Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wui6Vvv1s5lYpX73Iho9nVFAQb8.roa
File:                     Wui6Vvv1s5lYpX73Iho9nVFAQb8.roa (raw, json)
Hash identifier:          JjTGYndgJqPREZc7VUmF8uad1qt0juX9mYI/qA7FxCA=
Subject key identifier:   5A:E8:BA:56:FB:F5:B3:99:58:A5:7E:F7:22:1A:3D:9D:51:40:41:BF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01883422F0202F14FDD8FB39DBF58F800AA8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wui6Vvv1s5lYpX73Iho9nVFAQb8.roa
Signing time:             Fri 19 May 2023 13:11:24 +0000
ROA not before:           Fri 19 May 2023 13:11:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:34:22:f0:20:2f:14:fd:d8:fb:39:db:f5:8f:80:0a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 19 13:11:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ae8ba56fbf5b39958a57ef7221a3d9d514041bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:f0:ed:fb:7b:b9:13:85:84:cb:fb:c2:cd:
                    7b:90:d0:c7:a4:5a:fc:0e:b0:7e:ea:63:6e:19:06:
                    de:33:02:33:b1:f2:18:a3:62:50:ab:f9:9d:e6:77:
                    c3:d6:31:90:34:fa:3a:d4:9d:9a:df:42:9e:09:68:
                    3a:71:6e:71:a2:a6:15:e3:3e:d7:9f:31:2b:8b:66:
                    8a:13:65:0b:22:c7:8d:5b:b0:c7:f5:77:fb:d5:73:
                    c8:db:bd:57:78:56:a0:e1:20:03:f1:21:5c:63:68:
                    a8:50:f6:e6:2e:21:62:80:5a:55:0f:30:bb:27:fc:
                    2c:0b:63:ee:78:45:34:3b:25:4f:8f:82:01:00:dd:
                    69:36:0b:78:cf:90:7c:59:dc:d5:2d:8e:0a:6f:5d:
                    35:3f:a1:83:f9:74:a5:ad:0b:16:bb:97:d2:ca:c3:
                    87:f8:89:60:50:8c:44:1e:ff:28:e8:b2:f3:df:ed:
                    15:aa:25:e7:79:c6:bd:a1:c8:2d:5b:f4:08:11:a3:
                    46:aa:19:c1:b6:63:57:f3:4c:ff:8c:53:f0:96:79:
                    25:14:cc:d7:6f:04:21:6e:b7:31:cb:18:19:c9:12:
                    1f:e8:a6:ce:5f:81:8b:59:81:2b:1d:c7:48:0b:f4:
                    ba:5b:70:13:68:45:71:98:49:db:c4:c2:8a:46:b5:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E8:BA:56:FB:F5:B3:99:58:A5:7E:F7:22:1A:3D:9D:51:40:41:BF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Wui6Vvv1s5lYpX73Iho9nVFAQb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:7f:01:21:5c:61:20:92:06:20:6b:9a:4f:cc:69:9c:31:b1:
         f9:7b:ef:2e:68:44:31:5f:b2:a2:7a:0a:c9:d7:75:4b:fe:53:
         a9:3c:32:e0:3f:55:48:c4:6c:1f:df:48:a6:51:c9:46:35:e8:
         b0:04:e0:02:2c:9a:f9:15:27:47:21:95:01:26:61:8f:7c:9f:
         b0:4a:16:de:09:7b:b7:bc:33:9a:5f:c4:e3:dd:cd:85:d8:12:
         2b:af:e6:12:cf:d4:d2:ac:31:c5:6a:ee:b2:b1:57:43:1b:70:
         67:1e:d0:87:15:9a:42:e0:e3:0f:f0:e5:e7:94:31:4d:68:5d:
         5a:cb:04:0a:4b:38:94:49:bd:a2:d2:2b:8c:24:2a:39:d3:7a:
         41:9d:11:bf:10:05:0e:40:18:07:ce:2c:8a:c8:b6:c9:91:21:
         60:b3:77:61:87:df:d1:69:2e:f6:51:92:7f:84:a9:75:77:fb:
         16:e8:35:de:11:b9:ff:45:ee:a3:0b:57:47:70:dc:b2:8f:62:
         3c:22:55:e2:60:7b:08:14:54:b7:1e:f4:db:c8:9d:60:c0:cc:
         33:27:67:0f:fa:38:8d:4e:27:a8:1d:24:5c:9f:a2:b8:f1:02:
         51:53:80:28:73:9b:bc:e0:36:ac:1e:16:14:30:4f:bf:2f:96:
         0e:55:f7:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYg0IvAgLxT92Ps52/WPgAqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE5MTMxMTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWU4YmE1NmZiZjViMzk5NThhNTdlZjcyMjFhM2Q5ZDUxNDA0MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb3w7ft7uROFhMv7ws17kNDHpFr8
DrB+6mNuGQbeMwIzsfIYo2JQq/md5nfD1jGQNPo61J2a30KeCWg6cW5xoqYV4z7X
nzEri2aKE2ULIseNW7DH9Xf71XPI271XeFag4SAD8SFcY2ioUPbmLiFigFpVDzC7
J/wsC2PueEU0OyVPj4IBAN1pNgt4z5B8WdzVLY4Kb101P6GD+XSlrQsWu5fSysOH
+IlgUIxEHv8o6LLz3+0VqiXneca9ocgtW/QIEaNGqhnBtmNX80z/jFPwlnklFMzX
bwQhbrcxyxgZyRIf6KbOX4GLWYErHcdIC/S6W3ATaEVxmEnbxMKKRrXtZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFroulb79bOZWKV+9yIaPZ1RQEG/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvV3VpNlZ2djFzNWxZcFg3M0lobzluVkZBUWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGh/ASFcYSCSBiBrmk/M
aZwxsfl77y5oRDFfsqJ6CsnXdUv+U6k8MuA/VUjEbB/fSKZRyUY16LAE4AIsmvkV
J0chlQEmYY98n7BKFt4Je7e8M5pfxOPdzYXYEiuv5hLP1NKsMcVq7rKxV0MbcGce
0IcVmkLg4w/w5eeUMU1oXVrLBApLOJRJvaLSK4wkKjnTekGdEb8QBQ5AGAfOLIrI
tsmRIWCzd2GH39FpLvZRkn+EqXV3+xboNd4Ruf9F7qMLV0dw3LKPYjwiVeJgewgU
VLce9NvInWDAzDMnZw/6OI1OJ6gdJFyforjxAlFTgChzm7zgNqweFhQwT78vlg5V
93U=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:55 2025 by rpki-client