Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWXnEWyLDKTlBedZmH-Q2Ff-ens.roa
File:                     tWXnEWyLDKTlBedZmH-Q2Ff-ens.roa (raw, json)
Hash identifier:          EVjAVvevD9y2R69YSNrMKaaXeFEjbC4QREiJ7QFmn3g=
Subject key identifier:   B5:65:E7:11:6C:8B:0C:A4:E5:05:E7:59:98:7F:90:D8:57:FE:7A:7B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018750775A46718844C274996AF77EF2A438
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWXnEWyLDKTlBedZmH-Q2Ff-ens.roa
Signing time:             Wed 05 Apr 2023 08:10:11 +0000
ROA not before:           Wed 05 Apr 2023 08:10:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:50:77:5a:46:71:88:44:c2:74:99:6a:f7:7e:f2:a4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  5 08:10:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b565e7116c8b0ca4e505e759987f90d857fe7a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:60:5e:af:f7:fb:7d:bf:e9:c7:bf:b0:33:
                    d1:2d:b7:17:d2:30:97:ac:19:b9:ec:fb:ce:42:dc:
                    c1:59:15:e6:48:72:b6:17:59:a6:2a:fa:58:ea:e0:
                    e2:86:9c:ac:f0:9e:98:d5:86:bd:f6:04:fb:69:e8:
                    46:e4:14:41:8a:61:fd:d6:5e:c8:77:81:6a:c4:80:
                    c8:30:12:97:52:7b:66:ad:93:1b:c3:44:b6:62:ef:
                    d5:29:0a:f0:53:37:2b:67:78:60:49:5f:04:83:c2:
                    f0:9f:91:f8:50:a4:b5:1a:33:27:6f:db:6b:9a:4a:
                    02:85:ae:4f:08:22:75:d7:a8:68:b8:c1:ec:73:cf:
                    23:7c:f8:2b:f6:12:d8:9c:f7:52:fa:09:82:e9:eb:
                    8c:e2:e4:96:01:65:e4:e7:57:fa:a7:9f:80:4f:1f:
                    ff:13:4f:85:92:02:86:68:95:fc:9b:4a:0c:1e:4b:
                    b9:83:04:f2:d2:ac:f7:3b:83:68:59:c6:ae:bb:dc:
                    31:62:d8:a1:b5:c0:60:aa:b4:47:32:ab:e2:72:2a:
                    89:5b:41:20:6c:d0:51:41:48:e9:91:0a:c2:01:1d:
                    32:67:e5:c2:41:fc:25:f4:1d:bc:93:57:f2:7c:26:
                    9c:4f:9c:24:7c:31:fb:9c:2c:df:19:dd:67:b9:ae:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:65:E7:11:6C:8B:0C:A4:E5:05:E7:59:98:7F:90:D8:57:FE:7A:7B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWXnEWyLDKTlBedZmH-Q2Ff-ens.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:3b:9c:3a:e6:08:a8:b3:ee:ff:9f:26:f9:54:5e:99:b4:
         cf:9c:51:9d:cd:41:5d:36:10:97:89:54:86:13:b9:9e:58:d1:
         f6:be:1e:c7:b3:8e:48:22:43:75:d3:fa:75:0d:24:cf:ef:93:
         44:0b:0e:9f:9c:67:7a:88:1d:d1:a9:85:5e:95:81:d6:9d:e0:
         18:d5:5d:42:e6:7a:d7:a0:f7:32:e6:77:b1:60:7b:26:bc:41:
         9e:ca:1c:55:f8:3b:e0:ec:48:98:88:e1:2b:e2:85:a0:e6:4b:
         87:fb:89:6b:32:fb:f2:9a:42:4f:50:54:db:e8:59:4f:7d:04:
         f9:18:1d:b3:3d:ff:16:c0:8f:d2:d6:3e:17:f5:65:ee:bc:db:
         52:0b:64:d6:be:8d:56:50:05:ac:3e:44:ed:b2:bd:6b:ad:3a:
         2e:3a:5c:79:08:0e:02:7d:15:40:cc:1b:b3:78:59:a2:cf:5b:
         23:48:97:9e:f4:ac:b8:cd:d0:4d:32:25:40:c4:82:70:7b:04:
         3e:7f:a5:79:90:ae:84:c7:aa:34:33:0a:8a:b8:33:9e:5f:5a:
         44:e9:38:1e:ad:d3:bb:e9:51:bb:2f:3e:50:fa:6b:f7:08:c0:
         9a:f2:0e:05:11:c9:23:b5:70:e1:20:54:f5:05:38:81:f1:25:
         2e:8f:85:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdQd1pGcYhEwnSZavd+8qQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA1MDgxMDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTY1ZTcxMTZjOGIwY2E0ZTUwNWU3NTk5ODdmOTBkODU3ZmU3YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswJgXq/3+32/6ce/sDPRLbcX0jCX
rBm57PvOQtzBWRXmSHK2F1mmKvpY6uDihpys8J6Y1Ya99gT7aehG5BRBimH91l7I
d4FqxIDIMBKXUntmrZMbw0S2Yu/VKQrwUzcrZ3hgSV8Eg8Lwn5H4UKS1GjMnb9tr
mkoCha5PCCJ116houMHsc88jfPgr9hLYnPdS+gmC6euM4uSWAWXk51f6p5+ATx//
E0+FkgKGaJX8m0oMHku5gwTy0qz3O4NoWcauu9wxYtihtcBgqrRHMqviciqJW0Eg
bNBRQUjpkQrCAR0yZ+XCQfwl9B28k1fyfCacT5wkfDH7nCzfGd1nua7buwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLVl5xFsiwyk5QXnWZh/kNhX/np7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdFdYbkVXeUxES1RsQmVkWm1ILVEyRmYtZW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGwAO5w65gios+7/nyb5
VF6ZtM+cUZ3NQV02EJeJVIYTuZ5Y0fa+HsezjkgiQ3XT+nUNJM/vk0QLDp+cZ3qI
HdGphV6Vgdad4BjVXULmeteg9zLmd7Fgeya8QZ7KHFX4O+DsSJiI4SvihaDmS4f7
iWsy+/KaQk9QVNvoWU99BPkYHbM9/xbAj9LWPhf1Ze6821ILZNa+jVZQBaw+RO2y
vWutOi46XHkIDgJ9FUDMG7N4WaLPWyNIl570rLjN0E0yJUDEgnB7BD5/pXmQroTH
qjQzCoq4M55fWkTpOB6t07vpUbsvPlD6a/cIwJryDgURySO1cOEgVPUFOIHxJS6P
hbI=
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:14:39 2025 by rpki-client