Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxlS-fONTtQlXUlDFQVOl8rjA1A.roa
File:                     ZxlS-fONTtQlXUlDFQVOl8rjA1A.roa (raw, json)
Hash identifier:          7rTkR9+lqslAvakvbp9PF1MMTJZ8Ot8JLf7M0smrRXI=
Subject key identifier:   67:19:52:F9:F3:8D:4E:D4:25:5D:49:43:15:05:4E:97:CA:E3:03:50
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018295D558EEF8F45B16C62081C9126AA02B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxlS-fONTtQlXUlDFQVOl8rjA1A.roa
Signing time:             Sat 13 Aug 2022 06:12:43 +0000
ROA not before:           Sat 13 Aug 2022 06:12:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
                          2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:95:d5:58:ee:f8:f4:5b:16:c6:20:81:c9:12:6a:a0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug 13 06:12:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=671952f9f38d4ed4255d494315054e97cae30350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:22:f1:e0:82:a5:a4:f0:db:97:8b:5c:5d:
                    3c:3b:ab:a9:e7:87:c5:f7:7f:f5:26:72:6a:5d:23:
                    1d:f1:b6:01:91:fb:53:86:c4:4c:93:48:aa:35:28:
                    d3:f9:ea:1e:4f:ab:69:07:92:cd:74:ad:7e:37:33:
                    61:2c:81:68:6d:8c:e8:a4:ca:3c:7a:b1:30:87:53:
                    8f:df:41:7e:70:ca:13:a7:2b:b8:24:fb:e9:25:25:
                    fc:14:8d:c8:b9:42:a6:a8:fb:24:a8:e2:b8:70:f5:
                    9a:11:7f:71:8a:25:f8:3e:36:50:8c:25:cd:47:ea:
                    bf:1a:1e:8a:e3:bb:b1:4f:91:fb:d0:6d:f8:f3:23:
                    5d:a4:01:82:e1:12:8a:e6:7b:0a:6a:fa:7d:e1:d6:
                    bd:7b:f3:57:c5:f8:19:44:a0:f2:05:59:fe:4b:6c:
                    07:b2:88:02:4f:8c:65:19:b4:5a:b1:58:b6:33:19:
                    2b:cd:08:4f:9a:fe:53:d6:8b:60:5d:19:da:47:4a:
                    57:27:34:b0:cc:d6:99:a1:07:8c:b4:95:48:73:46:
                    9d:17:80:08:99:97:e2:a1:53:3d:aa:5f:ae:6a:0a:
                    6d:6e:10:34:32:ca:e6:b9:47:54:60:7e:d3:dc:e6:
                    ad:90:a9:10:1c:32:3b:91:01:f3:e7:cb:75:12:44:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:19:52:F9:F3:8D:4E:D4:25:5D:49:43:15:05:4E:97:CA:E3:03:50
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxlS-fONTtQlXUlDFQVOl8rjA1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:97:8f:29:dd:9f:b7:90:e3:57:c0:80:47:a9:9b:b4:06:20:
         d6:4b:5c:b1:c6:01:a7:0a:4e:ee:25:e6:14:06:de:6a:1c:0d:
         65:ca:b6:07:9e:27:0e:08:35:6d:b4:88:6c:b2:a6:10:e3:62:
         b7:ea:99:89:a3:c9:c2:fe:8e:43:cc:46:53:2e:ea:47:6f:4e:
         54:5b:01:a4:99:a5:a1:55:e1:76:db:63:d6:66:4b:53:2d:e0:
         71:c4:23:3a:20:67:c8:8a:98:c5:4e:fe:d2:65:6e:25:6d:b9:
         23:fb:ed:1b:f6:03:2f:35:0c:29:a6:53:ea:3a:9f:48:d7:26:
         06:ac:9f:d4:af:ff:06:95:f6:c5:16:7e:4e:61:91:2e:87:a3:
         a1:5e:30:ea:85:f7:53:e3:b8:69:70:2e:eb:9a:98:09:7f:b0:
         b9:14:fa:a0:08:16:4e:5e:2e:e5:26:a3:bf:40:4e:20:8c:40:
         72:90:c3:16:61:dd:f9:63:e9:19:f5:19:7e:93:89:16:f1:00:
         18:bb:43:63:34:62:1e:b0:2a:90:71:71:b7:d1:4f:18:9c:ce:
         05:d8:01:91:68:8a:57:d7:87:1d:53:ed:83:fc:e9:9e:cf:3e:
         04:86:22:17:11:87:f5:a2:ee:c9:fd:4d:63:9c:21:e6:9d:fd:
         cf:29:26:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKV1Vju+PRbFsYggckSaqArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODEzMDYxMjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzE5NTJmOWYzOGQ0ZWQ0MjU1ZDQ5NDMxNTA1NGU5N2NhZTMwMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR4i8eCCpaTw25eLXF08O6up54fF
93/1JnJqXSMd8bYBkftThsRMk0iqNSjT+eoeT6tpB5LNdK1+NzNhLIFobYzopMo8
erEwh1OP30F+cMoTpyu4JPvpJSX8FI3IuUKmqPskqOK4cPWaEX9xiiX4PjZQjCXN
R+q/Gh6K47uxT5H70G348yNdpAGC4RKK5nsKavp94da9e/NXxfgZRKDyBVn+S2wH
sogCT4xlGbRasVi2MxkrzQhPmv5T1otgXRnaR0pXJzSwzNaZoQeMtJVIc0adF4AI
mZfioVM9ql+uagptbhA0MsrmuUdUYH7T3OatkKkQHDI7kQHz58t1EkSSqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGcZUvnzjU7UJV1JQxUFTpfK4wNQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWnhsUy1mT05UdFFsWFVsREZRVk9sOHJqQTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF2Xjyndn7eQ41fAgEep
m7QGINZLXLHGAacKTu4l5hQG3mocDWXKtgeeJw4INW20iGyyphDjYrfqmYmjycL+
jkPMRlMu6kdvTlRbAaSZpaFV4XbbY9ZmS1Mt4HHEIzogZ8iKmMVO/tJlbiVtuSP7
7Rv2Ay81DCmmU+o6n0jXJgasn9Sv/waV9sUWfk5hkS6Ho6FeMOqF91PjuGlwLuua
mAl/sLkU+qAIFk5eLuUmo79ATiCMQHKQwxZh3flj6Rn1GX6TiRbxABi7Q2M0Yh6w
KpBxcbfRTxiczgXYAZFoilfXhx1T7YP86Z7PPgSGIhcRh/Wi7sn9TWOcIead/c8p
JoI=
-----END CERTIFICATE-----
Generated at Thu Jun 12 06:28:43 2025 by rpki-client