Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95rkfs5Lvjjjsw3uo6M8HcDDX0E.roa
File:                     95rkfs5Lvjjjsw3uo6M8HcDDX0E.roa (raw, json)
Hash identifier:          U5e4ygdp5yUzW1gaFFBi1BjTjA0AgUMFPjCKPD9eYtE=
Subject key identifier:   F7:9A:E4:7E:CE:4B:BE:38:E3:B3:0D:EE:A3:A3:3C:1D:C0:C3:5F:41
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       72684EE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95rkfs5Lvjjjsw3uo6M8HcDDX0E.roa
Signing time:             Mon 14 Mar 2022 09:10:39 +0000
ROA not before:           Mon 14 Mar 2022 09:10:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1919438567 (0x72684ee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 14 09:10:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f79ae47ece4bbe38e3b30deea3a33c1dc0c35f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:4d:05:5d:53:f9:eb:39:f1:49:59:67:60:
                    51:d9:5b:ce:c0:bd:fd:35:11:d0:60:1b:87:c6:3d:
                    59:7f:44:9a:50:50:4b:c8:c3:10:7e:89:8c:3d:e7:
                    97:ac:c3:76:06:b9:af:41:02:5a:78:96:21:de:3e:
                    5c:18:0f:88:80:57:43:1c:37:60:ca:a8:04:01:44:
                    fb:01:a9:89:84:80:b9:e8:3e:b6:0d:da:8a:3e:86:
                    ef:7f:aa:20:fb:5b:62:af:41:aa:42:dd:a6:34:5f:
                    7e:77:d7:d3:10:43:2d:1b:cd:43:3c:df:57:03:3d:
                    f2:41:60:f4:33:8c:fb:9f:5d:2c:51:ce:a9:cb:68:
                    f3:11:99:18:60:3b:0e:88:b2:29:76:4c:ee:87:f4:
                    3f:38:8c:62:aa:be:9e:b0:bf:ff:35:26:43:26:16:
                    f7:6c:b0:a2:18:64:3d:b6:2d:77:0c:ac:99:52:35:
                    44:ae:c0:8a:09:a9:9f:79:10:a7:66:68:f9:89:a6:
                    d2:c6:60:d1:4a:3c:1d:c3:20:61:a4:4a:7b:77:f7:
                    16:06:91:5a:bd:82:52:7a:bb:d2:7c:ee:d2:95:13:
                    8c:2f:5f:97:7f:db:da:68:58:c3:a6:65:27:e9:b9:
                    25:bd:e6:53:0d:11:80:c1:8d:c0:a3:a4:4f:1a:13:
                    bc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9A:E4:7E:CE:4B:BE:38:E3:B3:0D:EE:A3:A3:3C:1D:C0:C3:5F:41
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/95rkfs5Lvjjjsw3uo6M8HcDDX0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:46:59:83:3e:ff:e0:27:37:0c:c1:2a:83:98:09:ed:12:
         93:62:24:c4:65:e2:9c:c9:48:59:f5:4e:6e:9f:2b:83:53:4e:
         91:97:1a:a0:ec:f5:29:a9:04:97:62:61:3f:2c:c4:1f:92:c8:
         94:df:24:49:0f:49:50:ec:ba:5a:65:c9:2e:87:a3:b6:31:ea:
         20:03:ed:eb:cd:e0:af:d5:2d:35:d8:9c:65:d6:02:5f:ea:41:
         59:2d:eb:df:65:b9:06:80:65:2a:0b:44:41:67:d9:20:ff:6b:
         c5:97:dd:cc:38:be:a7:56:c9:87:b2:13:d9:bc:42:61:8f:a8:
         c4:52:74:0f:83:54:54:34:da:08:7c:de:97:e2:13:fb:fe:3f:
         9e:a9:57:13:74:8a:3a:7e:84:67:84:a2:19:c6:13:0f:81:69:
         49:cf:00:c8:57:d9:0d:9d:ab:f9:bb:21:bb:ad:a1:d0:74:24:
         f0:77:4b:87:b1:6b:de:8c:bb:5e:cb:44:b5:82:68:e4:47:28:
         3a:05:19:c4:d5:fe:85:ca:09:d0:27:67:84:66:7c:f1:fe:7a:
         95:5f:48:ec:87:7b:a9:9a:61:4e:52:31:da:f9:ff:60:ad:ef:
         8f:e5:2c:b7:a8:b5:ee:fc:42:cc:4a:86:f3:81:4c:dd:a9:d3:
         5d:9a:f1:c1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcmhO5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
NDA5MTAzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjc5YWU0N2VjZTRi
YmUzOGUzYjMwZGVlYTNhMzNjMWRjMGMzNWY0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALK8TQVdU/nrOfFJWWdgUdlbzsC9/TUR0GAbh8Y9WX9EmlBQ
S8jDEH6JjD3nl6zDdga5r0ECWniWId4+XBgPiIBXQxw3YMqoBAFE+wGpiYSAueg+
tg3aij6G73+qIPtbYq9BqkLdpjRffnfX0xBDLRvNQzzfVwM98kFg9DOM+59dLFHO
qcto8xGZGGA7DoiyKXZM7of0PziMYqq+nrC//zUmQyYW92ywohhkPbYtdwysmVI1
RK7Aigmpn3kQp2Zo+Ymm0sZg0Uo8HcMgYaRKe3f3FgaRWr2CUnq70nzu0pUTjC9f
l3/b2mhYw6ZlJ+m5Jb3mUw0RgMGNwKOkTxoTvMsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT3muR+zku+OOOzDe6jozwdwMNfQTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
Lzk1cmtmczVMdmpqanN3M3VvNk04SGNERFgwRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA0KkZZgz7/4Cc3DMEqg5gJ7RKTYiTEZeKcyUhZ
9U5unyuDU06Rlxqg7PUpqQSXYmE/LMQfksiU3yRJD0lQ7LpaZckuh6O2MeogA+3r
zeCv1S012Jxl1gJf6kFZLevfZbkGgGUqC0RBZ9kg/2vFl93MOL6nVsmHshPZvEJh
j6jEUnQPg1RUNNoIfN6X4hP7/j+eqVcTdIo6foRnhKIZxhMPgWlJzwDIV9kNnav5
uyG7raHQdCTwd0uHsWvejLtey0S1gmjkRyg6BRnE1f6FygnQJ2eEZnzx/nqVX0js
h3upmmFOUjHa+f9gre+P5Sy3qLXu/ELMSobzgUzdqdNdmvHB
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:04:30 2025 by rpki-client