Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuohhmIaCuPHa1VJyPjR_G4oFqg.roa
File:                     uuohhmIaCuPHa1VJyPjR_G4oFqg.roa (raw, json)
Hash identifier:          /t0xkvUo9riAV79SFFnz+k4wlQcE6H0Rjg1SKnVPx+c=
Subject key identifier:   BA:EA:21:86:62:1A:0A:E3:C7:6B:55:49:C8:F8:D1:FC:6E:28:16:A8
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       6A54A865
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuohhmIaCuPHa1VJyPjR_G4oFqg.roa
Signing time:             Sun 13 Feb 2022 18:09:47 +0000
ROA not before:           Sun 13 Feb 2022 18:09:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783933029 (0x6a54a865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 13 18:09:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=baea2186621a0ae3c76b5549c8f8d1fc6e2816a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:90:82:10:26:aa:8b:59:f9:50:73:e2:d5:
                    ad:79:36:80:09:c1:f6:1d:d2:22:fa:3b:af:d0:07:
                    a9:7c:c3:e8:f6:8f:fd:5c:ef:3a:aa:93:ab:e5:6e:
                    e0:c4:2d:b4:b9:1d:43:e0:40:86:d0:99:2a:dd:de:
                    5b:ca:44:00:ca:4b:a7:37:ec:1b:45:ce:a8:d5:b2:
                    60:89:6c:f6:3d:fc:07:be:aa:00:c4:2f:b0:46:06:
                    19:08:44:4e:b1:49:0c:9a:12:88:01:45:4c:d1:f4:
                    24:5b:88:2e:47:90:1d:cb:b0:e4:b8:af:a0:ac:11:
                    e0:06:87:1b:62:bb:bd:29:e2:8e:d1:93:f9:d4:e3:
                    c4:22:a1:4f:25:9d:bc:0b:3b:83:ff:7d:8c:63:a8:
                    6b:a9:3c:c0:08:55:80:cd:ac:73:ef:82:96:69:2a:
                    f8:15:60:d5:e0:80:4c:68:06:38:75:d4:0d:18:7f:
                    d8:e8:73:95:f0:3d:8b:cf:f2:2c:2c:a6:97:14:de:
                    e3:de:68:6a:cb:8d:7c:a8:af:e2:4c:55:03:e4:fa:
                    da:0a:6f:df:f0:a0:b1:aa:e1:f2:fc:d0:2f:ad:ee:
                    3d:b5:ea:42:d8:8c:e8:6e:71:2a:cf:d9:34:10:d9:
                    27:a5:6e:97:1f:ad:f5:38:c3:b5:f0:9d:b4:bd:db:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:21:86:62:1A:0A:E3:C7:6B:55:49:C8:F8:D1:FC:6E:28:16:A8
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uuohhmIaCuPHa1VJyPjR_G4oFqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:82:05:3a:f8:b8:b4:90:9a:94:9e:9d:0e:ce:72:b1:f0:
         18:17:3f:39:49:0e:56:8d:e8:96:7c:4e:d2:57:37:dc:87:a1:
         d0:14:e3:2e:a0:6c:51:2a:af:a4:9f:9b:d7:bf:84:19:9a:14:
         a1:1a:0c:17:97:b2:35:29:7d:63:9f:31:db:b5:64:74:05:39:
         f3:4b:48:c0:c6:4f:20:fa:55:94:d4:fc:bc:2e:16:ef:7d:b7:
         62:d8:27:c4:9a:f7:f4:34:f2:cf:94:17:26:a5:75:f3:d5:f5:
         14:f9:e2:db:d6:c2:85:aa:ef:ad:f3:47:02:e4:1d:68:66:bc:
         41:a7:c1:63:b9:9e:5b:46:b6:74:0f:65:04:85:34:d2:63:81:
         e0:ed:c4:fa:b8:8b:64:bf:d9:cd:df:51:8c:2d:18:76:32:54:
         37:0c:68:fb:bd:c7:cc:04:9c:50:eb:87:58:48:8d:ee:da:7b:
         50:c6:b3:59:84:19:2c:4c:61:32:fd:79:fc:0e:92:ba:36:59:
         ee:d1:d1:54:48:90:ae:ae:c2:b7:a2:1b:de:da:35:39:e2:c7:
         76:a3:03:39:10:74:20:05:78:49:0c:42:d5:8b:2d:d5:18:62:
         ba:44:0c:fd:a6:9f:db:41:96:42:ff:e4:bd:ab:6a:dc:88:b5:
         96:31:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:05 2025 by rpki-client