Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3R2y0caAjy-MP2zKhpm3zk7oQCs.roa
File:                     3R2y0caAjy-MP2zKhpm3zk7oQCs.roa (raw, json)
Hash identifier:          BKpkxRGF5fcc8XyLTBgRlLY50vTbifCwlYhFgZexSs0=
Subject key identifier:   DD:1D:B2:D1:C6:80:8F:2F:8C:3F:6C:CA:86:99:B7:CE:4E:E8:40:2B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01876C26E98006727BAAE709C5D496B2E083
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3R2y0caAjy-MP2zKhpm3zk7oQCs.roa
Signing time:             Mon 10 Apr 2023 17:11:42 +0000
ROA not before:           Mon 10 Apr 2023 17:11:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6c:26:e9:80:06:72:7b:aa:e7:09:c5:d4:96:b2:e0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 10 17:11:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dd1db2d1c6808f2f8c3f6cca8699b7ce4ee8402b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:f0:69:bb:4b:8e:77:6f:4a:ab:14:a3:5f:
                    1c:d5:0f:88:18:45:32:69:bc:64:be:83:d6:5e:d8:
                    34:fe:a8:e5:2c:5f:67:a4:6e:5a:00:a7:ca:37:b6:
                    fc:81:ba:a1:92:d1:b4:72:5f:26:bd:5a:74:ad:7b:
                    49:19:ef:20:eb:17:69:5e:d9:f2:4e:2d:a8:b8:0e:
                    ed:ee:0e:4e:9d:76:bf:6e:a9:bd:ab:65:b5:3d:68:
                    03:c7:44:2f:98:fb:9f:a6:13:6e:c0:0d:10:56:40:
                    e9:b3:c8:03:9b:80:87:5e:2a:cc:05:ab:c2:73:d2:
                    1a:27:07:cd:ef:96:c2:8c:36:d4:ef:a7:06:09:7c:
                    a2:09:d6:a6:72:1f:34:c0:0d:fb:f7:e1:41:d4:00:
                    5a:b1:76:32:41:f8:9d:69:21:b8:0a:42:09:a3:cc:
                    6a:b4:48:a5:0e:d8:34:b9:7c:c6:be:f8:89:6c:56:
                    61:30:68:cc:cc:fc:ab:ba:f6:2e:b5:f1:99:76:b8:
                    75:b5:5f:ea:b0:78:68:9d:05:46:c1:e3:17:f4:ed:
                    17:59:d5:ac:34:4b:81:f8:99:a4:0b:5a:aa:fa:4b:
                    a2:a1:4a:c2:50:85:05:6f:8c:aa:86:d4:5a:ee:67:
                    15:8d:92:c0:95:cc:7a:5a:a6:6d:51:c0:94:32:3c:
                    fe:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1D:B2:D1:C6:80:8F:2F:8C:3F:6C:CA:86:99:B7:CE:4E:E8:40:2B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3R2y0caAjy-MP2zKhpm3zk7oQCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:14:83:7c:71:ab:fb:d1:f3:ea:17:53:a4:5a:99:1b:01:ba:
         bd:ce:b2:48:66:2b:2d:b5:c2:35:23:ce:e5:74:d8:f2:97:fa:
         38:57:cf:4b:c2:fd:b8:36:de:2f:38:09:00:05:60:fb:fe:4e:
         39:0a:b0:49:8d:b6:a5:e0:23:0e:5c:07:94:31:4e:db:57:ba:
         49:fa:e9:ce:59:ce:10:e7:7a:60:da:e1:37:b1:2e:87:55:63:
         79:45:bb:01:cf:3d:c7:57:ad:d5:0c:25:2c:e9:cf:d4:2c:3b:
         3b:51:cc:55:2c:58:2b:16:9a:01:f9:b1:c4:56:34:c2:0d:3e:
         33:27:4a:a4:93:93:ac:36:7c:e3:6d:f7:ba:c4:e5:88:38:3f:
         52:9d:f9:11:d7:d2:96:eb:78:49:a2:37:53:57:8d:90:9e:60:
         93:a7:ee:a8:1a:06:35:78:2b:e9:d7:c5:df:3c:64:fb:7d:fe:
         34:71:e4:d9:ce:b7:4a:ba:f7:e8:04:a9:4e:ba:f2:30:7a:e0:
         cb:18:13:8d:24:ee:54:a2:de:a8:95:2c:85:92:99:43:21:de:
         b1:8e:9d:a5:03:36:e7:fa:a2:49:71:7a:c1:01:cd:cc:13:51:
         04:75:f8:43:bd:bf:38:04:3d:9e:94:87:03:97:c3:4f:b0:e5:
         73:f2:13:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdsJumABnJ7qucJxdSWsuCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEwMTcxMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDFkYjJkMWM2ODA4ZjJmOGMzZjZjY2E4Njk5YjdjZTRlZTg0MDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NXwabtLjndvSqsUo18c1Q+IGEUy
abxkvoPWXtg0/qjlLF9npG5aAKfKN7b8gbqhktG0cl8mvVp0rXtJGe8g6xdpXtny
Ti2ouA7t7g5OnXa/bqm9q2W1PWgDx0QvmPufphNuwA0QVkDps8gDm4CHXirMBavC
c9IaJwfN75bCjDbU76cGCXyiCdamch80wA379+FB1ABasXYyQfidaSG4CkIJo8xq
tEilDtg0uXzGvviJbFZhMGjMzPyruvYutfGZdrh1tV/qsHhonQVGweMX9O0XWdWs
NEuB+JmkC1qq+kuioUrCUIUFb4yqhtRa7mcVjZLAlcx6WqZtUcCUMjz+WQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN0dstHGgI8vjD9syoaZt85O6EArMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvM1IyeTBjYUFqeS1NUDJ6S2hwbTN6azdvUUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJcUg3xxq/vR8+oXU6Ra
mRsBur3OskhmKy21wjUjzuV02PKX+jhXz0vC/bg23i84CQAFYPv+TjkKsEmNtqXg
Iw5cB5QxTttXukn66c5ZzhDnemDa4TexLodVY3lFuwHPPcdXrdUMJSzpz9QsOztR
zFUsWCsWmgH5scRWNMINPjMnSqSTk6w2fONt97rE5Yg4P1Kd+RHX0pbreEmiN1NX
jZCeYJOn7qgaBjV4K+nXxd88ZPt9/jRx5NnOt0q69+gEqU668jB64MsYE40k7lSi
3qiVLIWSmUMh3rGOnaUDNuf6oklxesEBzcwTUQR1+EO9vzgEPZ6UhwOXw0+w5XPy
E9c=
-----END CERTIFICATE-----
Generated at Tue Jun 10 07:29:41 2025 by rpki-client