Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3EyVmLnMx-b_uE1g_N57nXlKXI.roa
File:                     E3EyVmLnMx-b_uE1g_N57nXlKXI.roa (raw, json)
Hash identifier:          7SB6rAwMfjj0h8L9MpT0yQTShfVzWNUBX+y6jc+n/Sg=
Subject key identifier:   13:71:32:56:62:E7:33:1F:9B:FE:E1:35:83:F3:79:EE:75:E5:29:72
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188484BC3B91E6877D8FA9E7D4FA8A9996C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3EyVmLnMx-b_uE1g_N57nXlKXI.roa
Signing time:             Tue 23 May 2023 11:08:24 +0000
ROA not before:           Tue 23 May 2023 11:08:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:48:4b:c3:b9:1e:68:77:d8:fa:9e:7d:4f:a8:a9:99:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 23 11:08:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1371325662e7331f9bfee13583f379ee75e52972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:02:b5:30:92:ef:9a:f7:c4:55:54:7b:26:87:
                    22:f8:9e:83:e9:81:4f:96:e0:13:4d:31:41:2b:48:
                    76:c9:aa:05:d7:b8:11:11:fb:2e:57:cf:6d:64:e7:
                    f3:4d:52:8c:b9:62:05:41:af:28:b8:a4:a8:10:64:
                    24:e6:f8:af:db:e8:cf:97:22:ca:13:90:ad:a5:12:
                    ed:56:95:1a:70:b3:95:a3:6b:79:27:1b:96:06:86:
                    2b:08:68:78:4a:c3:a6:3c:3d:df:3c:68:fd:8f:c2:
                    1f:8a:c6:04:8b:9c:5a:f9:93:bb:ac:f9:d6:df:0d:
                    36:e9:b5:55:4b:3f:b2:49:c4:9f:7c:11:6e:cc:e0:
                    6c:62:80:37:db:2e:7d:bb:96:1e:79:8c:1a:e7:94:
                    b6:0b:e2:bf:61:8f:cc:14:9b:67:8a:ea:e8:57:5e:
                    bc:ae:ef:bb:be:23:9f:19:74:2c:13:fa:0b:7f:81:
                    b2:f4:2c:59:06:16:b0:7e:80:cc:9d:b9:c8:c4:e6:
                    43:0e:50:7e:28:b8:56:4f:c3:d5:af:13:22:e5:dd:
                    b0:97:d3:ff:3a:3c:95:a2:92:fb:0f:bf:2a:2b:1a:
                    82:f5:af:45:6b:9b:33:fd:56:4c:67:b2:f8:33:6d:
                    89:90:e2:f8:b3:04:11:e9:97:11:61:3f:3a:5f:f5:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:71:32:56:62:E7:33:1F:9B:FE:E1:35:83:F3:79:EE:75:E5:29:72
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E3EyVmLnMx-b_uE1g_N57nXlKXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:bc:a7:02:f5:7e:d8:58:84:92:bc:23:ae:c3:56:fc:c6:ef:
         5c:ad:ab:43:5f:1a:ef:23:78:6a:18:b7:22:54:d2:62:3c:6d:
         a4:e5:1f:23:64:54:fe:24:62:1e:36:d7:97:9d:e8:f8:f4:bc:
         e0:6e:ae:7b:87:04:21:3a:e4:99:2f:b9:33:0c:98:56:fa:5d:
         2c:65:e4:9d:83:2b:f0:d1:2c:67:de:e2:97:2b:70:98:59:c3:
         ec:30:2c:e8:75:18:14:7f:c6:f1:6f:f0:c2:b8:a2:d2:79:23:
         0f:14:85:0e:f7:27:6e:c8:69:de:d7:3a:75:01:e0:79:32:42:
         ff:6f:c9:fb:65:36:15:f0:f3:6e:0a:0c:a0:64:02:eb:ac:12:
         f0:89:0c:1a:0b:5a:94:00:83:64:b6:f1:0c:9d:f2:9f:66:15:
         65:0f:89:a1:12:fa:ff:a7:1c:2a:8b:2a:4f:bf:fe:f5:6e:1e:
         34:f8:0c:21:e8:c0:06:97:f7:ab:b9:5e:84:b8:dc:74:a7:42:
         f8:81:da:f5:8f:35:d4:2a:38:75:d2:36:27:1e:55:6d:91:af:
         5a:6b:35:f7:f6:5d:2a:76:04:77:53:8e:5c:41:b2:51:f9:27:
         31:3b:aa:f8:8b:74:cd:2c:7b:de:72:36:4f:02:d1:a8:71:03:
         b2:bf:a9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:29 2025 by rpki-client