Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GUmosUbomi2Q0L3OPKu8VtqeXHM.roa
File:                     GUmosUbomi2Q0L3OPKu8VtqeXHM.roa (raw, json)
Hash identifier:          A1AOBcQyJGsaun5HS5N9MAKaca5VMAWRdDLkDWKBaZ0=
Subject key identifier:   19:49:A8:B1:46:E8:9A:2D:90:D0:BD:CE:3C:AB:BC:56:DA:9E:5C:73
Certificate issuer:       /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial:       018C7368EFB50547DA6600C70420026BD995
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GUmosUbomi2Q0L3OPKu8VtqeXHM.roa
Signing time:             Sat 16 Dec 2023 16:15:06 +0000
ROA not before:           Sat 16 Dec 2023 16:15:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/96 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:73:68:ef:b5:05:47:da:66:00:c7:04:20:02:6b:d9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
        Validity
            Not Before: Dec 16 16:15:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1949a8b146e89a2d90d0bdce3cabbc56da9e5c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:29:71:8a:8f:88:b4:70:68:63:4b:b9:82:
                    49:a3:ec:e7:17:66:93:e1:75:bf:fb:dd:a3:00:dd:
                    2c:87:f9:0e:aa:48:b1:af:0c:ce:24:96:3b:31:c5:
                    f4:6a:69:ae:cb:86:f0:99:ef:a5:bf:27:61:a9:69:
                    7e:53:33:59:0d:da:aa:f9:b2:bb:b2:d6:4a:a7:2f:
                    0b:2f:8b:74:be:40:a7:ff:52:04:c8:ec:7d:6f:3d:
                    e2:00:70:bc:fc:1b:fc:cf:b1:5b:cf:f1:60:9c:3a:
                    67:47:7a:8d:7d:b7:87:2a:9c:c5:9a:20:43:8e:c5:
                    82:d7:bf:5a:b4:46:25:ad:cc:eb:a6:a2:03:ba:19:
                    d6:6d:2d:08:75:8f:c6:46:6b:ab:48:f8:fc:c1:e4:
                    e7:1c:fb:93:28:86:4a:04:3b:e4:8f:e6:6d:ee:3e:
                    e3:a6:ba:0c:9f:cf:7e:c1:d9:e9:5a:9e:3c:94:39:
                    d1:a8:e3:aa:b2:48:08:ca:e8:44:01:66:d6:ef:bb:
                    28:08:f5:c4:72:24:64:98:6a:53:42:b3:db:a5:5e:
                    fa:9e:6f:f3:a0:72:91:1b:76:76:dc:c4:2c:43:42:
                    3c:43:b6:93:82:a1:c6:11:f1:08:31:48:45:e8:d5:
                    fb:35:74:7b:43:46:17:c3:17:58:c6:a5:a5:49:08:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:49:A8:B1:46:E8:9A:2D:90:D0:BD:CE:3C:AB:BC:56:DA:9E:5C:73
            X509v3 Authority Key Identifier:
                keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GUmosUbomi2Q0L3OPKu8VtqeXHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:15:74:46:b5:f7:48:99:06:61:64:8f:68:a2:91:02:82:
         32:45:cd:dc:84:67:79:e4:8e:00:ca:1c:d0:c4:88:86:af:66:
         51:80:b8:f1:9f:4e:49:a8:94:9a:1e:c0:c7:30:ec:0f:49:04:
         a0:11:36:60:97:3c:f4:03:02:05:d7:07:0f:5a:65:55:f7:2d:
         47:b3:a1:04:21:18:f0:12:72:dc:d4:7d:04:2f:d7:c0:1e:e6:
         b0:ed:43:e8:ff:41:16:26:09:70:96:2f:d3:4e:05:db:79:a1:
         f8:f2:db:60:76:e8:12:aa:e3:bc:3e:ba:12:35:11:6a:cb:59:
         26:62:ba:50:1e:7e:02:a1:b6:de:02:61:3b:a1:ec:0b:0a:63:
         4c:61:5c:12:03:0a:c8:b8:5e:61:95:a4:a1:4f:dd:90:3b:03:
         39:f1:f1:1a:19:ce:9f:e3:40:d4:bd:ee:1c:a3:74:e8:77:e0:
         e4:77:25:b9:c2:9e:57:ed:d2:8c:f5:76:02:cf:33:ed:b4:81:
         58:38:d9:31:b6:a6:de:5b:f3:e6:48:bc:ed:0d:26:92:0f:ac:
         9f:a3:5e:b6:cc:d9:e4:a7:d0:b4:eb:62:9c:a0:a6:c9:31:f1:
         96:e4:e3:ac:5b:97:d5:4a:3d:6a:5f:bf:cc:8b:fa:fd:4a:48:
         db:c6:f5:cd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYxzaO+1BUfaZgDHBCACa9mVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjE2MTYxNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTQ5YThiMTQ2ZTg5YTJkOTBkMGJkY2UzY2FiYmM1NmRhOWU1YzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA418pcYqPiLRwaGNLuYJJo+znF2aT
4XW/+92jAN0sh/kOqkixrwzOJJY7McX0ammuy4bwme+lvydhqWl+UzNZDdqq+bK7
stZKpy8LL4t0vkCn/1IEyOx9bz3iAHC8/Bv8z7Fbz/FgnDpnR3qNfbeHKpzFmiBD
jsWC179atEYlrczrpqIDuhnWbS0IdY/GRmurSPj8weTnHPuTKIZKBDvkj+Zt7j7j
proMn89+wdnpWp48lDnRqOOqskgIyuhEAWbW77soCPXEciRkmGpTQrPbpV76nm/z
oHKRG3Z23MQsQ0I8Q7aTgqHGEfEIMUhF6NX7NXR7Q0YXwxdYxqWlSQgIcQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBlJqLFG6JotkNC9zjyrvFbanlxzMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvR1Vtb3NVYm9taTJRMEwzT1BLdThWdHFlWEhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAXRFXRGtfdImQZhZI9o
opECgjJFzdyEZ3nkjgDKHNDEiIavZlGAuPGfTkmolJoewMcw7A9JBKARNmCXPPQD
AgXXBw9aZVX3LUezoQQhGPASctzUfQQv18Ae5rDtQ+j/QRYmCXCWL9NOBdt5ofjy
22B26BKq47w+uhI1EWrLWSZiulAefgKhtt4CYTuh7AsKY0xhXBIDCsi4XmGVpKFP
3ZA7Aznx8RoZzp/jQNS97hyjdOh34OR3JbnCnlft0oz1dgLPM+20gVg42TG2pt5b
8+ZIvO0NJpIPrJ+jXrbM2eSn0LTrYpygpskx8Zbk46xbl9VKPWpfv8yL+v1KSNvG
9c0=
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:57:53 2025 by rpki-client