Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E4VmWlrNxyp6EF9ExITb9FX5EA.roa
File:                     1-E4VmWlrNxyp6EF9ExITb9FX5EA.roa (raw, json)
Hash identifier:          JYpGH7rZzv0QDUmiUXlkaj77DBJkBWDBY+MrGNVhyZQ=
Subject key identifier:   F8:4E:15:99:69:6B:37:1C:A9:E8:41:7D:13:12:13:6F:D1:57:E4:40
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186B028AB7A635B84C8D005DC0DFF7E957F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E4VmWlrNxyp6EF9ExITb9FX5EA.roa
Signing time:             Sun 05 Mar 2023 05:05:00 +0000
ROA not before:           Sun 05 Mar 2023 05:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:b028:16d5/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b0:28:ab:7a:63:5b:84:c8:d0:05:dc:0d:ff:7e:95:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  5 05:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f84e1599696b371ca9e8417d1312136fd157e440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:d6:c7:02:b0:a9:ce:d7:77:8a:f4:e1:97:
                    5e:45:ed:97:80:9a:7f:ed:67:ac:4c:ce:5a:16:cb:
                    49:e6:01:55:bd:d5:cb:3f:77:c3:32:79:70:d6:ed:
                    7d:6e:60:ef:d5:54:7c:91:db:db:d5:11:b3:de:4e:
                    f0:b7:cc:af:58:da:86:0a:90:3e:f8:46:7a:57:c0:
                    5b:f4:b0:d0:ff:9b:97:ee:fc:e1:70:d5:4e:eb:70:
                    03:7c:b7:88:bd:55:81:9b:5e:fb:c1:84:c2:3a:65:
                    01:20:ea:5f:7f:32:26:4b:86:0b:92:53:f6:ee:ce:
                    4f:93:3b:ea:11:64:1f:63:94:75:b7:f5:b9:a0:6e:
                    3f:cb:06:04:8a:13:39:61:50:b5:9c:55:59:42:51:
                    19:14:0b:d5:c9:2a:83:15:ea:a9:f6:0e:98:02:31:
                    2c:19:9f:42:f0:c3:86:9b:d6:8d:6b:b2:8b:98:03:
                    3b:40:b7:84:ac:fb:c9:2e:a4:71:9d:82:6f:b9:3c:
                    3c:44:9b:9d:cc:86:cb:f2:38:73:27:33:72:38:6a:
                    e3:1a:e5:5f:9d:36:d2:fc:da:66:b0:82:dd:0f:55:
                    aa:03:f2:05:cc:71:61:95:a7:bf:5b:7d:1a:ba:ad:
                    66:59:23:e4:86:ca:55:fc:f8:74:5e:39:0a:41:a8:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4E:15:99:69:6B:37:1C:A9:E8:41:7D:13:12:13:6F:D1:57:E4:40
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-E4VmWlrNxyp6EF9ExITb9FX5EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:ae:a6:45:85:7d:01:38:32:53:51:d7:7b:18:c6:a2:c4:c6:
         a6:87:f4:20:c7:72:cc:ed:5f:03:2d:69:b7:cc:c7:36:60:5d:
         c6:a0:57:9f:be:25:2c:a1:60:2e:92:bb:24:d7:d5:30:b6:fb:
         45:3d:24:8c:6c:eb:bc:0d:78:27:71:f0:f0:98:6f:22:12:54:
         4b:81:13:31:e4:c5:c6:f8:fb:18:eb:13:d5:8e:40:06:86:b1:
         35:47:ee:5c:23:ff:55:2b:97:83:66:19:71:eb:b6:2d:a4:cd:
         71:a5:a5:e1:a7:bf:d9:2d:c2:fc:17:ae:bf:d3:6c:fc:6b:53:
         e8:29:93:a5:91:76:af:ed:82:78:ca:02:a1:69:8a:a4:44:7f:
         17:88:a0:91:ba:c8:c2:b7:39:17:a6:a2:83:db:09:33:a9:c0:
         9c:02:ab:eb:ae:67:a7:04:4c:ee:9b:d2:5d:bb:fd:6a:ee:1a:
         68:68:fc:c9:75:49:f7:2e:13:43:f1:53:26:b1:5d:b6:ce:28:
         7c:70:e9:ba:55:ba:64:09:af:05:41:aa:7e:da:9e:0b:04:dc:
         9d:14:d8:fb:f2:9f:23:48:e5:85:93:a3:66:6f:7b:b2:6e:3c:
         28:92:43:7d:49:04:72:04:05:c4:7e:25:ec:ab:3a:df:d1:8d:
         0e:d8:61:89
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYawKKt6Y1uEyNAF3A3/fpV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA1MDUwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODRlMTU5OTY5NmIzNzFjYTllODQxN2QxMzEyMTM2ZmQxNTdlNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRDWxwKwqc7Xd4r04ZdeRe2XgJp/
7WesTM5aFstJ5gFVvdXLP3fDMnlw1u19bmDv1VR8kdvb1RGz3k7wt8yvWNqGCpA+
+EZ6V8Bb9LDQ/5uX7vzhcNVO63ADfLeIvVWBm177wYTCOmUBIOpffzImS4YLklP2
7s5PkzvqEWQfY5R1t/W5oG4/ywYEihM5YVC1nFVZQlEZFAvVySqDFeqp9g6YAjEs
GZ9C8MOGm9aNa7KLmAM7QLeErPvJLqRxnYJvuTw8RJudzIbL8jhzJzNyOGrjGuVf
nTbS/NpmsILdD1WqA/IFzHFhlae/W30auq1mWSPkhspV/Ph0XjkKQaitxwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPhOFZlpazccqehBfRMSE2/RV+RAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1FNFZtV2xyTnh5cDZFRjlFeElUYjlGWDVFQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQByrqZFhX0BODJTUdd7
GMaixMamh/Qgx3LM7V8DLWm3zMc2YF3GoFefviUsoWAukrsk19UwtvtFPSSMbOu8
DXgncfDwmG8iElRLgRMx5MXG+PsY6xPVjkAGhrE1R+5cI/9VK5eDZhlx67YtpM1x
paXhp7/ZLcL8F66/02z8a1PoKZOlkXav7YJ4ygKhaYqkRH8XiKCRusjCtzkXpqKD
2wkzqcCcAqvrrmenBEzum9Jdu/1q7hpoaPzJdUn3LhND8VMmsV22zih8cOm6Vbpk
Ca8FQap+2p4LBNydFNj78p8jSOWFk6Nmb3uybjwokkN9SQRyBAXEfiXsqzrf0Y0O
2GGJ
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:47:50 2025 by rpki-client