Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppyxildZWkhDChMeTt2DWWWo70s.roa
File:                     ppyxildZWkhDChMeTt2DWWWo70s.roa (raw, json)
Hash identifier:          tvm5Er3nRlXbOJpoO3jKb9asa073KHHjXbzW/NbFn7w=
Subject key identifier:   A6:9C:B1:8A:57:59:5A:48:43:0A:13:1E:4E:DD:83:59:65:A8:EF:4B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188323500C21752C3503227F4E40D9E3DAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppyxildZWkhDChMeTt2DWWWo70s.roa
Signing time:             Fri 19 May 2023 04:11:54 +0000
ROA not before:           Fri 19 May 2023 04:11:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:32:35:00:c2:17:52:c3:50:32:27:f4:e4:0d:9e:3d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 19 04:11:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a69cb18a57595a48430a131e4edd835965a8ef4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:4c:63:2e:04:2b:e8:fa:d3:c2:2a:65:27:
                    97:80:63:51:03:a5:4d:1f:85:fc:d3:3b:1b:0d:37:
                    de:9f:15:32:eb:8b:cf:fc:dd:2e:2d:3f:82:5e:dd:
                    21:21:f8:ae:eb:14:e0:94:89:61:cc:16:fd:a7:0a:
                    31:dc:aa:78:6a:f5:a5:70:35:c0:a2:14:28:7a:9a:
                    38:09:17:16:65:dd:05:d7:58:10:7b:c0:de:86:b1:
                    09:83:ef:a1:54:5e:4e:bc:88:23:d8:3a:33:39:a4:
                    ac:8c:4e:71:ab:0a:b8:93:04:31:e0:4a:b6:2d:49:
                    0f:d2:b8:59:3a:41:c6:69:f1:33:dc:f2:24:19:84:
                    78:09:2c:04:62:ec:07:6e:13:9c:90:de:83:20:2f:
                    d8:5d:e2:32:c0:d3:d1:c9:db:1c:42:c1:4b:5b:e4:
                    73:25:6a:88:e1:56:52:75:99:9e:20:5a:21:40:5c:
                    b0:07:c3:82:74:78:a4:2b:08:c4:69:8f:4a:61:bf:
                    e6:7b:9d:23:07:56:f3:46:df:bc:e4:58:99:77:fb:
                    11:8d:a5:e1:e8:19:c1:0f:ac:01:49:33:fe:67:04:
                    aa:aa:02:17:06:b9:66:08:8e:de:4e:5a:60:8c:af:
                    40:c4:a4:14:ab:1e:71:01:af:2e:15:ff:e5:9b:80:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9C:B1:8A:57:59:5A:48:43:0A:13:1E:4E:DD:83:59:65:A8:EF:4B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ppyxildZWkhDChMeTt2DWWWo70s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:59:91:f5:30:c6:9b:a1:81:51:42:c9:d4:19:f3:e8:fb:b8:
         a2:7e:c0:a7:a0:eb:c3:e2:2c:ed:8c:d3:74:45:31:65:12:a9:
         f1:57:26:6c:0c:59:b5:1e:c6:4c:ce:29:59:58:d6:3f:41:42:
         59:62:35:23:fb:6e:e1:23:f8:4b:eb:34:35:8b:49:a9:be:ee:
         25:9a:c6:74:00:a6:bc:07:c9:40:c6:bf:ec:96:90:08:c9:06:
         2c:82:13:ce:79:6d:25:28:79:79:e0:27:bd:95:13:fc:48:15:
         8e:dc:0a:39:04:16:4e:e1:ae:0d:5e:fe:59:52:7d:69:a6:89:
         9b:0c:35:b8:57:92:10:a2:d0:41:56:e0:9d:97:a0:01:0e:61:
         a7:3b:1d:80:c2:24:2b:14:98:0a:fd:a9:54:40:3f:78:7e:20:
         5d:40:81:ba:22:33:c0:c1:13:e2:d9:fd:77:b1:0a:bf:22:a6:
         bb:86:4f:79:05:91:b9:45:6e:f1:10:99:21:1d:22:4f:db:51:
         70:d6:c5:50:69:89:ba:1c:53:80:56:c2:1e:76:bd:e5:2d:dc:
         41:d4:74:9b:3f:7f:1f:c0:78:e7:68:04:99:cc:a0:96:4c:57:
         4e:58:25:1e:2d:29:3b:8b:f6:e2:7b:75:05:ca:0c:31:4a:3d:
         1c:1b:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:13 2025 by rpki-client