Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zHClybyH9iqEFstmYY218ZW5HUA.roa
File:                     zHClybyH9iqEFstmYY218ZW5HUA.roa (raw, json)
Hash identifier:          Z9IPo3rIyjSklQkVRU0xqxX1LHJHRkfizM7MgyX88l4=
Subject key identifier:   CC:70:A5:C9:BC:87:F6:2A:84:16:CB:66:61:8D:B5:F1:95:B9:1D:40
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187A94F5796B045498A20C88BB833878B51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zHClybyH9iqEFstmYY218ZW5HUA.roa
Signing time:             Sat 22 Apr 2023 14:12:41 +0000
ROA not before:           Sat 22 Apr 2023 14:12:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a9:4f:57:96:b0:45:49:8a:20:c8:8b:b8:33:87:8b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 22 14:12:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc70a5c9bc87f62a8416cb66618db5f195b91d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:0f:12:22:3a:ed:1a:96:0a:94:3f:02:4b:
                    27:d3:4a:64:d0:58:e7:f6:66:05:bb:5b:42:52:5d:
                    0c:90:4a:94:12:95:11:eb:24:07:ab:79:47:59:82:
                    f8:bb:f8:c1:c8:e4:70:bf:8a:99:f1:1e:52:49:d3:
                    17:1d:9b:5d:77:fd:8b:72:03:54:8f:d4:db:85:aa:
                    55:9e:cf:20:b3:a7:f1:3d:af:9c:62:eb:f7:1c:58:
                    95:21:b5:c9:d2:e5:31:be:0d:70:87:31:53:b4:14:
                    84:7c:ab:ce:1a:91:e7:68:03:46:9b:20:f6:3f:42:
                    77:10:29:c5:36:58:57:64:44:ec:e8:3d:56:fa:fd:
                    4d:fe:7e:f5:12:66:d2:0e:72:41:44:0d:4a:5a:7f:
                    09:2c:4f:87:b7:92:e9:92:01:3a:b2:b1:44:51:b0:
                    ed:0f:19:14:60:40:4a:20:bb:82:9d:bb:12:8a:6d:
                    9e:f9:3f:71:0a:9b:de:9f:f8:09:dd:4a:fd:ad:51:
                    27:3c:dc:49:d7:80:6e:88:57:f3:28:8f:45:55:00:
                    81:8f:ac:c9:6e:9c:2d:cc:eb:cf:a9:1b:b5:79:26:
                    11:60:3b:d8:7d:45:6f:4a:9d:f1:fe:35:04:b4:38:
                    40:7b:a2:48:33:05:d5:ff:bd:5f:ef:47:65:7f:d0:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:70:A5:C9:BC:87:F6:2A:84:16:CB:66:61:8D:B5:F1:95:B9:1D:40
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zHClybyH9iqEFstmYY218ZW5HUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:43:b6:7f:09:d7:09:d3:9f:29:1d:cb:f6:7b:3a:23:ad:84:
         48:16:6d:94:e5:02:dd:a1:33:5b:c2:6a:b7:a2:27:88:99:51:
         38:e4:81:5e:dc:60:bd:f9:87:8f:49:c7:db:f5:66:94:fa:c2:
         9a:df:58:29:a2:5b:e9:59:78:af:1d:3b:1d:42:02:52:34:81:
         42:f3:d4:b6:41:ab:b8:0e:40:c9:f1:24:8e:e8:13:c1:6b:47:
         6b:e2:d6:19:8f:b9:8b:c1:48:f0:4b:fe:bc:ec:81:8a:64:5a:
         5a:43:fa:b8:bf:a3:b2:a8:f2:5b:cf:bf:2d:1b:ee:93:e1:d9:
         36:06:db:4b:06:ea:df:d1:5d:61:f0:6b:a8:80:04:ec:77:84:
         36:bf:12:e8:c8:92:04:09:ae:ae:2e:11:3b:2b:5c:0e:5c:ee:
         95:ab:f3:ab:c3:6c:7e:b1:03:c3:0a:12:93:e8:79:66:bf:32:
         2e:6e:76:e2:9e:03:28:70:6b:50:f0:1e:dc:63:bb:0a:5d:e8:
         15:ab:27:e0:50:65:5c:ce:c0:34:55:68:ef:8d:54:f1:e5:7e:
         a6:23:e9:69:76:23:60:5c:95:a4:ef:de:3e:7f:75:a2:65:54:
         d8:34:a6:2b:5d:c9:4a:66:3b:ac:9c:ab:da:ea:45:a8:a9:10:
         f4:b7:84:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYepT1eWsEVJiiDIi7gzh4tRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIyMTQxMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzcwYTVjOWJjODdmNjJhODQxNmNiNjY2MThkYjVmMTk1YjkxZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOwPEiI67RqWCpQ/Aksn00pk0Fjn
9mYFu1tCUl0MkEqUEpUR6yQHq3lHWYL4u/jByORwv4qZ8R5SSdMXHZtdd/2LcgNU
j9TbhapVns8gs6fxPa+cYuv3HFiVIbXJ0uUxvg1whzFTtBSEfKvOGpHnaANGmyD2
P0J3ECnFNlhXZETs6D1W+v1N/n71EmbSDnJBRA1KWn8JLE+Ht5LpkgE6srFEUbDt
DxkUYEBKILuCnbsSim2e+T9xCpven/gJ3Ur9rVEnPNxJ14BuiFfzKI9FVQCBj6zJ
bpwtzOvPqRu1eSYRYDvYfUVvSp3x/jUEtDhAe6JIMwXV/71f70dlf9BB8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMxwpcm8h/YqhBbLZmGNtfGVuR1AMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvekhDbHlieUg5aXFFRnN0bVlZMjE4Wlc1SFVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKlDtn8J1wnTnykdy/Z7
OiOthEgWbZTlAt2hM1vCareiJ4iZUTjkgV7cYL35h49Jx9v1ZpT6wprfWCmiW+lZ
eK8dOx1CAlI0gULz1LZBq7gOQMnxJI7oE8FrR2vi1hmPuYvBSPBL/rzsgYpkWlpD
+ri/o7Ko8lvPvy0b7pPh2TYG20sG6t/RXWHwa6iABOx3hDa/EujIkgQJrq4uETsr
XA5c7pWr86vDbH6xA8MKEpPoeWa/Mi5uduKeAyhwa1DwHtxjuwpd6BWrJ+BQZVzO
wDRVaO+NVPHlfqYj6Wl2I2BclaTv3j5/daJlVNg0pitdyUpmO6ycq9rqRaipEPS3
hEY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 18:59:46 2025 by rpki-client