Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kUVWUILGMD1TUYA-26Oq84jPMoo.roa
File:                     kUVWUILGMD1TUYA-26Oq84jPMoo.roa (raw, json)
Hash identifier:          Cnff+V/G4jDo+ryLlDOKsKCe27uMA66ezXLb/47OdoA=
Subject key identifier:   91:45:56:50:82:C6:30:3D:53:51:80:3E:DB:A3:AA:F3:88:CF:32:8A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018951800482D968D29E7262DCBBE87F85BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kUVWUILGMD1TUYA-26Oq84jPMoo.roa
Signing time:             Thu 13 Jul 2023 23:04:51 +0000
ROA not before:           Thu 13 Jul 2023 23:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:189:517f:ee7f/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:51:80:04:82:d9:68:d2:9e:72:62:dc:bb:e8:7f:85:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 13 23:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9145565082c6303d5351803edba3aaf388cf328a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:fe:46:0b:b0:86:fa:96:78:fa:9b:f2:1d:
                    79:f5:02:4e:9b:8f:ce:eb:97:19:cf:b6:8f:6b:0e:
                    e1:33:7e:e1:00:ea:38:a4:bf:db:9c:f0:fa:cd:00:
                    31:5d:f6:03:12:21:96:cf:0e:73:a5:d1:d7:64:ad:
                    ab:98:f8:0f:12:ec:91:c7:bc:a0:59:8a:f3:c5:92:
                    01:0a:2e:c3:0e:cd:21:b8:e6:21:fe:5d:2c:87:76:
                    bc:cf:ec:10:f4:16:d2:9b:ca:1d:dc:3d:ae:de:65:
                    ed:d4:f2:b9:f7:29:f3:bc:6d:bc:6b:33:0b:49:1a:
                    73:2b:9a:8e:d9:a1:01:9e:65:da:da:5d:d5:6e:53:
                    05:62:35:00:ff:29:ce:47:2e:f3:b6:0e:28:22:99:
                    d1:50:b9:c4:63:f2:f6:b9:05:6c:38:05:56:c3:7c:
                    2e:67:a2:6d:3d:ad:0a:77:dc:3a:5c:fe:3b:c2:07:
                    6f:60:a7:b4:6f:d9:c3:f0:38:c4:c5:0f:de:89:5a:
                    20:97:50:bb:1e:c7:9a:f4:2b:43:34:1d:6b:60:5d:
                    b3:74:67:f7:ea:64:11:f9:6b:88:99:60:e9:06:c6:
                    ce:63:04:e0:35:04:c5:6e:9a:25:50:ce:0b:bb:d4:
                    42:65:2d:09:0c:97:b7:c2:e4:6b:26:5b:6e:ce:6e:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:45:56:50:82:C6:30:3D:53:51:80:3E:DB:A3:AA:F3:88:CF:32:8A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kUVWUILGMD1TUYA-26Oq84jPMoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:23:ae:27:fd:83:1c:06:ed:f4:a5:89:21:b2:69:10:35:e5:
         7d:af:cb:e9:e5:1b:da:63:55:49:70:05:5e:19:c9:e9:64:8d:
         d4:60:9d:e3:dd:e8:7f:e2:fd:13:6c:8e:6c:57:4b:a3:7e:0e:
         3e:b7:94:09:0c:a7:1a:1d:e9:94:58:1c:60:48:2c:56:6f:65:
         d8:b8:9f:99:84:32:1a:23:4a:c6:86:37:a2:2f:e5:42:f8:f9:
         3a:3f:fc:97:8c:7d:9d:fa:e8:1d:6f:b6:43:8d:f5:9e:46:9c:
         38:56:2b:3b:3c:95:bc:63:1d:5d:c8:5a:54:8a:da:dc:c8:f3:
         97:16:ab:ac:e8:ab:b8:e9:d2:05:3d:4a:a7:c1:c4:63:0e:ea:
         80:c3:69:d9:48:80:a1:8b:c6:c1:db:31:e0:5b:06:d4:0b:8f:
         c3:e3:7f:41:c5:a4:bc:1a:fb:e7:36:ec:5a:b1:32:f2:eb:35:
         58:1f:55:2a:b2:2c:6e:f4:73:b5:04:6c:9e:76:bb:f9:b6:71:
         90:51:ff:4d:e5:d8:69:56:47:b6:dc:1c:23:4a:f3:38:85:d4:
         3d:6e:74:78:97:20:ed:2c:21:93:68:f9:7f:d4:5f:40:f6:69:
         1a:e7:1d:d3:0a:4c:44:bb:32:45:1f:65:f2:0f:a8:80:03:a4:
         3f:b3:0b:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlRgASC2WjSnnJi3Lvof4W+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzEzMjMwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTQ1NTY1MDgyYzYzMDNkNTM1MTgwM2VkYmEzYWFmMzg4Y2YzMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS3+RguwhvqWePqb8h159QJOm4/O
65cZz7aPaw7hM37hAOo4pL/bnPD6zQAxXfYDEiGWzw5zpdHXZK2rmPgPEuyRx7yg
WYrzxZIBCi7DDs0huOYh/l0sh3a8z+wQ9BbSm8od3D2u3mXt1PK59ynzvG28azML
SRpzK5qO2aEBnmXa2l3VblMFYjUA/ynORy7ztg4oIpnRULnEY/L2uQVsOAVWw3wu
Z6JtPa0Kd9w6XP47wgdvYKe0b9nD8DjExQ/eiVogl1C7Hsea9CtDNB1rYF2zdGf3
6mQR+WuImWDpBsbOYwTgNQTFbpolUM4Lu9RCZS0JDJe3wuRrJltuzm4rYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJFFVlCCxjA9U1GAPtujqvOIzzKKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva1VWV1VJTEdNRDFUVVlBLTI2T3E4NGpQTW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEYjrif9gxwG7fSliSGy
aRA15X2vy+nlG9pjVUlwBV4ZyelkjdRgnePd6H/i/RNsjmxXS6N+Dj63lAkMpxod
6ZRYHGBILFZvZdi4n5mEMhojSsaGN6Iv5UL4+To//JeMfZ366B1vtkON9Z5GnDhW
Kzs8lbxjHV3IWlSK2tzI85cWq6zoq7jp0gU9SqfBxGMO6oDDadlIgKGLxsHbMeBb
BtQLj8Pjf0HFpLwa++c27FqxMvLrNVgfVSqyLG70c7UEbJ52u/m2cZBR/03l2GlW
R7bcHCNK8ziF1D1udHiXIO0sIZNo+X/UX0D2aRrnHdMKTES7MkUfZfIPqIADpD+z
C+s=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:30 2025 by rpki-client