Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QrsxRguBxRzW5HPNn-GsfCn1Ieo.roa
File:                     QrsxRguBxRzW5HPNn-GsfCn1Ieo.roa (raw, json)
Hash identifier:          ZcZLuBA53CYQRYe7b26FV5iFXVAhnzejcKyTZSXOiR8=
Subject key identifier:   42:BB:31:46:0B:81:C5:1C:D6:E4:73:CD:9F:E1:AC:7C:29:F5:21:EA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01840785606CC53562D7A64D656D693C6CE8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QrsxRguBxRzW5HPNn-GsfCn1Ieo.roa
Signing time:             Mon 24 Oct 2022 01:04:52 +0000
ROA not before:           Mon 24 Oct 2022 01:04:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:184:784:f6c7/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:07:85:60:6c:c5:35:62:d7:a6:4d:65:6d:69:3c:6c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Oct 24 01:04:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=42bb31460b81c51cd6e473cd9fe1ac7c29f521ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:2c:88:4f:ea:0b:86:41:4f:3b:b0:a9:89:
                    65:64:1e:f8:5a:42:c4:cb:86:6b:c9:a4:29:d1:6d:
                    9a:61:b7:77:d5:31:0d:ed:78:8e:83:e4:51:90:6a:
                    09:3b:32:25:59:a6:21:b3:19:9e:2b:0f:a0:68:35:
                    41:8b:48:39:fc:ef:57:d4:70:a0:18:9c:56:c8:7a:
                    b7:ce:59:92:92:e8:d1:17:8a:ed:99:e0:61:2e:4b:
                    d8:61:cd:c2:1b:8b:31:9c:96:fc:49:1e:a4:5e:b4:
                    78:94:a7:e2:8d:ad:fb:0b:8f:ac:72:c4:e6:47:03:
                    3c:1b:ad:29:a3:17:44:85:c8:c7:36:0c:20:e4:3e:
                    ab:0c:4d:1e:f7:05:25:fc:1a:49:0e:fc:d7:5a:66:
                    b1:2e:1f:9a:f6:ad:d4:d4:cf:ed:51:17:2a:c2:7a:
                    ce:a0:cf:3a:da:4d:52:58:47:31:70:fe:f0:f1:84:
                    c8:31:90:e8:7d:21:3b:58:8b:2e:19:03:73:2b:38:
                    8e:3d:e4:77:41:ed:89:0d:95:82:cc:93:2a:eb:82:
                    6c:6b:90:29:5b:20:fa:47:cc:df:7d:e5:9b:e3:16:
                    92:fd:07:f2:18:0d:c4:b7:2c:09:dc:bf:3f:cf:74:
                    0d:73:91:e0:ff:68:96:b4:c3:36:2a:f2:41:d9:8a:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BB:31:46:0B:81:C5:1C:D6:E4:73:CD:9F:E1:AC:7C:29:F5:21:EA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QrsxRguBxRzW5HPNn-GsfCn1Ieo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:59:1a:22:11:14:10:29:c7:53:48:ee:dd:10:4e:a9:bd:9e:
         01:a8:ce:c5:7b:69:62:a7:4d:9b:5e:18:5f:84:2b:0f:86:1b:
         7e:42:5b:68:5d:e5:73:f1:4c:ca:3f:00:8a:e1:7b:15:b3:f5:
         a6:4b:15:22:40:4a:d2:be:56:e2:08:ff:53:a9:24:bb:4f:5c:
         1b:ce:1a:33:84:4c:ef:fb:d5:17:67:06:23:84:9e:0f:6e:9a:
         bd:d6:01:d5:64:ec:9f:bd:42:ba:0e:35:fc:79:1a:9c:e7:a4:
         ff:91:1a:3e:ba:2c:c2:38:bc:da:63:e1:4f:37:9f:a6:a6:0c:
         f4:61:ac:98:4e:de:df:50:cd:d5:a3:0a:7c:a5:27:6a:60:2e:
         b1:0a:cc:64:98:e7:ac:df:05:c2:6d:7a:93:65:f1:b7:99:89:
         74:e6:cb:65:19:d0:1e:56:a8:e5:a8:21:fb:3b:8d:b0:c8:c6:
         46:44:9a:b1:2e:a7:66:d2:0f:a4:b2:59:82:01:b7:42:c0:c4:
         a2:e7:6f:c1:ad:b9:5d:4d:86:fa:f8:ef:22:2e:a5:eb:e9:b5:
         ea:e0:14:a7:5e:80:e2:53:b6:a2:a9:14:08:74:7a:e5:6a:33:
         ac:a9:f3:3b:f7:8e:a3:77:0d:7d:d1:0f:ac:79:b9:e6:d8:8f:
         b8:dc:d9:f8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQHhWBsxTVi16ZNZW1pPGzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDI0MDEwNDUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmJiMzE0NjBiODFjNTFjZDZlNDczY2Q5ZmUxYWM3YzI5ZjUyMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK8siE/qC4ZBTzuwqYllZB74WkLE
y4ZryaQp0W2aYbd31TEN7XiOg+RRkGoJOzIlWaYhsxmeKw+gaDVBi0g5/O9X1HCg
GJxWyHq3zlmSkujRF4rtmeBhLkvYYc3CG4sxnJb8SR6kXrR4lKfija37C4+scsTm
RwM8G60poxdEhcjHNgwg5D6rDE0e9wUl/BpJDvzXWmaxLh+a9q3U1M/tURcqwnrO
oM862k1SWEcxcP7w8YTIMZDofSE7WIsuGQNzKziOPeR3Qe2JDZWCzJMq64Jsa5Ap
WyD6R8zffeWb4xaS/QfyGA3EtywJ3L8/z3QNc5Hg/2iWtMM2KvJB2YqsGwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEK7MUYLgcUc1uRzzZ/hrHwp9SHqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUXJzeFJndUJ4UnpXNUhQTm4tR3NmQ24xSWVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGpZGiIRFBApx1NI7t0Q
Tqm9ngGozsV7aWKnTZteGF+EKw+GG35CW2hd5XPxTMo/AIrhexWz9aZLFSJAStK+
VuII/1OpJLtPXBvOGjOETO/71RdnBiOEng9umr3WAdVk7J+9QroONfx5GpznpP+R
Gj66LMI4vNpj4U83n6amDPRhrJhO3t9QzdWjCnylJ2pgLrEKzGSY56zfBcJtepNl
8beZiXTmy2UZ0B5WqOWoIfs7jbDIxkZEmrEup2bSD6SyWYIBt0LAxKLnb8GtuV1N
hvr47yIupevptergFKdegOJTtqKpFAh0euVqM6yp8zv3jqN3DX3RD6x5uebYj7jc
2fg=
-----END CERTIFICATE-----
Generated at Fri May 2 00:40:15 2025 by rpki-client