Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TxUZnAEcS0OKiqBmuqsKMcyTOhE.roa
File:                     TxUZnAEcS0OKiqBmuqsKMcyTOhE.roa (raw, json)
Hash identifier:          07VZsWgZeBFXuIvz8gQczmx5iurnunGGB+KDlxnmI1Y=
Subject key identifier:   4F:15:19:9C:01:1C:4B:43:8A:8A:A0:66:BA:AB:0A:31:CC:93:3A:11
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0183BF35DDCB8F75F5C899BE69C58C74FAD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TxUZnAEcS0OKiqBmuqsKMcyTOhE.roa
Signing time:             Mon 10 Oct 2022 00:05:21 +0000
ROA not before:           Mon 10 Oct 2022 00:05:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:183:bf35:b7ad/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:bf:35:dd:cb:8f:75:f5:c8:99:be:69:c5:8c:74:fa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Oct 10 00:05:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f15199c011c4b438a8aa066baab0a31cc933a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:1a:69:c9:93:0c:d1:3c:10:b8:95:b8:03:
                    67:d0:d0:35:64:7c:a1:35:0c:e5:b8:d2:00:e0:a7:
                    73:b8:a7:6f:38:d6:50:31:59:c2:76:fa:00:c5:d9:
                    3e:40:f0:fb:d3:ec:88:16:cf:c2:6f:4f:49:7e:c9:
                    6c:20:94:eb:9a:65:cc:f1:cf:57:b9:56:b3:1e:f8:
                    73:94:27:3f:ab:be:07:eb:f8:f8:d3:ff:a8:e7:be:
                    b7:d6:ac:7b:91:c0:5a:c1:48:6b:40:fc:34:95:e2:
                    a8:20:98:70:12:39:b9:85:93:6a:97:0a:08:54:41:
                    92:7e:e4:01:b1:09:59:d0:34:77:ae:ae:35:d4:1c:
                    5b:15:00:e4:1f:b0:ff:72:dc:26:75:63:b2:1f:57:
                    8d:62:6b:1f:71:03:e7:a9:23:1e:c5:01:7d:ce:ad:
                    1f:32:2b:5b:e6:78:91:7c:e3:87:9a:e2:f9:8c:70:
                    07:fb:3e:56:f5:71:9a:54:b9:34:49:fb:07:0d:1f:
                    10:10:39:fb:86:50:78:b0:f4:ea:71:12:a3:97:f4:
                    ce:a5:2e:f2:19:d5:43:2b:23:72:ef:6b:25:f3:89:
                    78:4b:a9:62:a1:ed:29:b9:1a:f5:79:c6:79:3a:b8:
                    25:29:73:f6:c9:fb:f4:40:dd:55:71:14:0f:de:d2:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:15:19:9C:01:1C:4B:43:8A:8A:A0:66:BA:AB:0A:31:CC:93:3A:11
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TxUZnAEcS0OKiqBmuqsKMcyTOhE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:cf:bd:46:e1:54:b9:f4:65:c2:6b:3a:aa:1c:33:bb:94:ce:
         60:72:b0:9c:31:49:00:69:9f:00:a7:d7:67:a0:3b:2d:09:21:
         f4:0f:ca:85:3e:0c:ae:d2:83:8d:40:db:1d:82:09:08:a7:6a:
         5c:77:4e:11:d0:8b:03:66:f5:a4:8a:71:d1:2b:5c:19:10:87:
         94:5e:d6:4d:43:ab:41:2a:58:bc:37:28:41:ff:2b:d7:e1:23:
         74:2f:e7:b6:0d:57:09:f4:92:9c:30:76:8d:dc:fc:83:83:07:
         e0:43:d2:82:2c:95:2f:46:d9:ab:e8:31:53:a7:eb:f9:f1:80:
         d7:25:c9:04:b2:7f:bf:50:39:04:d7:3b:f9:b9:2a:49:3a:68:
         62:36:6b:36:de:8c:dd:43:fc:60:e9:e1:df:88:90:2e:be:5e:
         08:c4:57:fb:13:d4:02:46:d4:e1:ab:19:a5:22:c0:85:f1:59:
         7b:c8:40:e0:30:c1:6c:6b:94:44:35:cb:a2:24:8f:36:c3:95:
         9d:80:17:d8:05:e5:65:48:3e:44:c8:6d:6e:da:e0:c8:39:46:
         f0:82:4d:76:6a:a5:bb:a3:4b:52:ba:03:9b:88:a9:ec:07:a0:
         a8:5f:c0:b4:e0:ea:f8:b0:f5:c5:b0:54:05:70:86:f3:62:58:
         b6:fb:e0:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYO/Nd3Lj3X1yJm+acWMdPrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDEwMDAwNTIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjE1MTk5YzAxMWM0YjQzOGE4YWEwNjZiYWFiMGEzMWNjOTMzYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSQaacmTDNE8ELiVuANn0NA1ZHyh
NQzluNIA4KdzuKdvONZQMVnCdvoAxdk+QPD70+yIFs/Cb09JfslsIJTrmmXM8c9X
uVazHvhzlCc/q74H6/j40/+o57631qx7kcBawUhrQPw0leKoIJhwEjm5hZNqlwoI
VEGSfuQBsQlZ0DR3rq411BxbFQDkH7D/ctwmdWOyH1eNYmsfcQPnqSMexQF9zq0f
Mitb5niRfOOHmuL5jHAH+z5W9XGaVLk0SfsHDR8QEDn7hlB4sPTqcRKjl/TOpS7y
GdVDKyNy72sl84l4S6lioe0puRr1ecZ5OrglKXP2yfv0QN1VcRQP3tJfCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFE8VGZwBHEtDioqgZrqrCjHMkzoRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVHhVWm5BRWNTME9LaXFCbXVxc0tNY3lUT2hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIzPvUbhVLn0ZcJrOqoc
M7uUzmBysJwxSQBpnwCn12egOy0JIfQPyoU+DK7Sg41A2x2CCQinalx3ThHQiwNm
9aSKcdErXBkQh5Re1k1Dq0EqWLw3KEH/K9fhI3Qv57YNVwn0kpwwdo3c/IODB+BD
0oIslS9G2avoMVOn6/nxgNclyQSyf79QOQTXO/m5Kkk6aGI2azbejN1D/GDp4d+I
kC6+XgjEV/sT1AJG1OGrGaUiwIXxWXvIQOAwwWxrlEQ1y6IkjzbDlZ2AF9gF5WVI
PkTIbW7a4Mg5RvCCTXZqpbujS1K6A5uIqewHoKhfwLTg6viw9cWwVAVwhvNiWLb7
4Dw=
-----END CERTIFICATE-----
Generated at Wed Jun 11 01:19:51 2025 by rpki-client