Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laQ-v51oY28_RyMOD_A00LMRcXo.roa
File:                     laQ-v51oY28_RyMOD_A00LMRcXo.roa (raw, json)
Hash identifier:          4BcSdKcb7kJU5zWNGVCIEoW7fxe7rxruh7HLXXQeqgM=
Subject key identifier:   95:A4:3E:BF:9D:68:63:6F:3F:47:23:0E:0F:F0:34:D0:B3:11:71:7A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0183EAFB75BBF9D0A1EDDEA649EE390F3B40
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laQ-v51oY28_RyMOD_A00LMRcXo.roa
Signing time:             Tue 18 Oct 2022 12:04:51 +0000
ROA not before:           Tue 18 Oct 2022 12:04:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:183:eafb:11c7/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ea:fb:75:bb:f9:d0:a1:ed:de:a6:49:ee:39:0f:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Oct 18 12:04:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=95a43ebf9d68636f3f47230e0ff034d0b311717a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:50:2b:c0:d1:38:1f:e7:96:ec:c3:45:71:
                    8e:5f:4e:45:49:d0:21:7a:c0:98:4d:a1:78:47:4b:
                    65:83:80:b8:99:5a:2e:21:5b:36:e8:26:26:fb:16:
                    39:36:6d:2d:74:92:6a:f9:f2:0d:7d:53:a4:aa:40:
                    45:bb:84:2a:55:80:54:fd:ff:88:6c:e6:85:86:30:
                    ad:0e:42:5f:31:cb:86:5b:99:f2:92:58:16:dc:30:
                    38:2a:fd:02:71:b3:2e:91:91:65:bc:ce:3e:d7:19:
                    e6:c4:76:66:fc:af:89:06:52:b6:a9:09:7c:b0:d1:
                    d1:4b:1f:09:07:38:41:63:67:2d:dc:bd:81:0c:7b:
                    f7:fc:d5:3e:2e:4a:f0:f9:90:4e:ea:5f:59:b5:ae:
                    2f:c1:fd:e9:42:ca:fb:6e:84:84:2e:ea:c9:47:ac:
                    41:e3:14:9e:b2:03:36:1a:e1:3a:f0:e8:9a:fa:2a:
                    5f:1a:f1:b8:f8:eb:26:99:8e:af:b3:52:ea:77:70:
                    ef:15:0e:fc:90:e0:17:07:b6:f1:c2:26:c5:e6:0e:
                    5b:6e:60:cf:04:e0:09:26:32:04:9f:50:52:37:32:
                    2c:6c:02:12:71:1f:cb:d5:70:01:d7:c3:32:28:1f:
                    76:e7:b7:3a:d4:5a:e2:30:45:9d:c3:7c:e4:d1:ae:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A4:3E:BF:9D:68:63:6F:3F:47:23:0E:0F:F0:34:D0:B3:11:71:7A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/laQ-v51oY28_RyMOD_A00LMRcXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:a2:dd:9f:01:41:b0:20:74:55:e2:60:9b:0c:95:07:b7:ea:
         a1:85:13:3f:b6:f4:95:a8:63:1a:b1:f8:84:58:3f:57:c9:1b:
         4d:5a:66:79:3f:39:ec:e6:d1:4e:9e:75:51:62:23:09:79:97:
         4a:a8:c0:5b:d5:d9:c9:5e:92:a7:aa:1a:07:3c:64:84:f6:fd:
         b0:e0:4d:40:58:4f:8a:30:e6:ae:c7:b6:dd:4b:76:4f:ab:20:
         4b:4a:fd:83:0c:65:fd:ab:db:f8:3f:be:86:92:29:96:9d:40:
         db:a4:a7:75:19:0b:81:f9:3b:5b:a3:59:10:6e:34:a9:f8:ad:
         fe:df:45:35:06:33:1d:b8:d9:62:b1:4e:da:03:1f:e7:a2:86:
         35:ee:af:48:c7:9c:1b:65:6c:f2:42:75:b5:05:88:c7:61:b1:
         41:27:18:08:f3:9d:b3:3e:61:a1:97:e9:45:62:17:bd:92:f7:
         49:98:4b:2f:4a:41:dd:eb:6f:d7:38:0b:2d:20:df:4e:aa:63:
         40:ef:3e:d1:58:ed:00:fd:0b:9b:58:06:ad:a6:79:77:3e:10:
         1b:33:75:82:2e:39:04:bb:0d:25:9e:2d:16:5d:e9:ef:68:b9:
         00:e1:af:47:f7:3a:7e:41:cd:69:40:7b:59:63:d8:07:49:38:
         0c:c6:a1:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPq+3W7+dCh7d6mSe45DztAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDE4MTIwNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWE0M2ViZjlkNjg2MzZmM2Y0NzIzMGUwZmYwMzRkMGIzMTE3MTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O9QK8DROB/nluzDRXGOX05FSdAh
esCYTaF4R0tlg4C4mVouIVs26CYm+xY5Nm0tdJJq+fINfVOkqkBFu4QqVYBU/f+I
bOaFhjCtDkJfMcuGW5nyklgW3DA4Kv0CcbMukZFlvM4+1xnmxHZm/K+JBlK2qQl8
sNHRSx8JBzhBY2ct3L2BDHv3/NU+Lkrw+ZBO6l9Zta4vwf3pQsr7boSELurJR6xB
4xSesgM2GuE68Oia+ipfGvG4+OsmmY6vs1Lqd3DvFQ78kOAXB7bxwibF5g5bbmDP
BOAJJjIEn1BSNzIsbAIScR/L1XAB18MyKB9257c61FriMEWdw3zk0a7qoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJWkPr+daGNvP0cjDg/wNNCzEXF6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbGFRLXY1MW9ZMjhfUnlNT0RfQTAwTE1SY1hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB2i3Z8BQbAgdFXiYJsM
lQe36qGFEz+29JWoYxqx+IRYP1fJG01aZnk/Oezm0U6edVFiIwl5l0qowFvV2cle
kqeqGgc8ZIT2/bDgTUBYT4ow5q7Htt1Ldk+rIEtK/YMMZf2r2/g/voaSKZadQNuk
p3UZC4H5O1ujWRBuNKn4rf7fRTUGMx242WKxTtoDH+eihjXur0jHnBtlbPJCdbUF
iMdhsUEnGAjznbM+YaGX6UViF72S90mYSy9KQd3rb9c4Cy0g306qY0DvPtFY7QD9
C5tYBq2meXc+EBszdYIuOQS7DSWeLRZd6e9ouQDhr0f3On5BzWlAe1lj2AdJOAzG
oYI=
-----END CERTIFICATE-----
Generated at Tue Jun 10 01:25:44 2025 by rpki-client