Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lzkQlgucaDf8LWIyFH9fwhf9C8E.roa
File:                     lzkQlgucaDf8LWIyFH9fwhf9C8E.roa (raw, json)
Hash identifier:          ZZtdMZq+lpgK7mnk9pI8Mh64O87avGoRso2FSRR4Ck4=
Subject key identifier:   97:39:10:96:0B:9C:68:37:FC:2D:62:32:14:7F:5F:C2:17:FD:0B:C1
Certificate issuer:       /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial:       01974897CEFD04DD09A393A5EE764F0A437B
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lzkQlgucaDf8LWIyFH9fwhf9C8E.roa
Signing time:             Sat 07 Jun 2025 04:13:17 +0000
ROA not before:           Sat 07 Jun 2025 04:13:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
                          2001:67c:64:ffff:0:197:108e:927e/128 maxlen: 128
                          2001:67c:64:ffff:0:197:15eb:6226/128 maxlen: 128
                          2001:67c:64:ffff:0:197:353f:be91/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:97:ce:fd:04:dd:09:a3:93:a5:ee:76:4f:0a:43:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
        Validity
            Not Before: Jun  7 04:13:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=973910960b9c6837fc2d6232147f5fc217fd0bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e1:91:44:92:e7:09:59:be:5c:09:0c:d3:26:
                    a6:9a:ba:e7:96:f3:59:2e:28:40:5f:4d:90:de:4f:
                    8b:62:6c:e3:f3:3a:11:90:8e:cc:df:c1:28:f5:49:
                    9a:b4:38:f2:3a:b9:0b:d4:cb:23:27:61:66:25:d8:
                    a9:4c:03:a2:a9:2b:67:c5:a2:58:83:b9:f2:7e:d5:
                    31:4a:a3:d7:e8:86:2e:20:25:93:1e:04:c6:98:04:
                    28:59:07:05:1f:64:53:36:89:05:0d:87:3b:13:14:
                    a6:82:ef:58:1d:9a:3f:b8:db:c0:0d:f0:dc:9b:ac:
                    ae:66:8a:5c:9e:3a:1e:be:90:42:2a:21:fb:95:51:
                    ab:2f:72:5c:e2:e0:09:c8:8b:f9:b0:50:24:59:27:
                    a7:88:be:fe:b5:55:89:e9:91:cc:ea:c1:0f:8e:a6:
                    69:01:6e:6a:c3:ac:0b:60:95:4d:a4:ab:05:bb:0b:
                    47:a4:ac:4d:06:33:92:48:90:e1:86:e6:81:4a:6b:
                    06:a9:87:f5:8d:51:6d:37:c2:ca:7a:46:e4:9b:8f:
                    af:e7:52:84:99:00:a9:0b:dc:07:83:18:de:a8:08:
                    fe:e6:8e:07:ed:48:33:1a:f2:c7:19:c8:41:e7:22:
                    72:d4:77:c4:b6:54:6f:ab:3c:41:4f:5a:d5:a4:4d:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:10:96:0B:9C:68:37:FC:2D:62:32:14:7F:5F:C2:17:FD:0B:C1
            X509v3 Authority Key Identifier:
                keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/lzkQlgucaDf8LWIyFH9fwhf9C8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:64:ffff:0:196:ed5d:8c28/128
                  2001:67c:64:ffff:0:197:108e:927e/128
                  2001:67c:64:ffff:0:197:15eb:6226/128
                  2001:67c:64:ffff:0:197:353f:be91/128

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:af:51:9c:d1:3e:fc:03:45:99:9a:92:7d:6f:91:14:d3:
         31:49:6f:39:b8:74:06:ef:8d:f9:5d:79:d1:05:bb:78:6c:40:
         34:15:86:47:b9:f0:ac:60:91:58:c7:57:dd:60:72:54:c3:f2:
         79:69:c2:a5:10:93:4b:0e:ad:38:09:43:eb:78:df:97:b4:51:
         fc:f8:da:ac:ea:cf:ee:ec:f1:01:f5:a0:3c:d3:30:c9:ca:f2:
         61:17:7c:04:71:4c:15:95:b5:dd:35:e8:88:46:28:4c:fb:bc:
         2a:1e:72:7a:94:5d:4e:d0:62:a9:10:54:62:bd:bd:23:b7:bd:
         88:e6:00:97:99:ef:59:42:03:9b:a7:8a:da:c4:40:98:8d:74:
         4c:47:99:70:a4:25:43:cc:ca:11:8e:81:e2:24:c3:57:de:09:
         78:d4:c9:9d:6e:ce:4e:5b:da:53:eb:17:6a:c1:d5:03:1b:07:
         3e:e6:36:c6:fa:fe:74:b5:c7:c3:71:32:81:63:80:fc:33:32:
         af:2a:c1:64:39:36:3e:5b:b3:83:18:32:49:cb:d9:3a:2c:4c:
         88:15:6f:fe:71:68:b8:8b:ff:54:68:86:a7:a1:87:01:f7:1b:
         ca:4a:98:13:a6:81:f4:a3:10:85:6d:e4:13:27:f1:e3:46:67:
         ea:2b:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:27:06 2025 by rpki-client