Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEUTWnhKq79J7pBnjAnYZ9v8Rtw.roa
File:                     NEUTWnhKq79J7pBnjAnYZ9v8Rtw.roa (raw, json)
Hash identifier:          1rKzadjeAUqu1lKuKOaVaPBhIEvpWJteI8n/aOI7784=
Subject key identifier:   34:45:13:5A:78:4A:AB:BF:49:EE:90:67:8C:09:D8:67:DB:FC:46:DC
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018564D9EC54E2609F971FAB059D11097AAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEUTWnhKq79J7pBnjAnYZ9v8Rtw.roa
Signing time:             Fri 30 Dec 2022 21:04:41 +0000
ROA not before:           Fri 30 Dec 2022 21:04:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:185:64d9:8437/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:64:d9:ec:54:e2:60:9f:97:1f:ab:05:9d:11:09:7a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 30 21:04:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3445135a784aabbf49ee90678c09d867dbfc46dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:44:1b:02:3d:4f:e8:73:6b:dc:99:69:36:
                    55:1e:a9:bc:85:dc:92:ab:60:d2:f1:a5:9f:75:36:
                    a9:9e:db:ea:09:47:00:f0:9d:be:06:3e:3b:8d:8f:
                    e4:57:59:0d:86:fb:70:0a:8c:a0:b7:00:e4:15:95:
                    0a:9e:fe:62:be:d1:38:f1:97:5e:e2:9e:e8:f5:f8:
                    51:5a:bc:ee:67:2c:aa:30:f1:87:0c:e5:55:96:15:
                    6d:1b:c0:14:41:85:6d:c9:ee:05:cd:6a:31:68:b9:
                    fe:d3:af:24:3f:9b:b8:fa:95:5b:0b:f0:82:9b:62:
                    5f:8c:19:88:62:ec:36:da:16:8a:88:cc:af:5f:6b:
                    af:c9:c7:f8:2f:53:80:5f:21:f2:fd:9f:7a:92:01:
                    98:6e:f4:56:f9:31:58:4d:db:91:bb:f2:72:75:32:
                    d5:02:06:e6:87:f8:55:89:3a:b9:e1:88:fc:78:81:
                    05:75:42:a4:d8:2e:7c:59:95:21:95:c7:22:71:1a:
                    f0:31:10:b3:dd:0d:ee:f5:6a:ca:90:7c:95:30:b9:
                    75:c9:c9:aa:ee:7a:c4:f9:d9:c6:e8:f1:94:77:be:
                    63:58:0d:49:74:34:c9:ce:2b:7e:b0:69:49:b6:cf:
                    4b:7b:d8:a0:e6:8b:45:34:27:40:eb:ee:85:ec:36:
                    36:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:13:5A:78:4A:AB:BF:49:EE:90:67:8C:09:D8:67:DB:FC:46:DC
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEUTWnhKq79J7pBnjAnYZ9v8Rtw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:ca:69:1a:e0:d2:9b:9e:51:a8:16:d5:67:30:40:21:b6:90:
         f5:b4:f5:93:8d:37:0c:e6:86:0b:79:bc:98:de:b6:aa:71:5e:
         2f:82:dc:e9:49:a0:63:3c:84:90:69:5e:35:00:bd:5a:ce:37:
         b0:5b:1c:ea:84:a6:e8:e2:a3:b3:ef:24:65:27:10:ef:c5:84:
         f8:d7:40:fe:17:8b:3e:36:8c:19:96:fc:d0:c6:73:93:f2:63:
         01:46:62:88:98:00:ec:1d:b0:df:81:ca:bb:d2:11:fc:21:be:
         73:ed:c6:6a:bf:19:4b:61:5c:73:dc:82:b3:a9:2b:99:45:fa:
         50:d9:0f:37:8e:1d:95:67:90:cb:53:7d:85:71:27:ce:64:b5:
         6b:5f:6b:3b:23:b2:f1:0d:83:e2:82:43:b9:5d:97:4c:e9:5f:
         0b:14:32:3b:94:1f:6d:d9:20:19:95:74:60:ba:12:c7:b6:cc:
         5c:25:99:21:41:9f:5e:73:ea:bb:bc:ff:6a:30:c6:4c:fa:69:
         9d:0f:1c:32:54:6b:92:a4:51:5d:d8:26:ae:f8:96:bf:05:8c:
         ed:96:88:f0:b2:0c:b7:1d:2c:67:c9:6c:1f:4d:4b:6e:55:1e:
         16:c4:36:40:e0:4f:a8:02:04:59:16:f3:d7:11:c1:00:63:6c:
         ca:c3:67:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVk2exU4mCflx+rBZ0RCXqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMwMjEwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDQ1MTM1YTc4NGFhYmJmNDllZTkwNjc4YzA5ZDg2N2RiZmM0NmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZhEGwI9T+hza9yZaTZVHqm8hdyS
q2DS8aWfdTapntvqCUcA8J2+Bj47jY/kV1kNhvtwCoygtwDkFZUKnv5ivtE48Zde
4p7o9fhRWrzuZyyqMPGHDOVVlhVtG8AUQYVtye4FzWoxaLn+068kP5u4+pVbC/CC
m2JfjBmIYuw22haKiMyvX2uvycf4L1OAXyHy/Z96kgGYbvRW+TFYTduRu/JydTLV
Agbmh/hViTq54Yj8eIEFdUKk2C58WZUhlccicRrwMRCz3Q3u9WrKkHyVMLl1ycmq
7nrE+dnG6PGUd75jWA1JdDTJzit+sGlJts9Le9ig5otFNCdA6+6F7DY2VQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDRFE1p4Squ/Se6QZ4wJ2Gfb/EbcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTkVVVFduaEtxNzlKN3BCbmpBbllaOXY4UnR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB7KaRrg0pueUagW1Wcw
QCG2kPW09ZONNwzmhgt5vJjetqpxXi+C3OlJoGM8hJBpXjUAvVrON7BbHOqEpuji
o7PvJGUnEO/FhPjXQP4Xiz42jBmW/NDGc5PyYwFGYoiYAOwdsN+ByrvSEfwhvnPt
xmq/GUthXHPcgrOpK5lF+lDZDzeOHZVnkMtTfYVxJ85ktWtfazsjsvENg+KCQ7ld
l0zpXwsUMjuUH23ZIBmVdGC6Ese2zFwlmSFBn15z6ru8/2owxkz6aZ0PHDJUa5Kk
UV3YJq74lr8FjO2WiPCyDLcdLGfJbB9NS25VHhbENkDgT6gCBFkW89cRwQBjbMrD
ZxA=
-----END CERTIFICATE-----
Generated at Thu Jun 12 22:36:37 2025 by rpki-client