Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5RFCEAxylXYKAVvj2NEodAM3zXU.roa
File:                     5RFCEAxylXYKAVvj2NEodAM3zXU.roa (raw, json)
Hash identifier:          MQeArErHY5crOS1blRpwxtfzyDMh5E8r9rU1KjDwIjk=
Subject key identifier:   E5:11:42:10:0C:72:95:76:0A:01:5B:E3:D8:D1:28:74:03:37:CD:75
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018982AA4F999339336505D0C592674DB0A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5RFCEAxylXYKAVvj2NEodAM3zXU.roa
Signing time:             Sun 23 Jul 2023 12:12:26 +0000
ROA not before:           Sun 23 Jul 2023 12:12:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:82:aa:4f:99:93:39:33:65:05:d0:c5:92:67:4d:b0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 23 12:12:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e51142100c7295760a015be3d8d128740337cd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:3c:2b:50:cd:9e:0e:27:f2:0c:a1:f1:a2:
                    5f:d1:99:c5:6c:43:47:2a:f5:b2:43:53:ab:f1:b7:
                    29:fd:e5:50:6b:6a:37:fe:67:3a:96:eb:d2:46:08:
                    7d:e1:f2:c7:ee:7f:7d:ff:c8:f8:ae:68:19:09:60:
                    4d:cb:48:c6:bc:09:df:df:3f:d4:b8:02:14:ef:16:
                    7d:36:5e:a8:f9:45:94:18:67:4c:d4:0b:c8:8b:ae:
                    b6:6c:40:ac:10:68:84:8b:4a:b5:39:d0:ef:23:ae:
                    ae:ff:04:e9:19:5f:fb:7d:92:7c:51:59:93:bf:53:
                    b9:83:ed:17:19:b0:ac:2e:f1:c5:f4:60:6c:12:6f:
                    96:7a:d8:52:37:f8:28:78:f2:dc:df:bd:80:3f:82:
                    14:18:86:08:51:05:bf:17:9d:a5:1e:d1:55:c1:2d:
                    53:6c:37:17:c5:a2:5a:bb:a7:e6:07:a3:3a:75:29:
                    3f:1e:c5:fc:aa:f5:39:3f:07:a1:73:3c:ab:23:21:
                    ad:2d:dc:b5:49:d6:33:ca:ed:72:23:67:2e:80:ce:
                    83:0e:2c:30:87:2e:4d:4a:db:b4:bb:fb:dc:dd:2e:
                    18:61:11:44:74:4c:2d:8b:4a:1d:01:a2:49:ee:52:
                    f4:08:24:9d:ad:8a:cb:54:24:8e:b2:53:0b:01:52:
                    5e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:11:42:10:0C:72:95:76:0A:01:5B:E3:D8:D1:28:74:03:37:CD:75
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5RFCEAxylXYKAVvj2NEodAM3zXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:47:41:c3:95:f4:d2:c6:b6:58:2f:ff:b2:98:01:50:57:ec:
         db:29:df:96:e2:b6:bb:5c:c7:45:83:83:f0:c9:1d:dc:52:b4:
         82:48:48:75:64:ce:92:b6:4b:b4:d0:5d:32:fc:4f:05:2a:4a:
         23:4b:4b:ec:76:ed:64:7a:7d:e8:9e:ff:9e:28:0c:48:15:4e:
         ec:e5:b0:5a:27:8d:a4:93:df:c0:8d:8b:f3:1e:15:f6:3d:b8:
         f7:96:18:af:27:a2:56:af:bb:33:b6:59:77:3c:69:69:38:4c:
         b1:8e:56:8b:54:d0:55:e3:13:74:86:3a:88:56:0b:8d:22:20:
         ad:43:eb:66:b9:98:e7:ba:96:e2:30:bb:20:bb:8a:0b:46:04:
         6b:b9:9a:de:87:06:b0:73:7d:53:27:4b:b8:65:92:8d:10:0f:
         fb:44:6d:73:60:6f:7e:37:fe:2c:74:38:9a:72:fb:e0:11:e0:
         57:0b:57:cf:07:83:e9:3b:0c:2b:fc:e9:16:b5:2c:3d:e9:d8:
         2d:fa:00:8b:87:4a:43:5c:e6:6e:7f:8c:14:b1:42:fc:a7:f8:
         22:f6:95:42:45:cc:b1:da:21:f6:ee:df:fa:a0:ae:a2:e9:e5:
         e9:51:1a:e3:c8:dd:80:13:e8:5b:c2:29:31:68:67:97:08:38:
         46:a2:80:62
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmCqk+ZkzkzZQXQxZJnTbCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIzMTIxMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTExNDIxMDBjNzI5NTc2MGEwMTViZTNkOGQxMjg3NDAzMzdjZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+o8K1DNng4n8gyh8aJf0ZnFbENH
KvWyQ1Or8bcp/eVQa2o3/mc6luvSRgh94fLH7n99/8j4rmgZCWBNy0jGvAnf3z/U
uAIU7xZ9Nl6o+UWUGGdM1AvIi662bECsEGiEi0q1OdDvI66u/wTpGV/7fZJ8UVmT
v1O5g+0XGbCsLvHF9GBsEm+WethSN/goePLc372AP4IUGIYIUQW/F52lHtFVwS1T
bDcXxaJau6fmB6M6dSk/HsX8qvU5PwehczyrIyGtLdy1SdYzyu1yI2cugM6DDiww
hy5NStu0u/vc3S4YYRFEdEwti0odAaJJ7lL0CCSdrYrLVCSOslMLAVJeUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOURQhAMcpV2CgFb49jRKHQDN811MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNVJGQ0VBeHlsWFlLQVZ2ajJORW9kQU0zelhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAVHQcOV9NLGtlgv/7KY
AVBX7Nsp35bitrtcx0WDg/DJHdxStIJISHVkzpK2S7TQXTL8TwUqSiNLS+x27WR6
feie/54oDEgVTuzlsFonjaST38CNi/MeFfY9uPeWGK8nolavuzO2WXc8aWk4TLGO
VotU0FXjE3SGOohWC40iIK1D62a5mOe6luIwuyC7igtGBGu5mt6HBrBzfVMnS7hl
ko0QD/tEbXNgb343/ix0OJpy++AR4FcLV88Hg+k7DCv86Ra1LD3p2C36AIuHSkNc
5m5/jBSxQvyn+CL2lUJFzLHaIfbu3/qgrqLp5elRGuPI3YAT6FvCKTFoZ5cIOEai
gGI=
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:13:56 2025 by rpki-client