Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItAA6Ru0MiXPPVgxe5qStRhYGmA.roa
File:                     ItAA6Ru0MiXPPVgxe5qStRhYGmA.roa (raw, json)
Hash identifier:          erwqCqQUxuvXoJN/kV3dEsGscgBOeG6BCX8kd7Y6Dh8=
Subject key identifier:   22:D0:00:E9:1B:B4:32:25:CF:3D:58:31:7B:9A:92:B5:18:58:1A:60
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01883E00E00C36733D88D41906F1B85EEE7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItAA6Ru0MiXPPVgxe5qStRhYGmA.roa
Signing time:             Sun 21 May 2023 11:10:24 +0000
ROA not before:           Sun 21 May 2023 11:10:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:3e:00:e0:0c:36:73:3d:88:d4:19:06:f1:b8:5e:ee:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 21 11:10:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=22d000e91bb43225cf3d58317b9a92b518581a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:de:23:0d:0e:11:0b:49:37:97:3d:55:02:
                    f5:a8:43:a9:0c:a8:64:3e:7e:61:90:9a:76:41:70:
                    85:43:b1:f8:53:bb:9e:d1:d5:8b:63:bf:c1:df:12:
                    c7:fc:86:38:c9:6e:0c:d9:0b:26:1d:25:f8:65:db:
                    3e:80:01:6c:4c:e5:dc:c5:3f:01:44:b1:58:8d:45:
                    ce:0d:a5:22:55:18:c5:c7:60:0e:5e:4f:2e:73:66:
                    c3:a9:d6:34:9d:52:41:a4:bd:bd:48:32:88:6c:8c:
                    ce:38:20:0f:39:9e:fa:32:9d:66:1c:d4:f7:ff:ab:
                    53:41:00:c7:96:00:83:51:00:a4:fe:a1:3e:7b:45:
                    d3:52:94:88:24:ee:ce:56:ff:d0:19:7d:af:42:1e:
                    d3:65:bb:02:95:fb:7b:2b:91:f7:85:0d:d0:2f:f7:
                    8e:29:78:71:ec:ba:73:9d:b7:9c:6e:d9:03:de:1d:
                    19:ca:a3:9d:d0:2d:f3:59:c6:72:57:87:4f:39:aa:
                    87:5f:0c:30:a9:36:e9:56:61:ee:a1:8d:0c:a3:00:
                    f8:43:9e:c4:6b:7c:e6:c7:43:f3:b0:ae:7d:95:41:
                    4e:eb:35:c3:8d:04:6b:60:cd:d1:69:95:ef:6b:88:
                    cb:b0:f7:07:66:d4:06:b6:18:85:c8:10:cc:b4:e8:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D0:00:E9:1B:B4:32:25:CF:3D:58:31:7B:9A:92:B5:18:58:1A:60
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ItAA6Ru0MiXPPVgxe5qStRhYGmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:bd:72:e3:eb:c8:83:4c:ba:b7:dd:e0:c9:1b:54:de:94:64:
         2b:0e:f6:f7:ae:8e:e3:64:92:1c:22:9c:f9:4b:dd:e0:bf:95:
         2c:50:6c:ac:72:dc:f6:6b:db:d4:74:cb:23:4b:58:c1:11:56:
         f9:d5:04:b2:e7:78:c1:51:6b:e1:8c:0a:6c:49:2d:30:e2:6b:
         95:cd:f7:45:7e:47:29:e4:bc:f4:72:43:44:ad:53:ac:12:b7:
         b0:f7:e4:c7:0f:55:ec:c9:26:50:ab:49:a8:1d:7b:0a:83:72:
         bf:40:6a:ed:8f:ad:05:c3:c3:1a:f9:7b:dd:e3:39:f6:c9:ba:
         f1:8e:1b:f7:70:2f:f0:98:41:c9:07:f0:48:b9:c5:65:ed:05:
         32:db:d0:d5:8c:db:f9:d5:f0:15:70:2a:5b:a0:44:0b:09:37:
         07:3e:0a:73:29:89:dc:e3:a3:12:be:60:11:50:1c:08:ba:32:
         79:a5:ce:1e:6b:c8:7f:59:de:8c:45:5d:15:7a:4c:fa:d9:81:
         3b:ae:6a:e9:7b:57:d9:49:a7:77:d5:7b:a3:1b:80:16:00:c8:
         7b:33:36:40:ca:b4:bd:16:61:a0:d1:a1:fa:03:93:d2:81:da:
         d0:a3:a9:e2:24:20:b0:a7:8b:b0:3d:63:da:5f:d1:76:b9:43:
         53:e0:ea:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYg+AOAMNnM9iNQZBvG4Xu58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIxMTExMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQwMDBlOTFiYjQzMjI1Y2YzZDU4MzE3YjlhOTJiNTE4NTgxYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIbeIw0OEQtJN5c9VQL1qEOpDKhk
Pn5hkJp2QXCFQ7H4U7ue0dWLY7/B3xLH/IY4yW4M2QsmHSX4Zds+gAFsTOXcxT8B
RLFYjUXODaUiVRjFx2AOXk8uc2bDqdY0nVJBpL29SDKIbIzOOCAPOZ76Mp1mHNT3
/6tTQQDHlgCDUQCk/qE+e0XTUpSIJO7OVv/QGX2vQh7TZbsClft7K5H3hQ3QL/eO
KXhx7LpznbecbtkD3h0ZyqOd0C3zWcZyV4dPOaqHXwwwqTbpVmHuoY0MowD4Q57E
a3zmx0PzsK59lUFO6zXDjQRrYM3RaZXva4jLsPcHZtQGthiFyBDMtOgMMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCLQAOkbtDIlzz1YMXuakrUYWBpgMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSXRBQTZSdTBNaVhQUFZneGU1cVN0UmhZR21BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADC9cuPryINMurfd4Mkb
VN6UZCsO9veujuNkkhwinPlL3eC/lSxQbKxy3PZr29R0yyNLWMERVvnVBLLneMFR
a+GMCmxJLTDia5XN90V+RynkvPRyQ0StU6wSt7D35McPVezJJlCrSagdewqDcr9A
au2PrQXDwxr5e93jOfbJuvGOG/dwL/CYQckH8Ei5xWXtBTLb0NWM2/nV8BVwKlug
RAsJNwc+CnMpidzjoxK+YBFQHAi6Mnmlzh5ryH9Z3oxFXRV6TPrZgTuuaul7V9lJ
p3fVe6MbgBYAyHszNkDKtL0WYaDRofoDk9KB2tCjqeIkILCni7A9Y9pf0Xa5Q1Pg
6qs=
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:41 2025 by rpki-client