Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rI6oGm1xeHDOnXxIb0OsVnuCFdY.roa
File:                     rI6oGm1xeHDOnXxIb0OsVnuCFdY.roa (raw, json)
Hash identifier:          D4PWWYOdIw5wMNYE1LCiXzssmTYuCkLvI4k8zOS+fU8=
Subject key identifier:   AC:8E:A8:1A:6D:71:78:70:CE:9D:7C:48:6F:43:AC:56:7B:82:15:D6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018884632DFADB66E971BE9A275E08244799
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rI6oGm1xeHDOnXxIb0OsVnuCFdY.roa
Signing time:             Sun 04 Jun 2023 03:11:12 +0000
ROA not before:           Sun 04 Jun 2023 03:11:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:84:63:2d:fa:db:66:e9:71:be:9a:27:5e:08:24:47:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  4 03:11:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac8ea81a6d717870ce9d7c486f43ac567b8215d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:9b:96:99:4b:24:76:78:48:6b:bc:48:02:
                    84:86:aa:b5:f6:a2:d6:72:cb:39:fd:8f:75:6c:d1:
                    65:46:c7:e4:9a:ad:58:f7:db:f5:3b:5a:7b:0d:f6:
                    8a:26:03:72:81:09:44:61:a5:69:0b:ba:bd:70:ca:
                    6c:e8:58:35:d7:14:c7:7a:22:42:5e:6d:90:02:5d:
                    0d:ec:64:6b:a3:3c:a6:17:4b:56:da:c6:f4:3f:f1:
                    88:2e:6f:12:fc:56:88:95:1c:83:9c:c2:aa:f1:e3:
                    e6:d1:61:6d:77:a9:50:a8:5e:b2:40:fd:04:2e:fe:
                    93:7d:4c:ab:38:35:60:0a:c0:a3:21:ff:47:1f:e9:
                    eb:17:61:31:91:52:99:b6:f5:a6:cd:ff:d7:e8:cf:
                    8c:a9:c0:c2:b7:64:41:3d:18:1c:f0:81:da:3e:8c:
                    e9:4c:e0:71:e2:60:1b:d5:18:96:39:b8:ec:0f:23:
                    c7:b2:5a:f8:86:c2:75:f0:b9:c2:a6:9d:57:4c:7e:
                    60:c0:ad:c9:f0:60:62:1f:b5:f0:0e:68:54:df:5a:
                    76:3e:c4:de:f8:9e:49:3c:70:b4:db:b4:f8:17:a0:
                    c6:df:f4:17:dc:06:ee:d9:2c:6f:ad:25:86:c7:cb:
                    41:bf:aa:a8:80:34:38:10:f3:3c:1a:62:f8:55:b5:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8E:A8:1A:6D:71:78:70:CE:9D:7C:48:6F:43:AC:56:7B:82:15:D6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rI6oGm1xeHDOnXxIb0OsVnuCFdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:a0:7d:67:bf:de:61:cf:98:f3:66:17:52:6d:ca:b8:e1:86:
         e0:5f:3e:b8:8e:56:cb:a3:b6:26:37:5c:df:e1:e2:95:4a:d1:
         97:31:58:dd:b8:fc:0f:24:be:ab:58:76:d2:ac:f3:3b:d8:3c:
         23:1f:e0:63:36:8f:94:45:4b:df:94:b5:5c:3c:bd:ea:f3:cc:
         97:ad:d2:15:22:45:6c:29:af:ab:d8:ed:ce:f5:d9:90:33:ac:
         40:29:46:f9:cd:ee:c8:cb:e5:ca:d0:3a:3c:5d:09:a6:fb:af:
         87:0b:d9:0c:71:08:9a:58:47:de:fe:b9:fe:7c:f5:4d:69:6a:
         11:e0:3c:22:7e:26:03:51:f7:58:0e:dc:9a:a3:b0:2c:e0:eb:
         c7:e0:b2:c6:40:55:90:2b:6b:18:a3:22:c9:66:47:f5:7f:ca:
         bb:fc:c7:ae:73:96:e4:7c:d1:91:82:85:64:9c:db:81:96:7a:
         c4:ad:96:38:91:bc:3d:2b:f0:e4:90:1c:21:c5:d5:cb:0b:d3:
         e0:c5:81:2f:13:20:d5:7e:ad:77:cc:e3:81:28:4f:46:7a:fc:
         7a:4f:3e:57:fe:c5:dd:43:03:9b:9d:e5:27:d6:78:a4:c5:fe:
         7d:38:9c:1f:3a:34:0d:47:b2:c0:7a:38:a5:4d:b8:c2:c8:5a:
         31:86:01:86
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiEYy3622bpcb6aJ14IJEeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA0MDMxMTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzhlYTgxYTZkNzE3ODcwY2U5ZDdjNDg2ZjQzYWM1NjdiODIxNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNiblplLJHZ4SGu8SAKEhqq19qLW
css5/Y91bNFlRsfkmq1Y99v1O1p7DfaKJgNygQlEYaVpC7q9cMps6Fg11xTHeiJC
Xm2QAl0N7GRrozymF0tW2sb0P/GILm8S/FaIlRyDnMKq8ePm0WFtd6lQqF6yQP0E
Lv6TfUyrODVgCsCjIf9HH+nrF2ExkVKZtvWmzf/X6M+MqcDCt2RBPRgc8IHaPozp
TOBx4mAb1RiWObjsDyPHslr4hsJ18LnCpp1XTH5gwK3J8GBiH7XwDmhU31p2PsTe
+J5JPHC027T4F6DG3/QX3Abu2SxvrSWGx8tBv6qogDQ4EPM8GmL4VbVVeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKyOqBptcXhwzp18SG9DrFZ7ghXWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvckk2b0dtMXhlSERPblh4SWIwT3NWbnVDRmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG+gfWe/3mHPmPNmF1Jt
yrjhhuBfPriOVsujtiY3XN/h4pVK0ZcxWN24/A8kvqtYdtKs8zvYPCMf4GM2j5RF
S9+UtVw8verzzJet0hUiRWwpr6vY7c712ZAzrEApRvnN7sjL5crQOjxdCab7r4cL
2QxxCJpYR97+uf589U1pahHgPCJ+JgNR91gO3JqjsCzg68fgssZAVZAraxijIslm
R/V/yrv8x65zluR80ZGChWSc24GWesStljiRvD0r8OSQHCHF1csL0+DFgS8TINV+
rXfM44EoT0Z6/HpPPlf+xd1DA5ud5SfWeKTF/n04nB86NA1HssB6OKVNuMLIWjGG
AYY=
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:25:35 2025 by rpki-client