Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VW_liF9HB7K_6EP4qowJyXq69Xw.roa
File:                     VW_liF9HB7K_6EP4qowJyXq69Xw.roa (raw, json)
Hash identifier:          qUOa6lF2ElMsakvLvZAIM3qBLzCi4Fh4T2caO/oy7BI=
Subject key identifier:   55:6F:E5:88:5F:47:07:B2:BF:E8:43:F8:AA:8C:09:C9:7A:BA:F5:7C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       7841592F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VW_liF9HB7K_6EP4qowJyXq69Xw.roa
Signing time:             Mon 04 Apr 2022 03:09:17 +0000
ROA not before:           Mon 04 Apr 2022 03:09:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017548591 (0x7841592f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  4 03:09:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=556fe5885f4707b2bfe843f8aa8c09c97abaf57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c2:ee:9d:f0:67:49:9c:bf:03:e2:e2:0d:02:
                    52:8b:a2:4f:c8:36:e8:35:68:1e:3e:47:60:f6:68:
                    4c:fa:84:ce:fb:8d:5f:0c:13:7e:52:a6:0b:3c:60:
                    d5:50:48:7c:ef:14:61:06:98:11:b6:ee:2a:97:06:
                    ec:31:1c:50:16:9f:f4:05:52:25:41:b7:38:02:99:
                    a1:d7:07:9e:2b:f3:0f:ff:8e:e0:29:2c:86:2a:28:
                    0c:5b:9a:a3:d4:aa:c6:eb:9b:07:43:c4:4b:b7:27:
                    b1:2f:e3:c3:c3:03:f3:00:0b:40:4b:dd:dd:e0:69:
                    14:6a:48:e2:4f:1b:c2:60:fe:14:d6:43:2e:15:1e:
                    d7:59:51:99:5c:80:48:88:98:4b:dc:73:4c:98:f8:
                    42:ba:cc:97:17:fe:9e:cb:54:8d:fd:42:69:69:bb:
                    fa:51:8f:88:d0:a5:22:5f:c3:bf:00:01:ac:21:b7:
                    80:62:62:fc:e6:fc:89:cc:71:13:e5:48:90:9b:fc:
                    ba:ca:01:e5:6a:9c:9c:ac:db:3d:c4:1f:c1:ea:9b:
                    40:15:0a:ff:1c:8c:84:1e:3c:82:fe:ee:c1:40:34:
                    cb:85:43:1a:93:a6:97:c5:6a:ac:4a:88:43:5c:e3:
                    97:e3:9a:b6:d3:bd:91:67:ce:f5:27:72:f3:a6:fd:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6F:E5:88:5F:47:07:B2:BF:E8:43:F8:AA:8C:09:C9:7A:BA:F5:7C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VW_liF9HB7K_6EP4qowJyXq69Xw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:da:7d:74:2b:c6:99:2e:17:7c:1d:d9:0c:8c:fe:f9:53:94:
         ef:76:a7:8a:57:1a:05:86:2a:67:eb:21:95:7d:af:50:5a:a4:
         41:c1:38:3f:73:f9:3c:58:ee:f4:ed:6a:88:25:8e:17:d3:fa:
         dd:2f:69:87:95:93:aa:53:f1:5d:9d:0d:1b:5a:68:d2:c6:e0:
         b4:ae:ab:e0:78:d8:b0:ba:4a:d3:dd:19:db:2e:a4:f0:7b:b3:
         f4:0d:2e:81:9f:3f:03:50:ba:19:25:b2:1f:ba:40:df:b5:d4:
         58:7b:51:e8:84:90:4b:1f:28:12:ea:37:13:f3:02:be:72:50:
         1a:4e:87:d7:df:b1:2b:2b:ac:83:da:89:f9:ef:4b:46:44:ff:
         bb:e6:ad:2f:dd:52:a5:63:e9:bf:3b:55:e9:74:fa:c3:16:8a:
         61:4a:80:70:8a:60:16:6c:fe:26:22:ef:30:eb:29:be:d3:37:
         12:e0:06:f9:8c:bb:6e:0f:10:7c:59:81:97:fe:be:29:6f:6c:
         e2:c5:7d:6e:b2:a4:19:5c:a7:72:a6:7a:e2:51:7d:4c:2b:54:
         e2:c3:cc:0f:19:5a:38:90:83:fb:31:3f:e2:a7:d8:2b:a9:31:
         eb:3e:79:75:b5:53:4a:01:37:19:2b:d0:d9:a4:f5:15:ed:27:
         33:68:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:04:23 2025 by rpki-client