Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbX70mlQSR8nNFIA9Cq1NVwbFxg.roa
File:                     UbX70mlQSR8nNFIA9Cq1NVwbFxg.roa (raw, json)
Hash identifier:          K9cJy9capdX5w1a5G4Z3YCnDXfqwGyo116dZ+AgUT+w=
Subject key identifier:   51:B5:FB:D2:69:50:49:1F:27:34:52:00:F4:2A:B5:35:5C:1B:17:18
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       71CB920A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbX70mlQSR8nNFIA9Cq1NVwbFxg.roa
Signing time:             Sat 12 Mar 2022 02:09:29 +0000
ROA not before:           Sat 12 Mar 2022 02:09:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
                          2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909166602 (0x71cb920a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 12 02:09:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51b5fbd26950491f27345200f42ab5355c1b1718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:f7:6b:5f:11:6d:44:d6:b6:11:3e:f0:0a:
                    1e:e7:8d:d1:b6:77:39:ac:16:44:c2:28:1d:fb:bf:
                    e2:11:bb:5f:8d:63:fb:6d:90:76:7f:6f:49:95:1c:
                    2c:06:f2:f0:1e:95:20:52:64:a2:b0:35:ad:5e:fb:
                    e0:5c:97:72:80:15:35:dd:66:95:12:48:f1:ad:ba:
                    06:1a:79:92:5c:a3:af:47:cc:37:f4:59:5b:a1:4a:
                    b1:61:34:b8:80:b6:54:1b:ce:82:58:8c:e4:f8:85:
                    8d:b0:50:d2:db:87:dc:19:71:6d:bd:d9:1d:bf:d0:
                    83:85:70:38:3e:52:54:4e:a3:2a:00:4c:5f:e8:77:
                    9a:43:c9:85:dd:43:a7:46:ea:87:69:3a:c8:59:80:
                    54:85:f0:77:76:6d:a2:24:6d:88:52:a8:3c:d1:87:
                    12:f7:11:32:a0:a3:1b:37:a2:25:a2:37:1c:9f:a5:
                    70:2a:85:cc:a3:b1:cb:6f:d1:4c:a0:9c:02:95:37:
                    4a:bb:27:51:04:bc:fa:d2:66:50:3d:87:e6:2e:00:
                    46:23:51:57:26:9f:27:fb:a0:fe:c2:d4:6d:98:bf:
                    bb:07:47:40:a8:8a:eb:c5:6a:8a:52:91:dd:a0:72:
                    cc:30:3d:7d:4b:56:a8:97:bc:95:85:9f:70:1f:23:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:FB:D2:69:50:49:1F:27:34:52:00:F4:2A:B5:35:5C:1B:17:18
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UbX70mlQSR8nNFIA9Cq1NVwbFxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:58:ef:af:76:77:16:67:65:20:47:dd:4f:49:65:07:ec:43:
         f9:d7:a0:9f:58:7c:ae:dc:29:35:84:c1:15:d7:c7:8a:c5:7d:
         c9:3d:ae:93:8e:23:bb:a9:6d:81:09:8a:a3:5c:7d:94:80:42:
         d7:b3:b3:8d:a4:f2:0a:ef:bf:56:7e:7f:02:18:99:2f:ff:d6:
         3d:ac:33:67:ab:40:ce:81:5d:c7:e5:a6:3c:3e:1d:8d:3e:3b:
         60:06:bb:ae:fe:96:35:60:ae:21:68:f2:53:b1:11:3f:83:39:
         d8:63:78:a6:e0:30:1f:66:2b:c9:c7:bc:3b:e5:ab:9c:7d:05:
         b0:aa:84:36:e3:fc:ae:ca:ad:1c:55:20:2e:d0:07:06:85:ed:
         87:1d:0c:9a:3d:34:c8:27:48:b8:6f:d2:4f:9d:c5:b5:3e:8f:
         45:4c:a5:a9:8e:5f:22:44:47:15:4d:a1:50:fa:b6:e7:87:b3:
         b8:2a:d7:1e:7d:4b:fd:39:60:d5:2f:3c:24:e0:31:6f:53:c0:
         29:31:41:ec:1d:36:8a:54:74:5d:96:5e:c3:a1:27:30:1e:69:
         fa:7e:12:6e:21:9b:f1:31:87:20:21:3f:8e:be:d4:39:ac:53:
         a2:31:d6:f8:4f:b9:24:5d:1b:b5:0a:39:2e:2f:e6:77:04:24:
         58:92:a9:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEccuSCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
MjAyMDkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTFiNWZiZDI2OTUw
NDkxZjI3MzQ1MjAwZjQyYWI1MzU1YzFiMTcxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOs92tfEW1E1rYRPvAKHueN0bZ3OawWRMIoHfu/4hG7X41j
+22Qdn9vSZUcLAby8B6VIFJkorA1rV774FyXcoAVNd1mlRJI8a26Bhp5klyjr0fM
N/RZW6FKsWE0uIC2VBvOgliM5PiFjbBQ0tuH3Blxbb3ZHb/Qg4VwOD5SVE6jKgBM
X+h3mkPJhd1Dp0bqh2k6yFmAVIXwd3ZtoiRtiFKoPNGHEvcRMqCjGzeiJaI3HJ+l
cCqFzKOxy2/RTKCcApU3SrsnUQS8+tJmUD2H5i4ARiNRVyafJ/ug/sLUbZi/uwdH
QKiK68VqilKR3aByzDA9fUtWqJe8lYWfcB8jJfUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRRtfvSaVBJHyc0UgD0KrU1XBsXGDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1ViWDcwbWxRU1I4bk5GSUE5Q3ExTlZ3YkZ4Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCBWO+vdncWZ2UgR91PSWUH7EP516CfWHyu3Ck1
hMEV18eKxX3JPa6TjiO7qW2BCYqjXH2UgELXs7ONpPIK779Wfn8CGJkv/9Y9rDNn
q0DOgV3H5aY8Ph2NPjtgBruu/pY1YK4haPJTsRE/gznYY3im4DAfZivJx7w75auc
fQWwqoQ24/yuyq0cVSAu0AcGhe2HHQyaPTTIJ0i4b9JPncW1Po9FTKWpjl8iREcV
TaFQ+rbnh7O4KtcefUv9OWDVLzwk4DFvU8ApMUHsHTaKVHRdll7DoScwHmn6fhJu
IZvxMYcgIT+OvtQ5rFOiMdb4T7kkXRu1CjkuL+Z3BCRYkql3
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:38:39 2025 by rpki-client