Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w_I2DJsb8q_-sN8Gt2WvWC5q3KI.roa
File:                     w_I2DJsb8q_-sN8Gt2WvWC5q3KI.roa (raw, json)
Hash identifier:          3yLMRQyYcCWVrzbgtvz1qLFvalOfWQQCb+zj+QptE3M=
Subject key identifier:   C3:F2:36:0C:9B:1B:F2:AF:FE:B0:DF:06:B7:65:AF:58:2E:6A:DC:A2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01850A513A2FE5AAFB400181A29CF679894E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w_I2DJsb8q_-sN8Gt2WvWC5q3KI.roa
Signing time:             Tue 13 Dec 2022 07:09:33 +0000
ROA not before:           Tue 13 Dec 2022 07:09:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0a:51:3a:2f:e5:aa:fb:40:01:81:a2:9c:f6:79:89:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Dec 13 07:09:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3f2360c9b1bf2affeb0df06b765af582e6adca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:4d:ca:6d:14:ce:ed:75:b9:a2:21:5d:88:
                    a3:da:f4:eb:78:88:42:a6:88:46:c4:90:d0:1c:02:
                    7e:56:75:72:55:ff:07:30:8c:7d:df:78:0c:c4:c0:
                    db:85:81:18:db:7a:0c:9c:3d:cd:be:89:5f:ea:1f:
                    f7:00:27:0a:6f:5d:02:de:0c:ef:aa:96:a3:2f:1b:
                    e5:30:51:4f:67:0b:0b:72:3b:e2:78:d5:9c:36:9f:
                    29:2c:5a:7d:b8:d3:42:25:80:85:51:cf:e6:91:07:
                    eb:ef:43:b3:b2:76:24:13:ef:97:0c:1c:e2:65:96:
                    2f:68:25:2d:d9:a9:3c:81:21:f1:90:06:64:ae:0f:
                    22:57:f2:b0:52:f8:5c:d8:d9:61:a0:93:c7:48:94:
                    66:3d:9a:c5:8f:9a:9c:20:f1:6b:69:9f:ab:b1:28:
                    99:7f:34:f1:85:ac:8c:5d:5e:09:80:03:ec:ce:95:
                    54:d5:87:d2:d2:97:51:b4:46:b1:92:85:11:79:a7:
                    7f:cf:07:73:9c:39:3c:6d:4b:cc:0c:da:e4:0d:ce:
                    62:1f:d3:6b:b8:4e:02:2d:d2:09:e9:78:70:dc:86:
                    18:c1:82:c4:b9:e2:7c:ad:99:90:0c:69:bc:74:d4:
                    3a:b4:52:ae:c4:87:bd:82:fe:68:91:47:80:90:c0:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:36:0C:9B:1B:F2:AF:FE:B0:DF:06:B7:65:AF:58:2E:6A:DC:A2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/w_I2DJsb8q_-sN8Gt2WvWC5q3KI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:1b:55:ce:5e:ce:b1:72:84:f1:dc:ac:11:e6:37:87:34:25:
         1a:7b:e6:26:e5:8b:d6:07:68:33:b3:da:ae:50:9d:d2:a4:9f:
         6f:da:df:67:58:fd:71:1b:ab:28:63:a2:1c:c0:cd:c8:46:cb:
         c4:dc:28:50:4e:78:24:06:2f:2d:50:e4:5d:1d:2c:c4:ad:df:
         34:81:1d:aa:89:30:6c:82:e7:07:c4:d7:e0:03:fa:2b:93:18:
         23:b1:fe:5d:3e:ab:f4:08:c5:51:be:ff:55:32:ff:74:80:44:
         92:8f:4a:86:79:71:7d:b5:a6:ca:21:43:ea:0d:bb:e4:8d:95:
         37:af:f7:b3:b4:e0:0f:dd:4e:83:a0:c7:27:14:83:3b:d9:07:
         9f:3e:17:9f:2a:00:27:f8:2a:6d:b0:52:8b:1b:5f:0c:97:82:
         da:a1:32:75:cf:53:d1:79:b5:10:f9:f7:97:97:f9:fc:df:54:
         1d:97:70:9d:eb:29:2d:5e:20:f0:c7:c0:1b:9e:76:25:02:1e:
         25:b6:96:49:60:43:c9:72:f5:5d:ea:b8:d2:14:56:80:96:99:
         ce:0e:01:b6:75:0f:c1:f3:6c:15:62:2d:2b:cd:ea:2c:c4:83:
         82:c6:79:a5:e9:f3:b4:9c:8b:ff:76:e6:6a:50:a9:40:a2:ef:
         1f:ff:fb:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUKUTov5ar7QAGBopz2eYlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjEzMDcwOTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2YyMzYwYzliMWJmMmFmZmViMGRmMDZiNzY1YWY1ODJlNmFkY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzlNym0Uzu11uaIhXYij2vTreIhC
pohGxJDQHAJ+VnVyVf8HMIx933gMxMDbhYEY23oMnD3Nvolf6h/3ACcKb10C3gzv
qpajLxvlMFFPZwsLcjvieNWcNp8pLFp9uNNCJYCFUc/mkQfr70OzsnYkE++XDBzi
ZZYvaCUt2ak8gSHxkAZkrg8iV/KwUvhc2NlhoJPHSJRmPZrFj5qcIPFraZ+rsSiZ
fzTxhayMXV4JgAPszpVU1YfS0pdRtEaxkoURead/zwdznDk8bUvMDNrkDc5iH9Nr
uE4CLdIJ6Xhw3IYYwYLEueJ8rZmQDGm8dNQ6tFKuxIe9gv5okUeAkMBZXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMPyNgybG/Kv/rDfBrdlr1guatyiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd19JMkRKc2I4cV8tc044R3QyV3ZXQzVxM0tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFQbVc5ezrFyhPHcrBHm
N4c0JRp75ibli9YHaDOz2q5QndKkn2/a32dY/XEbqyhjohzAzchGy8TcKFBOeCQG
Ly1Q5F0dLMSt3zSBHaqJMGyC5wfE1+AD+iuTGCOx/l0+q/QIxVG+/1Uy/3SARJKP
SoZ5cX21psohQ+oNu+SNlTev97O04A/dToOgxycUgzvZB58+F58qACf4Km2wUosb
XwyXgtqhMnXPU9F5tRD595eX+fzfVB2XcJ3rKS1eIPDHwBuediUCHiW2lklgQ8ly
9V3quNIUVoCWmc4OAbZ1D8HzbBViLSvN6izEg4LGeaXp87Sci/925mpQqUCi7x//
+wI=
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:18:06 2025 by rpki-client