Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAfFRxv-JIkps3VdQQeD1EkL4Rg.roa
File:                     EAfFRxv-JIkps3VdQQeD1EkL4Rg.roa (raw, json)
Hash identifier:          MrFbpI/1+czDYAsHYVBvCbB4nZJjXAWG4D4dP2n/Huo=
Subject key identifier:   10:07:C5:47:1B:FE:24:89:29:B3:75:5D:41:07:83:D4:49:0B:E1:18
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018A37863EEEECF5E4C10C3FACFC277411A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAfFRxv-JIkps3VdQQeD1EkL4Rg.roa
Signing time:             Sun 27 Aug 2023 15:04:19 +0000
ROA not before:           Sun 27 Aug 2023 15:04:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:3786:2480/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:37:86:3e:ee:ec:f5:e4:c1:0c:3f:ac:fc:27:74:11:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 27 15:04:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1007c5471bfe248929b3755d410783d4490be118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:bd:9a:64:e6:bc:9a:50:ea:f2:f7:fc:04:
                    ff:8a:e6:f0:97:3b:1a:d9:e9:41:0b:04:e2:2f:f8:
                    a0:d5:40:e1:e6:08:7d:12:91:4d:8e:1e:64:ec:f8:
                    f0:2a:23:dd:6e:e3:a2:52:1f:94:7d:6e:e6:3f:85:
                    2e:ff:47:bc:52:98:81:a3:bb:98:62:2f:7b:fb:e6:
                    80:ba:34:cb:ab:7c:0e:5c:e4:74:99:e8:8b:e8:86:
                    0f:a9:35:d2:19:eb:e1:cf:e4:03:76:83:dc:78:13:
                    57:8e:e8:25:3e:f0:1c:ff:16:d6:b2:26:6a:4d:69:
                    75:49:ed:c3:c5:c1:3b:6a:e5:1d:45:99:0d:9a:4c:
                    be:4e:76:f8:0d:e8:93:05:2d:e8:f5:f0:2e:46:bd:
                    95:cb:f5:32:2f:4d:3a:2c:ab:39:49:c3:03:a8:f1:
                    18:9e:c2:74:5c:28:a6:88:91:09:bc:76:d9:d3:78:
                    39:ec:d7:07:11:89:cd:3f:17:e1:60:12:44:db:54:
                    96:44:13:b3:7e:a1:86:98:48:ea:13:94:65:6d:d6:
                    f2:8b:c8:6a:10:6d:6a:ac:4a:0d:32:db:4e:02:2c:
                    ee:47:de:da:dd:5d:6e:85:d0:77:f5:f9:c9:75:21:
                    e4:75:dc:6d:bd:ea:10:89:9a:46:84:1c:de:61:ab:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:07:C5:47:1B:FE:24:89:29:B3:75:5D:41:07:83:D4:49:0B:E1:18
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAfFRxv-JIkps3VdQQeD1EkL4Rg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:ac:ca:6c:a1:e0:da:01:ec:7b:7d:fd:b0:c6:ab:37:cf:ee:
         c3:45:1c:2c:8f:99:14:1e:f6:8f:7b:62:7d:bf:af:9d:c4:46:
         1c:ab:b6:fd:9e:5b:c1:f3:8f:56:25:2c:a8:cc:21:12:d9:3f:
         ce:59:37:1c:29:15:fd:2c:e2:2c:b5:42:eb:8a:cd:8f:95:72:
         1c:2d:30:9a:47:30:9e:0c:d5:fd:c1:ea:2f:31:ff:86:c3:6c:
         28:dc:19:75:1f:49:69:4b:52:6d:d7:ec:d5:fc:d4:69:d2:ec:
         cd:39:f2:f4:e6:e4:69:dd:bf:69:1f:12:a9:a5:d2:d7:0b:f3:
         c7:ad:6f:bc:02:fd:2d:51:7d:c8:0b:c3:7d:5d:ab:fe:3f:c9:
         56:a8:58:22:1d:5c:e9:86:7c:33:e3:c4:0c:d9:ea:f5:95:1b:
         2e:0e:23:b7:0f:09:09:5d:b7:09:74:28:fc:45:72:c4:55:73:
         5c:8a:25:e7:03:21:a4:62:27:88:dc:5f:48:45:97:97:11:cc:
         1d:00:69:7f:3d:24:6e:82:77:ac:15:ef:9e:c0:0d:7f:a1:01:
         3e:79:f7:1c:ef:7b:5d:f3:13:cf:e9:aa:3a:cf:23:4f:40:2e:
         a5:3d:bd:a7:f6:09:a9:53:1d:35:a4:e9:70:04:4f:da:7f:3e:
         b3:69:53:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYo3hj7u7PXkwQw/rPwndBGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI3MTUwNDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDA3YzU0NzFiZmUyNDg5MjliMzc1NWQ0MTA3ODNkNDQ5MGJlMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms69mmTmvJpQ6vL3/AT/iubwlzsa
2elBCwTiL/ig1UDh5gh9EpFNjh5k7PjwKiPdbuOiUh+UfW7mP4Uu/0e8UpiBo7uY
Yi97++aAujTLq3wOXOR0meiL6IYPqTXSGevhz+QDdoPceBNXjuglPvAc/xbWsiZq
TWl1Se3DxcE7auUdRZkNmky+Tnb4DeiTBS3o9fAuRr2Vy/UyL006LKs5ScMDqPEY
nsJ0XCimiJEJvHbZ03g57NcHEYnNPxfhYBJE21SWRBOzfqGGmEjqE5Rlbdbyi8hq
EG1qrEoNMttOAizuR97a3V1uhdB39fnJdSHkddxtveoQiZpGhBzeYat6SQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBAHxUcb/iSJKbN1XUEHg9RJC+EYMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRUFmRlJ4di1KSWtwczNWZFFRZUQxRWtMNFJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK+symyh4NoB7Ht9/bDG
qzfP7sNFHCyPmRQe9o97Yn2/r53ERhyrtv2eW8Hzj1YlLKjMIRLZP85ZNxwpFf0s
4iy1QuuKzY+VchwtMJpHMJ4M1f3B6i8x/4bDbCjcGXUfSWlLUm3X7NX81GnS7M05
8vTm5Gndv2kfEqml0tcL88etb7wC/S1RfcgLw31dq/4/yVaoWCIdXOmGfDPjxAzZ
6vWVGy4OI7cPCQldtwl0KPxFcsRVc1yKJecDIaRiJ4jcX0hFl5cRzB0AaX89JG6C
d6wV757ADX+hAT559xzve13zE8/pqjrPI09ALqU9vaf2CalTHTWk6XAET9p/PrNp
Uzw=
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:22:41 2025 by rpki-client