Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MGOorC4ktskGId9KX0CEonGblI.roa
File:                     0MGOorC4ktskGId9KX0CEonGblI.roa (raw, json)
Hash identifier:          BSmHhES7Dtddc0aAvR52D0+ditMxVG05RTbovOLVHSI=
Subject key identifier:   D0:C1:8E:A2:B0:B8:92:DB:24:18:87:7D:29:7D:02:12:89:C6:6E:52
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       79BDB40A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MGOorC4ktskGId9KX0CEonGblI.roa
Signing time:             Sat 09 Apr 2022 04:09:44 +0000
ROA not before:           Sat 09 Apr 2022 04:09:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042475530 (0x79bdb40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  9 04:09:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0c18ea2b0b892db2418877d297d021289c66e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:de:c2:66:cb:92:53:58:b7:ef:cf:32:c1:
                    04:ef:1d:83:af:89:e2:e1:91:c8:fa:d6:c2:13:be:
                    4c:3c:f1:dd:b3:3d:cb:ea:cf:03:be:5e:da:8a:f2:
                    b6:17:18:d3:ae:90:3b:2a:f2:9d:32:e6:3f:b9:13:
                    1c:19:b1:94:ca:f6:01:b6:88:03:2a:41:ab:dd:55:
                    6f:de:05:a8:2f:4d:75:09:e4:da:94:6a:f2:f2:ee:
                    d3:04:b3:6a:33:2c:5f:54:d8:bc:5e:a0:85:af:b7:
                    04:52:60:3e:24:1f:25:a5:57:15:05:49:91:7d:b4:
                    ea:d5:f1:8f:ed:0d:fa:8c:71:05:a6:60:3b:2d:27:
                    a0:70:28:55:d4:38:75:d4:1b:ba:04:99:64:af:e8:
                    ae:f2:dd:c2:42:d2:13:7a:a9:3b:57:49:10:1b:f0:
                    49:07:16:48:e2:e9:f9:7e:1f:4a:84:2b:47:e1:b9:
                    71:50:cf:26:31:54:81:d1:f1:d5:9f:06:ea:dd:ec:
                    21:58:9f:cf:e2:62:f9:3f:7f:a5:b4:77:a1:90:92:
                    aa:48:0f:1f:3a:9d:d6:44:60:57:b5:9b:71:14:0b:
                    72:80:8a:46:04:06:73:ef:7d:fb:4e:b6:fc:0b:a6:
                    87:43:12:90:5f:f2:87:93:79:40:4a:5d:cd:ce:8c:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C1:8E:A2:B0:B8:92:DB:24:18:87:7D:29:7D:02:12:89:C6:6E:52
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0MGOorC4ktskGId9KX0CEonGblI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:98:ba:2a:ef:69:04:d8:74:a6:3b:40:ea:4c:d1:cc:fa:63:
         b4:89:06:ba:f5:ed:30:36:8e:29:5d:29:c1:1c:e6:41:e5:0f:
         0c:ec:9b:da:d6:bf:13:68:57:13:a3:85:f0:52:38:53:27:7e:
         ae:cb:c0:96:fa:db:55:53:6f:67:b4:05:1e:65:2b:16:5d:2b:
         df:95:84:55:31:3f:20:ac:16:c3:86:08:e3:7d:9c:ab:66:01:
         c6:4b:02:f6:d0:c1:40:3d:7c:02:6c:2c:ef:07:0a:bd:b6:d1:
         3e:7b:49:be:a0:ec:35:6e:3c:ea:fc:99:a0:02:31:db:98:e4:
         d9:3c:e4:b6:47:24:98:26:36:d7:a9:8d:d1:d3:51:a0:67:4f:
         97:41:5e:b5:f4:ba:df:95:83:4f:39:76:c0:be:61:39:06:e1:
         e1:46:b7:bf:8e:d5:eb:45:79:28:c4:2d:1e:e8:32:7b:ec:51:
         d7:62:8d:25:02:ee:f4:98:5f:91:b0:b1:46:90:21:20:9f:da:
         06:14:0e:3a:8d:ba:1a:64:1b:3c:bf:e6:c1:d6:aa:2e:65:8a:
         c7:fa:ca:31:4b:3c:5b:64:f7:83:8d:d0:1a:e1:a7:e6:33:73:
         f4:f9:5b:2c:52:cc:a1:24:a6:ad:30:22:5c:95:70:a4:5d:44:
         ea:ef:80:49
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEeb20CjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQw
OTA0MDk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDBjMThlYTJiMGI4
OTJkYjI0MTg4NzdkMjk3ZDAyMTI4OWM2NmU1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJkq3sJmy5JTWLfvzzLBBO8dg6+J4uGRyPrWwhO+TDzx3bM9
y+rPA75e2orythcY066QOyrynTLmP7kTHBmxlMr2AbaIAypBq91Vb94FqC9NdQnk
2pRq8vLu0wSzajMsX1TYvF6gha+3BFJgPiQfJaVXFQVJkX206tXxj+0N+oxxBaZg
Oy0noHAoVdQ4ddQbugSZZK/orvLdwkLSE3qpO1dJEBvwSQcWSOLp+X4fSoQrR+G5
cVDPJjFUgdHx1Z8G6t3sIVifz+Ji+T9/pbR3oZCSqkgPHzqd1kRgV7WbcRQLcoCK
RgQGc+99+062/Aumh0MSkF/yh5N5QEpdzc6MqqECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTQwY6isLiS2yQYh30pfQISicZuUjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzBNR09vckM0a3Rza0dJZDlLWDBDRW9uR2JsSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCvmLoq72kE2HSmO0DqTNHM+mO0iQa69e0wNo4p
XSnBHOZB5Q8M7Jva1r8TaFcTo4XwUjhTJ36uy8CW+ttVU29ntAUeZSsWXSvflYRV
MT8grBbDhgjjfZyrZgHGSwL20MFAPXwCbCzvBwq9ttE+e0m+oOw1bjzq/JmgAjHb
mOTZPOS2RySYJjbXqY3R01GgZ0+XQV619LrflYNPOXbAvmE5BuHhRre/jtXrRXko
xC0e6DJ77FHXYo0lAu70mF+RsLFGkCEgn9oGFA46jboaZBs8v+bB1qouZYrH+sox
SzxbZPeDjdAa4afmM3P0+VssUsyhJKatMCJclXCkXUTq74BJ
-----END CERTIFICATE-----
Generated at Fri May 2 00:24:46 2025 by rpki-client