Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bct-pIeeYlUEZua2hKVVnkQUsVU.roa
File:                     Bct-pIeeYlUEZua2hKVVnkQUsVU.roa (raw, json)
Hash identifier:          oHkzSMTFOv6ObPk2l1/4hgktwYJW2C1Y7CO4Viee8AQ=
Subject key identifier:   05:CB:7E:A4:87:9E:62:55:04:66:E6:B6:84:A5:55:9E:44:14:B1:55
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0183DD4B81B0C306FBD32C7AF57A278B2F48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bct-pIeeYlUEZua2hKVVnkQUsVU.roa
Signing time:             Sat 15 Oct 2022 20:17:36 +0000
ROA not before:           Sat 15 Oct 2022 20:17:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:dd:4b:81:b0:c3:06:fb:d3:2c:7a:f5:7a:27:8b:2f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Oct 15 20:17:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05cb7ea4879e62550466e6b684a5559e4414b155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:f3:53:2c:23:1c:67:68:7e:aa:20:5e:25:
                    bf:b9:7f:9c:8c:20:48:b1:99:56:85:8e:90:f1:ba:
                    bf:93:fe:2f:f2:7c:5b:34:f6:b6:14:b0:eb:57:5f:
                    35:74:1b:9f:eb:5c:ec:c1:6b:56:5f:91:da:de:7c:
                    c3:73:f4:0c:d8:dd:8d:3d:5a:32:0f:57:4c:d2:8c:
                    c7:ab:0d:fa:ba:69:ab:ba:9a:1c:3b:3e:10:0a:ce:
                    08:9f:01:24:53:c4:5b:56:e1:2a:8a:c0:a9:4f:10:
                    fb:8e:d4:87:ae:a2:68:ab:dc:bd:ea:13:6f:8c:6e:
                    9e:9d:76:35:60:dd:ff:80:45:7e:b3:54:0d:12:d8:
                    f8:ae:ab:6a:d3:f5:aa:31:da:85:91:83:a9:d8:1e:
                    a8:c4:8c:16:a8:8d:8c:52:14:83:da:b2:13:fd:5e:
                    43:53:31:48:88:2d:ad:dc:b6:47:3a:14:ba:26:97:
                    86:23:5a:58:bd:40:80:87:9b:f2:2f:58:eb:b5:d1:
                    df:ed:e0:15:b3:c6:b5:63:91:b9:6e:0b:7b:68:4b:
                    4d:42:8f:ee:79:f7:0b:56:bd:20:f7:06:3d:2d:c8:
                    00:d3:f0:32:5e:67:c5:a6:9f:70:af:bc:9d:89:b8:
                    7c:1f:54:eb:91:9a:66:02:79:22:58:f7:83:02:38:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CB:7E:A4:87:9E:62:55:04:66:E6:B6:84:A5:55:9E:44:14:B1:55
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Bct-pIeeYlUEZua2hKVVnkQUsVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:fa:21:35:c6:a8:fc:55:7e:8b:6b:63:a3:5e:fe:4e:95:07:
         f3:b5:fa:09:af:bf:b5:2c:36:10:1b:64:60:2b:d0:70:e6:3a:
         6d:60:32:d0:f7:60:41:21:cd:5e:3d:81:d2:f0:f3:be:d9:fe:
         ad:9f:2a:8a:65:75:1e:c7:87:24:e1:c6:d0:db:c1:63:cf:a7:
         2e:c5:a3:e2:3f:b8:b5:40:f0:1e:f2:9a:93:2d:e9:90:e2:a0:
         40:cf:0b:78:d3:88:3d:f6:57:3e:e5:11:61:fb:f3:b7:ed:d0:
         f5:96:ff:c0:68:24:6e:5c:4f:9d:ec:47:7d:c9:f2:21:ff:2e:
         c3:a1:1d:b9:2f:da:2f:8c:e4:f9:90:59:69:ac:18:65:cf:e1:
         f7:cc:98:98:9b:7f:8c:32:61:fb:4a:82:68:72:36:a8:ff:7b:
         20:07:bd:0d:e6:59:66:56:16:dd:c3:e5:73:78:07:21:ce:15:
         20:42:db:fb:1f:2a:1a:90:96:b8:b9:14:b7:ae:bf:a1:3c:03:
         32:a5:20:82:e5:e2:f2:b0:f8:88:74:af:fe:22:24:37:3a:61:
         88:f2:c7:e7:5b:0d:99:d2:0e:2d:b6:e8:8e:a1:c6:da:f6:d2:
         7f:29:51:61:83:0f:be:b7:54:2f:a6:74:4b:ff:49:29:f3:a6:
         96:ef:80:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPdS4Gwwwb70yx69Xoniy9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDE1MjAxNzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWNiN2VhNDg3OWU2MjU1MDQ2NmU2YjY4NGE1NTU5ZTQ0MTRiMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog3zUywjHGdofqogXiW/uX+cjCBI
sZlWhY6Q8bq/k/4v8nxbNPa2FLDrV181dBuf61zswWtWX5Ha3nzDc/QM2N2NPVoy
D1dM0ozHqw36ummrupocOz4QCs4InwEkU8RbVuEqisCpTxD7jtSHrqJoq9y96hNv
jG6enXY1YN3/gEV+s1QNEtj4rqtq0/WqMdqFkYOp2B6oxIwWqI2MUhSD2rIT/V5D
UzFIiC2t3LZHOhS6JpeGI1pYvUCAh5vyL1jrtdHf7eAVs8a1Y5G5bgt7aEtNQo/u
efcLVr0g9wY9LcgA0/AyXmfFpp9wr7ydibh8H1TrkZpmAnkiWPeDAjhG/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAXLfqSHnmJVBGbmtoSlVZ5EFLFVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQmN0LXBJZWVZbFVFWnVhMmhLVlZua1FVc1ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI36ITXGqPxVfotrY6Ne
/k6VB/O1+gmvv7UsNhAbZGAr0HDmOm1gMtD3YEEhzV49gdLw877Z/q2fKopldR7H
hyThxtDbwWPPpy7Fo+I/uLVA8B7ympMt6ZDioEDPC3jTiD32Vz7lEWH787ft0PWW
/8BoJG5cT53sR33J8iH/LsOhHbkv2i+M5PmQWWmsGGXP4ffMmJibf4wyYftKgmhy
Nqj/eyAHvQ3mWWZWFt3D5XN4ByHOFSBC2/sfKhqQlri5FLeuv6E8AzKlIILl4vKw
+Ih0r/4iJDc6YYjyx+dbDZnSDi226I6hxtr20n8pUWGDD763VC+mdEv/SSnzppbv
gJs=
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:36:08 2025 by rpki-client