Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OSxhPMwIijRUc378g2KVZiXzNxw.roa
File:                     OSxhPMwIijRUc378g2KVZiXzNxw.roa (raw, json)
Hash identifier:          dCpWUeXCT3DkrZCYS1Yd5Yx9sx5TASPw+Ot+2Ea0Dks=
Subject key identifier:   39:2C:61:3C:CC:08:8A:34:54:73:7E:FC:83:62:95:66:25:F3:37:1C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186D964E4F4B7B6E5905CEBA3BDE99FB605
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OSxhPMwIijRUc378g2KVZiXzNxw.roa
Signing time:             Mon 13 Mar 2023 05:15:13 +0000
ROA not before:           Mon 13 Mar 2023 05:15:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:d9:64:e4:f4:b7:b6:e5:90:5c:eb:a3:bd:e9:9f:b6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 13 05:15:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=392c613ccc088a3454737efc8362956625f3371c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e5:b2:d0:72:12:e0:10:9e:91:8a:93:11:ed:
                    63:0a:0d:c3:f4:da:b9:f8:6e:83:81:06:b1:03:ee:
                    91:c9:f5:57:bd:4a:6a:38:dd:da:21:5b:fc:63:3d:
                    2b:bd:d0:34:bb:cf:35:59:1a:1d:a8:b2:21:25:6f:
                    0d:ec:e6:01:85:99:f9:21:03:64:b8:68:59:48:93:
                    87:f8:fb:bc:84:79:ff:80:2b:4e:c8:dc:20:60:0e:
                    04:51:64:7b:ee:5e:c1:16:aa:0d:eb:9c:6d:da:41:
                    d0:30:08:aa:63:e1:78:77:88:41:7e:98:31:8c:de:
                    74:b8:a0:8e:cc:0f:46:10:73:85:58:91:9d:2d:b1:
                    ad:d2:42:56:11:de:9a:f8:d4:ae:ab:db:c5:9e:a4:
                    86:47:03:89:06:cc:66:56:ec:c0:f2:0a:72:54:a7:
                    5f:e3:d7:83:80:35:78:7d:57:60:d9:8c:9d:4f:37:
                    74:d2:a4:58:38:ab:9e:be:a5:62:3f:88:48:c5:e5:
                    c4:7c:01:ae:6c:e5:f9:5e:90:d5:9b:1e:13:1b:8d:
                    73:e2:51:7e:6f:a7:84:a5:cd:92:0e:b8:90:52:8d:
                    84:42:68:c5:e6:b4:71:d0:dc:ae:86:6f:5c:ee:2c:
                    da:0f:aa:d0:22:ba:33:72:0d:7b:72:a5:ca:bc:4c:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2C:61:3C:CC:08:8A:34:54:73:7E:FC:83:62:95:66:25:F3:37:1C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OSxhPMwIijRUc378g2KVZiXzNxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:b3:bf:c6:0e:bc:fa:cf:75:5f:37:91:66:16:79:6e:ce:32:
         e0:25:61:96:dc:75:56:c8:fd:53:dc:27:3f:6f:0e:24:9a:da:
         42:1f:3d:ca:b3:57:4c:fd:d8:a0:55:c3:a8:8c:79:f5:54:4a:
         ef:d6:45:7d:43:a7:8c:2f:4a:eb:f1:51:60:ca:ce:74:3e:f6:
         a7:ae:1c:0c:85:01:5e:eb:af:98:03:06:1a:d6:cf:ab:fc:ec:
         55:6a:cc:6d:58:16:5b:da:9d:b1:63:33:dc:ac:b4:c7:85:82:
         d3:99:72:67:00:56:8c:21:55:9c:2f:d7:46:07:c5:44:b6:9a:
         c5:c0:8f:da:59:5e:c4:43:f1:87:9a:9c:63:eb:bf:51:78:ab:
         57:b6:3e:d5:50:1c:6e:6c:c1:f1:9c:dc:8d:67:52:a5:70:d8:
         b3:33:bb:1e:f1:4a:7e:99:80:77:a3:ec:e4:b2:73:cf:c3:55:
         f6:4d:97:41:9d:d9:f1:42:e3:31:8b:d9:0c:0c:b7:59:f1:ca:
         19:2a:b7:d5:18:6c:4e:1c:76:45:ef:e8:c9:4c:1c:d2:ef:2c:
         05:62:86:0c:91:0b:25:47:22:de:97:be:7a:bc:41:d0:d8:f4:
         a9:d7:c4:b9:77:a1:f9:c1:60:52:8a:34:7a:ea:2a:9f:be:5c:
         72:64:80:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:45:19 2025 by rpki-client