF466
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVfmHYG0_X_8BcskYXoXcLv-el8.roa
Signing time:             Wed 30 Aug 2023 03:16:52 +0000
ROA not before:           Wed 30 Aug 2023 03:16:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:44:71:a1:15:fb:c0:74:8a:e0:d1:f7:aa:9f:0a:f4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 30 03:16:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0557e61d81b4fd7ffc05cb24617a1770bbfe7a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e7:a2:1d:f1:50:cd:b7:31:aa:c8:0c:e5:29:
                    09:ee:ec:1d:ea:46:5c:8f:a8:da:dc:70:78:ed:e3:
                    f1:f6:57:e4:ed:7a:b4:c1:f2:3e:76:0c:05:dd:8a:
                    9b:59:f8:92:50:a5:0a:a8:6f:d3:81:75:16:2c:b8:
                    98:4c:0f:f7:75:76:57:3e:ca:7d:2a:ac:fd:d0:8d:
                    40:df:01:cc:20:95:fd:63:4e:bc:05:3d:a4:6f:b5:
                    ec:ca:b0:2f:20:6d:11:df:0e:8f:b5:1c:91:bb:ee:
                    bd:8c:cc:fd:58:ed:e6:6f:da:26:ed:38:f5:b1:7c:
                    61:2b:97:4f:cf:b6:4b:a1:bc:c9:3f:57:8a:61:06:
                    2e:38:93:8d:be:fd:e7:46:cc:c3:c4:88:55:ae:15:
                    c3:43:b7:1d:3d:0b:76:18:36:8d:3a:30:b9:bf:d2:
                    9a:98:d9:bc:42:d8:c8:9a:0b:4f:52:ed:13:1c:6b:
                    b5:0b:8f:6e:3f:e0:7c:a7:0b:f1:2e:e3:93:53:41:
                    92:d1:bb:18:88:6c:40:1f:e1:29:e2:e2:f5:58:a9:
                    dc:14:5f:3e:2b:31:0c:8a:49:6a:8c:03:b4:78:32:
                    12:3d:a2:99:13:f9:3c:86:d0:8b:73:5e:2d:63:e9:
                    e0:da:c7:13:4b:10:6b:ac:28:e6:13:ef:f9:f7:37:
                    6f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:57:E6:1D:81:B4:FD:7F:FC:05:CB:24:61:7A:17:70:BB:FE:7A:5F
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/BVfmHYG0_X_8BcskYXoXcLv-el8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:6a:dd:d2:ea:d1:ae:b3:78:fc:64:b6:76:69:8d:88:50:86:
         41:a7:69:98:4a:72:94:9e:10:00:23:9c:1c:90:a3:59:f5:5c:
         5b:14:ee:9b:0f:15:62:b0:12:20:59:ce:4c:fb:a8:1b:a0:48:
         7c:97:e6:c8:c5:b2:09:af:22:33:6a:f6:8a:51:60:34:7d:a5:
         c2:8b:46:5c:03:87:e4:f9:a8:67:44:29:d8:48:14:da:d9:b4:
         31:39:e8:d4:ba:ce:ae:50:83:ce:14:b8:7a:ba:7e:cf:64:cb:
         64:e5:19:8b:b0:8b:a6:49:06:1a:03:c8:f9:ec:f0:56:bd:7c:
         fa:53:b2:91:30:34:57:25:7c:2f:64:37:5d:26:96:bb:d1:62:
         d9:fa:1a:de:9e:79:2f:57:d0:cf:a6:f3:4a:6f:09:45:e4:82:
         ee:a3:f3:38:33:0b:75:7f:5f:31:cf:45:4f:c7:83:70:6d:e6:
         02:e7:fa:83:3e:b6:22:c9:00:a2:b8:87:68:b4:fd:d1:f8:4f:
         b9:9b:69:b7:99:71:ac:42:92:2f:89:ae:58:2e:ca:c1:ca:a6:
         ed:b9:38:d8:60:9a:bd:6b:6c:19:e8:16:43:91:25:f7:bb:21:
         e0:91:f8:b6:42:58:b6:b9:ab:92:84:a5:ba:59:e2:17:91:f4:
         01:a6:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:44:34 2025 by rpki-client