Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x0JnlEpY4GtL2m-Wj2ap0Je6Mkk.roa
File:                     x0JnlEpY4GtL2m-Wj2ap0Je6Mkk.roa (raw, json)
Hash identifier:          k1DZmRw9Oh/x2kIHdrjyVhr3KDawvuwydyoUVULChZs=
Subject key identifier:   C7:42:67:94:4A:58:E0:6B:4B:DA:6F:96:8F:66:A9:D0:97:BA:32:49
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       6992D26F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x0JnlEpY4GtL2m-Wj2ap0Je6Mkk.roa
Signing time:             Fri 11 Feb 2022 01:09:27 +0000
ROA not before:           Fri 11 Feb 2022 01:09:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771229807 (0x6992d26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 11 01:09:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c74267944a58e06b4bda6f968f66a9d097ba3249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:9d:4b:14:df:9f:0a:cb:73:50:06:a0:c6:
                    ce:e9:36:98:f3:a4:30:ce:47:1b:dd:c7:78:07:6e:
                    00:7a:bd:8d:bf:6a:56:e5:61:20:98:64:74:4a:62:
                    89:3b:25:ca:a6:ab:62:7b:5b:dd:91:f7:b6:a8:92:
                    c5:9a:2f:b5:66:42:83:91:f4:0e:52:71:08:7f:7c:
                    b4:6d:b6:2e:0d:7d:7e:a1:1b:67:1f:36:80:04:7f:
                    c4:88:a7:c2:32:9f:8a:fd:10:79:ab:f7:1c:e9:5c:
                    c5:79:21:22:33:f1:68:6a:4f:6e:ae:77:41:e0:cd:
                    4f:27:e8:ae:c2:ce:c9:f6:38:82:56:2f:42:83:1c:
                    17:9f:5e:f5:6e:c9:ad:ed:4e:22:bd:43:f1:f5:55:
                    70:41:1f:85:9f:38:50:a1:b1:45:75:91:9d:ec:19:
                    75:cd:3d:33:1f:26:b9:13:6c:79:98:e3:2d:81:6f:
                    c7:85:52:18:c1:50:ea:2f:58:3e:85:0b:c8:a0:64:
                    c0:4e:45:bd:b3:46:09:df:2c:30:1c:d0:6f:03:16:
                    54:14:2d:0a:ca:8c:ba:17:e8:55:26:b2:25:f0:05:
                    4e:7d:17:ce:15:40:57:a5:f2:e6:88:db:6c:79:7e:
                    b2:62:b8:8f:ad:d0:e3:b8:b1:e4:8e:b6:4b:de:e7:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:42:67:94:4A:58:E0:6B:4B:DA:6F:96:8F:66:A9:D0:97:BA:32:49
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x0JnlEpY4GtL2m-Wj2ap0Je6Mkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:d6:2c:aa:21:84:6a:46:c4:e3:47:e7:fb:05:97:5b:69:
         43:50:16:59:92:8d:2f:5b:7d:29:f5:54:eb:f8:69:78:e0:dd:
         7e:1c:97:a6:ec:91:fc:17:69:74:99:a4:c4:e8:e5:c0:0f:be:
         be:61:40:6d:88:e9:2b:3f:4a:64:f0:d4:cd:4d:a6:5f:dc:0b:
         d0:a7:e8:aa:ff:9b:31:93:78:a8:0e:5d:e6:6f:27:d7:6c:e0:
         a8:c7:75:75:16:83:3d:65:9c:13:3d:25:13:63:d4:57:8b:5a:
         4d:08:d0:23:62:65:03:a7:5e:51:db:85:15:b4:eb:cd:b3:fb:
         6d:dd:e0:07:c3:bc:6d:fb:6a:56:3f:5c:85:2c:07:20:8e:4f:
         07:51:b7:8c:95:10:29:da:d4:41:9a:62:50:01:c2:b4:48:77:
         bb:14:14:83:6f:10:4a:61:51:1a:54:02:4a:53:74:22:f9:b1:
         ac:87:93:68:be:8d:c1:14:fa:98:70:ad:27:3a:9f:1e:86:8f:
         fa:85:f4:44:11:f7:53:47:e7:e6:61:9b:36:72:eb:6e:6e:5b:
         fd:b9:79:e9:90:ea:ba:6f:11:dd:d9:0d:42:a3:e2:50:01:25:
         32:5f:c4:49:86:3a:dd:29:7e:32:0a:e9:8b:41:62:12:14:1e:
         51:ad:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:22 2025 by rpki-client