Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISdN1TReHNqk_tsMJrEJqEcQkwE.roa
File:                     ISdN1TReHNqk_tsMJrEJqEcQkwE.roa (raw, json)
Hash identifier:          oetdCN75c6M1D5qV0TMShLRDRd/ufKwwmuQ5c2USbQM=
Subject key identifier:   21:27:4D:D5:34:5E:1C:DA:A4:FE:DB:0C:26:B1:09:A8:47:10:93:01
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189590BC94BF9404B3ADBC6DE8DAC6700E6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISdN1TReHNqk_tsMJrEJqEcQkwE.roa
Signing time:             Sat 15 Jul 2023 10:14:51 +0000
ROA not before:           Sat 15 Jul 2023 10:14:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:59:0b:c9:4b:f9:40:4b:3a:db:c6:de:8d:ac:67:00:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 15 10:14:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21274dd5345e1cdaa4fedb0c26b109a847109301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:61:22:39:eb:af:11:17:95:15:91:6b:e5:
                    b9:f9:8c:b0:63:34:af:8a:42:58:8d:41:ad:66:73:
                    99:a3:24:38:59:15:6b:f3:57:73:80:cd:e3:86:16:
                    60:49:32:c4:45:36:10:46:24:70:81:84:8b:b0:4a:
                    7e:71:86:40:df:12:09:76:10:c4:0c:9f:7e:d8:c1:
                    f9:3c:35:40:73:27:f8:57:3b:b3:d5:c4:a6:8f:74:
                    61:17:e1:07:85:15:b2:3a:ba:96:4e:2f:df:24:95:
                    3f:45:f1:2a:ca:ec:1f:ec:84:d7:23:c0:af:d4:da:
                    e0:e1:bc:16:33:38:84:f7:bb:ca:ed:4a:a3:c6:cd:
                    79:78:09:ce:d2:d9:b2:fd:7b:d6:d7:d5:fe:87:38:
                    51:1a:4e:d8:bd:ed:bd:be:dd:bc:6e:30:bf:98:cf:
                    49:4f:35:73:f9:ca:7e:c1:df:08:d0:e9:b1:e2:aa:
                    8c:41:24:b1:3e:71:2d:94:c6:e9:ce:01:7d:32:b1:
                    87:14:6d:91:e8:13:e3:a6:f6:0c:ac:6b:9a:7b:07:
                    f2:01:13:fa:d0:ee:48:55:2a:72:b7:46:5c:c6:be:
                    97:08:71:f2:fb:4b:d2:91:2a:07:dc:6a:2f:7a:e3:
                    ba:69:d9:11:cc:6f:4d:ad:79:95:23:1d:bd:74:8e:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:27:4D:D5:34:5E:1C:DA:A4:FE:DB:0C:26:B1:09:A8:47:10:93:01
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ISdN1TReHNqk_tsMJrEJqEcQkwE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:cc:c8:fc:7d:2e:47:29:22:e5:cd:5e:c6:91:28:21:99:48:
         95:6a:ee:33:24:57:55:37:6e:65:b7:8c:20:eb:67:0d:ef:86:
         d0:d3:4c:8a:7d:ba:b9:a0:cd:03:ae:49:2e:29:8f:a3:a2:97:
         21:e3:70:69:63:fa:cb:c9:74:e4:18:ad:5c:8a:f3:ae:51:3b:
         8d:e6:e3:90:e6:3b:97:eb:8a:74:db:8a:9f:f5:50:18:25:79:
         66:91:43:92:b2:80:13:a8:3e:b3:bb:24:d3:d2:28:e8:e7:3c:
         33:3f:fa:1d:74:76:4f:09:4c:a7:99:8f:39:5f:1e:d3:46:38:
         43:ce:ee:b6:e1:b0:23:36:bf:a6:d2:fe:0b:df:9b:ba:77:f9:
         07:71:ac:4c:8a:da:1a:5a:36:7d:56:fc:50:20:8e:45:ee:c8:
         22:6d:9a:25:cf:0e:b9:2f:78:07:2e:3e:14:62:77:33:b0:f9:
         ac:f9:2e:2c:91:99:d2:4d:fb:2a:2c:50:bc:31:71:54:5e:0a:
         b7:e9:a1:5f:50:74:11:60:3a:cf:07:2e:65:53:ab:41:30:ee:
         d2:27:4a:ed:7b:de:7d:00:3c:83:32:e0:e0:dc:c2:1c:2a:bb:
         72:b5:f3:a9:27:ef:1c:d1:c8:2f:af:36:0b:11:08:21:b7:52:
         e0:ba:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:03:32 2025 by rpki-client