Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RvIo51mRvPQvAu0_aS1Q8wit2NM.roa
File:                     RvIo51mRvPQvAu0_aS1Q8wit2NM.roa (raw, json)
Hash identifier:          WKCUy5W6yPv4eZzLPsVKUJXz5f7tyO8cW2m4YJIq2xI=
Subject key identifier:   46:F2:28:E7:59:91:BC:F4:2F:02:ED:3F:69:2D:50:F3:08:AD:D8:D3
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       8FD582B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RvIo51mRvPQvAu0_aS1Q8wit2NM.roa
Signing time:             Sat 25 Jun 2022 23:11:13 +0000
ROA not before:           Sat 25 Jun 2022 23:11:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413134520 (0x8fd582b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 25 23:11:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46f228e75991bcf42f02ed3f692d50f308add8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:40:cc:75:14:ee:d5:8a:26:e7:f4:0b:be:
                    6d:ee:06:75:07:55:d6:35:61:b0:1e:ed:96:c0:21:
                    26:76:a6:5b:09:2a:00:01:15:9b:c6:14:ca:a8:b3:
                    48:37:7c:43:98:56:0a:df:c5:6e:b9:24:14:12:f7:
                    0f:bf:be:78:29:c7:fb:bc:73:36:43:33:31:a5:f0:
                    31:a3:48:ee:43:d4:61:3f:3f:58:fc:18:02:64:d7:
                    b6:e4:85:f3:07:c4:36:f3:3c:dd:1b:e9:51:1c:36:
                    7e:27:97:c2:5e:7d:7a:fb:94:35:49:83:28:ec:3f:
                    3c:15:1b:a1:da:68:90:88:7f:83:84:c3:7c:e1:68:
                    e2:e9:87:b2:a1:f3:b0:da:ed:8a:e3:92:f4:b4:fe:
                    21:55:a6:c3:d7:37:0c:46:5f:79:33:87:c9:37:d5:
                    df:c2:e7:9d:8d:00:0a:db:7d:76:d0:9e:81:3d:c2:
                    f1:e3:a5:da:f4:7e:8a:2f:56:91:a8:8f:f9:30:be:
                    7d:fc:9b:63:03:13:ec:c8:6d:0e:5f:9d:d8:5b:7f:
                    56:5d:b6:31:24:89:b8:f6:4c:02:a6:35:66:42:6a:
                    b6:71:4d:d9:2d:9f:b7:a6:4e:d1:ea:62:3a:fd:81:
                    da:2f:52:4a:84:c5:36:d4:da:65:8e:95:52:33:6b:
                    9e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F2:28:E7:59:91:BC:F4:2F:02:ED:3F:69:2D:50:F3:08:AD:D8:D3
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RvIo51mRvPQvAu0_aS1Q8wit2NM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:6b:0c:4b:0d:af:f6:09:40:02:0d:d2:33:2d:62:46:f5:fa:
         bd:b7:68:f2:2f:c8:7d:62:51:3f:f6:41:fb:83:23:19:87:a3:
         a6:47:db:55:0d:b9:7f:93:b7:1f:c6:bf:6e:f1:5e:fe:6c:4a:
         2b:ac:26:c9:cf:89:53:91:29:50:ca:a7:88:48:d2:a9:de:7c:
         aa:f8:43:15:36:bc:c6:52:1f:62:c3:24:33:22:2f:5c:71:2f:
         9b:1b:37:80:14:6f:d0:15:c2:e0:2c:e4:11:fa:33:90:a7:0b:
         0c:8c:c9:9c:01:b1:00:63:46:0c:4a:dd:ec:56:48:83:a3:a6:
         09:60:b0:e3:04:e4:ab:54:90:34:8e:9c:27:f5:36:2f:cb:7e:
         4d:38:b4:42:58:08:01:f5:da:bb:ef:ba:aa:12:66:4d:34:46:
         18:39:20:44:32:03:35:3c:89:ec:85:07:77:a8:53:cd:4c:7e:
         88:81:9e:2e:4c:7d:14:9f:cf:36:b2:6c:72:48:97:2a:de:da:
         97:92:3b:cb:24:4b:90:c2:30:b3:7f:a9:83:de:cf:e3:76:db:
         dd:aa:f0:c2:b3:75:0d:26:c1:2b:d1:44:ae:22:97:c6:e6:61:
         3f:65:69:4e:90:ac:4d:5b:fa:ad:63:80:d3:94:02:cc:e7:f2:
         86:84:0e:07
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI/VgrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjUyMzExMTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDQ2ZjIyOGU3NTk5
MWJjZjQyZjAyZWQzZjY5MmQ1MGYzMDhhZGQ4ZDMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCt00DMdRTu1Yom5/QLvm3uBnUHVdY1YbAe7ZbAISZ2plsJ
KgABFZvGFMqos0g3fEOYVgrfxW65JBQS9w+/vngpx/u8czZDMzGl8DGjSO5D1GE/
P1j8GAJk17bkhfMHxDbzPN0b6VEcNn4nl8JefXr7lDVJgyjsPzwVG6HaaJCIf4OE
w3zhaOLph7Kh87Da7YrjkvS0/iFVpsPXNwxGX3kzh8k31d/C552NAArbfXbQnoE9
wvHjpdr0foovVpGoj/kwvn38m2MDE+zIbQ5fndhbf1ZdtjEkibj2TAKmNWZCarZx
Tdktn7emTtHqYjr9gdovUkqExTbU2mWOlVIza54BAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQURvIo51mRvPQvAu0/aS1Q8wit2NMwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9SdklvNTFtUnZQUXZBdTBfYVMxUTh3aXQyTk0ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAn2sMSw2v9glAAg3SMy1iRvX6vbdo8i/IfWJR
P/ZB+4MjGYejpkfbVQ25f5O3H8a/bvFe/mxKK6wmyc+JU5EpUMqniEjSqd58qvhD
FTa8xlIfYsMkMyIvXHEvmxs3gBRv0BXC4CzkEfozkKcLDIzJnAGxAGNGDErd7FZI
g6OmCWCw4wTkq1SQNI6cJ/U2L8t+TTi0QlgIAfXau++6qhJmTTRGGDkgRDIDNTyJ
7IUHd6hTzUx+iIGeLkx9FJ/PNrJsckiXKt7al5I7yyRLkMIws3+pg97P43bb3arw
wrN1DSbBK9FEriKXxuZhP2VpTpCsTVv6rWOA05QCzOfyhoQOBw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 21:51:37 2025 by rpki-client