Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/58fM88_V-snY7d6XIcCNBzwOv2o.roa
File:                     58fM88_V-snY7d6XIcCNBzwOv2o.roa (raw, json)
Hash identifier:          tXoiIyM1oUFuxwiPZ/OahyPx9kExf62crTWovccZeso=
Subject key identifier:   E7:C7:CC:F3:CF:D5:FA:C9:D8:ED:DE:97:21:C0:8D:07:3C:0E:BF:6A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189BBF75DD629F783CBD11AC88A5EB94790
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/58fM88_V-snY7d6XIcCNBzwOv2o.roa
Signing time:             Thu 03 Aug 2023 15:14:57 +0000
ROA not before:           Thu 03 Aug 2023 15:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bb:f7:5d:d6:29:f7:83:cb:d1:1a:c8:8a:5e:b9:47:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Aug  3 15:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7c7ccf3cfd5fac9d8edde9721c08d073c0ebf6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:37:96:9d:44:23:c4:ed:17:a2:fc:8a:02:
                    f9:12:e7:b7:06:45:56:5e:19:21:d7:b4:4e:2b:60:
                    b8:42:23:d3:2d:a3:1c:5a:3f:7a:0d:b0:8a:9f:2a:
                    c6:15:10:86:ca:f3:b7:8e:54:f0:f9:da:f6:59:bc:
                    ac:2e:4c:13:ca:2c:e6:5e:72:17:7d:70:d5:f0:18:
                    33:5f:bb:55:ca:ac:cd:db:9c:ae:9a:f9:45:6f:c8:
                    e4:74:c7:7c:28:29:38:c2:e7:6e:3e:36:ce:de:65:
                    7f:90:60:61:87:d0:32:de:7a:63:cc:b6:0e:39:14:
                    6c:69:c8:6d:8b:52:a7:cc:f4:01:6e:92:c0:98:77:
                    cb:39:51:eb:da:39:6d:8b:a7:e5:91:18:10:af:9a:
                    65:fb:64:56:68:8f:9e:fc:76:0e:5e:54:31:57:43:
                    f1:c7:ec:de:21:d5:a1:98:68:54:00:72:70:55:0f:
                    8f:41:75:1a:5a:7a:55:02:13:f2:14:c8:d0:65:9b:
                    60:c7:c9:93:e9:49:c7:21:27:f7:45:d3:24:da:28:
                    ea:3e:9a:3a:b2:88:18:e6:38:6a:85:2e:fe:8a:2d:
                    31:03:80:24:4d:7a:9a:b1:09:ad:e1:0e:ca:09:6f:
                    a2:73:c2:23:f3:a0:aa:23:44:5b:0b:74:dd:61:1d:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C7:CC:F3:CF:D5:FA:C9:D8:ED:DE:97:21:C0:8D:07:3C:0E:BF:6A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/58fM88_V-snY7d6XIcCNBzwOv2o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:30:39:e2:a9:82:73:10:ed:41:87:2e:3a:b1:a1:e3:36:89:
         62:9d:37:af:25:56:16:c4:6e:ab:f1:66:29:8a:2b:26:c4:02:
         ea:cc:e4:32:0c:e9:b4:a9:a5:98:aa:8b:31:d4:64:a9:ff:27:
         18:46:47:96:22:9f:c0:b1:13:fe:d2:36:2b:40:77:42:0d:ea:
         3a:dc:c0:f1:97:f8:63:79:a2:e6:29:00:06:72:a4:f7:19:6d:
         33:0a:1c:f4:1e:eb:4b:4b:99:90:94:fb:28:e7:c2:f5:0b:e1:
         3c:d6:86:a8:02:9a:27:33:87:58:08:11:cd:01:a6:05:96:79:
         6b:65:9d:c2:7c:a8:1c:ee:5d:79:60:30:8b:5e:92:e7:38:be:
         de:84:db:03:82:14:42:da:3e:92:65:84:56:9d:eb:ac:52:e9:
         5d:5e:0c:c4:47:1d:64:c9:25:ca:de:77:bf:04:d6:db:7e:6d:
         2a:ed:23:78:23:27:8e:78:7a:0c:3a:a4:a9:95:ed:59:98:8e:
         b3:1c:e6:c5:ac:4c:81:be:47:75:fe:e4:61:23:04:fc:34:bb:
         83:b8:5c:6c:81:33:fe:ba:7a:41:48:e5:db:1f:38:bb:57:9a:
         ed:3c:13:9e:80:0f:6e:38:35:dd:9b:a5:26:b1:76:bf:c5:8e:
         96:43:cd:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYm7913WKfeDy9EayIpeuUeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAzMTUxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2M3Y2NmM2NmZDVmYWM5ZDhlZGRlOTcyMWMwOGQwNzNjMGViZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxo3lp1EI8TtF6L8igL5Eue3BkVW
Xhkh17ROK2C4QiPTLaMcWj96DbCKnyrGFRCGyvO3jlTw+dr2WbysLkwTyizmXnIX
fXDV8BgzX7tVyqzN25yumvlFb8jkdMd8KCk4wuduPjbO3mV/kGBhh9Ay3npjzLYO
ORRsachti1KnzPQBbpLAmHfLOVHr2jlti6flkRgQr5pl+2RWaI+e/HYOXlQxV0Px
x+zeIdWhmGhUAHJwVQ+PQXUaWnpVAhPyFMjQZZtgx8mT6UnHISf3RdMk2ijqPpo6
sogY5jhqhS7+ii0xA4AkTXqasQmt4Q7KCW+ic8Ij86CqI0RbC3TdYR3UCQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOfHzPPP1frJ2O3elyHAjQc8Dr9qMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNThmTTg4X1Ytc25ZN2Q2WEljQ05CendPdjJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJowOeKpgnMQ7UGHLjqx
oeM2iWKdN68lVhbEbqvxZimKKybEAurM5DIM6bSppZiqizHUZKn/JxhGR5Yin8Cx
E/7SNitAd0IN6jrcwPGX+GN5ouYpAAZypPcZbTMKHPQe60tLmZCU+yjnwvUL4TzW
hqgCmiczh1gIEc0BpgWWeWtlncJ8qBzuXXlgMItekuc4vt6E2wOCFELaPpJlhFad
66xS6V1eDMRHHWTJJcred78E1tt+bSrtI3gjJ454egw6pKmV7VmYjrMc5sWsTIG+
R3X+5GEjBPw0u4O4XGyBM/66ekFI5dsfOLtXmu08E56AD244Nd2bpSaxdr/FjpZD
zf4=
-----END CERTIFICATE-----
Generated at Fri May 2 06:05:51 2025 by rpki-client