Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Nvkf-Gqw1s2mdQnDk3BUUYI2t8.roa
File:                     6Nvkf-Gqw1s2mdQnDk3BUUYI2t8.roa (raw, json)
Hash identifier:          3SeuyPZfRpRQPQrQ+yY1zxfQGrU7yUBQfbXJZCeHy9I=
Subject key identifier:   E8:DB:E4:7F:E1:AA:C3:5B:36:99:D4:27:0E:4D:C1:51:46:08:DA:DF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       69307DD5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Nvkf-Gqw1s2mdQnDk3BUUYI2t8.roa
Signing time:             Wed 09 Feb 2022 16:16:36 +0000
ROA not before:           Wed 09 Feb 2022 16:16:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764785621 (0x69307dd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb  9 16:16:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8dbe47fe1aac35b3699d4270e4dc1514608dadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:11:73:bf:fa:12:96:e1:9b:27:72:c0:4c:
                    33:37:0f:a4:1b:91:68:8d:94:89:0c:73:2a:ce:a7:
                    f8:ab:29:87:66:30:e6:61:41:0a:a6:9a:e8:c4:c8:
                    6f:88:3e:de:23:0e:49:37:b4:2c:70:63:09:a0:4d:
                    e3:09:b8:fb:7a:2f:4b:77:2c:50:17:5d:8c:2d:6b:
                    43:ca:0c:34:38:b2:99:8b:95:73:da:c0:4e:41:05:
                    d4:5a:a9:18:62:a8:98:f3:d1:4c:93:43:b6:5c:5e:
                    15:02:ab:f5:c6:19:23:ea:ec:f3:73:c3:1e:73:b1:
                    53:75:91:49:ee:a2:e5:01:ad:c5:16:4b:15:20:ce:
                    f8:d4:57:a8:b3:8a:3f:d1:8e:c6:95:04:bb:d8:73:
                    53:b4:eb:39:5b:bf:83:04:8c:74:e2:95:b3:08:45:
                    75:81:cc:41:f8:02:ca:88:ad:6d:16:91:f8:b1:66:
                    a1:0d:3c:b6:b9:00:dd:86:e1:44:7d:65:64:c6:0f:
                    96:5a:56:95:0f:e6:5e:cc:57:61:5a:b4:85:56:cb:
                    2c:58:5d:7f:18:3a:bc:1b:19:1e:2a:ec:46:8a:c6:
                    91:64:92:48:61:e0:e1:6a:a2:2c:a7:25:f7:86:17:
                    f8:ee:62:e6:90:34:d6:a3:52:c7:e4:fe:96:59:bc:
                    70:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DB:E4:7F:E1:AA:C3:5B:36:99:D4:27:0E:4D:C1:51:46:08:DA:DF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6Nvkf-Gqw1s2mdQnDk3BUUYI2t8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:78:37:98:f2:85:eb:e0:17:37:28:88:85:05:1f:bc:97:
         f3:1d:6a:32:85:97:48:3d:7a:13:8b:e2:39:a8:16:33:6a:68:
         06:63:84:14:d2:8d:bb:2b:c1:34:72:d4:5b:7e:3f:40:11:74:
         31:04:1b:7d:18:48:b3:6f:3d:2d:ea:6f:0c:5f:eb:94:7c:10:
         c7:59:5a:25:cc:48:2d:28:db:6e:4d:4f:47:0d:81:92:cb:90:
         74:5c:0d:70:7e:85:ac:ff:f7:1b:ff:e2:39:8b:9d:56:52:57:
         2e:05:5d:90:3f:31:9e:e3:37:54:eb:f6:ba:c4:28:d7:e4:65:
         47:54:79:d1:6e:1b:e3:7f:d6:0b:ae:bf:b6:77:2a:7d:d7:9c:
         3d:56:dd:e3:18:d6:ee:b6:51:f8:e7:4b:1d:3d:7d:84:3b:b0:
         6a:ee:13:14:88:8f:ca:e9:a5:7e:51:fb:f4:ae:50:d5:3b:bc:
         c5:66:44:9e:d7:a0:c8:a4:9c:b1:1c:2f:29:a2:2e:f6:3b:4c:
         76:f5:50:24:bc:4b:a7:76:8a:d3:51:43:13:7a:bc:c4:d2:d1:
         04:cd:07:1c:27:ab:b6:37:9c:41:58:5c:59:dc:8b:51:82:e9:
         a8:c4:3e:76:3b:19:98:c1:3c:63:31:9d:66:7f:1e:ad:85:9a:
         17:c9:85:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaTB91TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
OTE2MTYzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZThkYmU0N2ZlMWFh
YzM1YjM2OTlkNDI3MGU0ZGMxNTE0NjA4ZGFkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANaeEXO/+hKW4ZsncsBMMzcPpBuRaI2UiQxzKs6n+Ksph2Yw
5mFBCqaa6MTIb4g+3iMOSTe0LHBjCaBN4wm4+3ovS3csUBddjC1rQ8oMNDiymYuV
c9rATkEF1FqpGGKomPPRTJNDtlxeFQKr9cYZI+rs83PDHnOxU3WRSe6i5QGtxRZL
FSDO+NRXqLOKP9GOxpUEu9hzU7TrOVu/gwSMdOKVswhFdYHMQfgCyoitbRaR+LFm
oQ08trkA3YbhRH1lZMYPllpWlQ/mXsxXYVq0hVbLLFhdfxg6vBsZHirsRorGkWSS
SGHg4WqiLKcl94YX+O5i5pA01qNSx+T+llm8cBMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTo2+R/4arDWzaZ1CcOTcFRRgja3zAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzZOdmtmLUdxdzFzMm1kUW5EazNCVVVZSTJ0OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQA2O3g3mPKF6+AXNyiIhQUfvJfzHWoyhZdIPXoT
i+I5qBYzamgGY4QU0o27K8E0ctRbfj9AEXQxBBt9GEizbz0t6m8MX+uUfBDHWVol
zEgtKNtuTU9HDYGSy5B0XA1wfoWs//cb/+I5i51WUlcuBV2QPzGe4zdU6/a6xCjX
5GVHVHnRbhvjf9YLrr+2dyp915w9Vt3jGNbutlH450sdPX2EO7Bq7hMUiI/K6aV+
Ufv0rlDVO7zFZkSe16DIpJyxHC8poi72O0x29VAkvEundorTUUMTerzE0tEEzQcc
J6u2N5xBWFxZ3ItRgumoxD52OxmYwTxjMZ1mfx6thZoXyYUj
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:46 2025 by rpki-client