Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e6OgoD8_T1sPa7yKfKmq7h6Oxjk.roa
File:                     e6OgoD8_T1sPa7yKfKmq7h6Oxjk.roa (raw, json)
Hash identifier:          Q2CoVGpJ3MqqEGK7tTb4sFut7Ge4PW74opzyhO0Es50=
Subject key identifier:   7B:A3:A0:A0:3F:3F:4F:5B:0F:6B:BC:8A:7C:A9:AA:EE:1E:8E:C6:39
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       68BFB6F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e6OgoD8_T1sPa7yKfKmq7h6Oxjk.roa
Signing time:             Mon 07 Feb 2022 19:04:20 +0000
ROA not before:           Mon 07 Feb 2022 19:04:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757394672 (0x68bfb6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb  7 19:04:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ba3a0a03f3f4f5b0f6bbc8a7ca9aaee1e8ec639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:3a:9b:75:58:b2:2d:fd:b3:15:1c:09:bd:
                    25:56:f5:22:45:c8:1d:59:0a:fc:88:70:ee:af:70:
                    5b:eb:ea:97:02:6c:64:15:f4:b3:a2:85:31:03:16:
                    76:25:11:3b:e9:af:12:0b:26:e1:79:29:5e:1b:f3:
                    5b:e3:bb:60:ad:8b:b4:fb:6f:47:c9:5b:de:aa:2d:
                    7f:7a:b1:7a:95:cf:c6:06:64:2c:dc:26:c8:64:fe:
                    ed:86:98:74:aa:45:8c:65:e4:83:7b:7d:bf:b8:4d:
                    26:a1:16:4e:c8:e4:1a:f1:20:55:0d:2d:53:df:96:
                    68:4b:ec:de:fb:72:0d:48:a7:53:e8:f3:92:35:ba:
                    9c:37:f7:e9:29:09:dd:71:e9:49:91:5a:4e:78:0b:
                    74:fb:7b:cb:ca:26:1b:98:a0:73:31:f3:47:cc:25:
                    14:9c:1e:cd:10:a8:95:0c:42:b5:31:85:4c:f9:c8:
                    dc:91:2c:44:c8:62:f4:c0:ba:66:aa:d3:b3:34:2b:
                    8e:4d:d1:0b:11:0d:e5:f5:46:8f:6e:a0:00:60:e3:
                    7e:03:c2:e8:b4:e4:ed:53:0c:f3:b1:53:ed:5b:d3:
                    3f:90:a2:12:c0:3a:87:db:72:99:ce:f5:7e:23:5e:
                    d5:90:de:95:a0:5a:b6:b1:e9:0d:40:9d:f4:90:75:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A3:A0:A0:3F:3F:4F:5B:0F:6B:BC:8A:7C:A9:AA:EE:1E:8E:C6:39
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e6OgoD8_T1sPa7yKfKmq7h6Oxjk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:2c:9e:59:a1:89:a5:c0:31:03:12:82:07:c1:5d:8a:72:4e:
         4c:70:c1:05:5c:d7:ac:e5:0a:e0:4b:5d:13:a3:2c:8c:de:22:
         e9:e0:8d:12:93:9b:0c:b1:08:67:5e:e3:ab:c9:9a:62:d5:26:
         f2:4b:28:af:14:02:56:a3:b2:9d:91:7a:e7:38:45:4d:07:da:
         6e:1d:75:0d:cd:3e:ac:c9:3c:a0:a9:26:7b:7f:5b:2b:63:62:
         94:83:a8:b1:30:6a:cc:f2:42:68:a8:dc:23:ae:e5:a3:7b:68:
         dd:9b:3e:5d:2f:4f:8b:2f:ce:56:66:fe:a3:98:c6:99:4d:0b:
         0a:2b:8a:12:c4:e9:4e:b3:20:83:a8:e8:e6:72:f4:11:ac:b4:
         d0:9e:6a:01:49:5c:f8:1b:01:f0:97:c2:0b:15:9e:7b:3e:04:
         90:91:09:7c:9b:16:a6:d6:d4:7f:2a:7d:93:ac:c6:b2:25:88:
         e5:ab:3a:54:0d:44:4d:70:d7:e1:0a:6a:c3:12:68:59:80:31:
         1a:43:81:4c:bb:3c:2b:40:00:eb:80:f0:96:37:28:2f:fd:d6:
         51:ca:30:6d:e0:3d:d9:ca:37:39:69:e9:35:35:32:52:b4:c7:
         81:5f:88:6b:15:52:b5:df:2a:08:da:f1:91:f2:a6:49:2d:c8:
         ed:68:8e:36
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaL+28DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
NzE5MDQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JhM2EwYTAzZjNm
NGY1YjBmNmJiYzhhN2NhOWFhZWUxZThlYzYzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKAoOpt1WLIt/bMVHAm9JVb1IkXIHVkK/Ihw7q9wW+vqlwJs
ZBX0s6KFMQMWdiURO+mvEgsm4XkpXhvzW+O7YK2LtPtvR8lb3qotf3qxepXPxgZk
LNwmyGT+7YaYdKpFjGXkg3t9v7hNJqEWTsjkGvEgVQ0tU9+WaEvs3vtyDUinU+jz
kjW6nDf36SkJ3XHpSZFaTngLdPt7y8omG5igczHzR8wlFJwezRColQxCtTGFTPnI
3JEsRMhi9MC6ZqrTszQrjk3RCxEN5fVGj26gAGDjfgPC6LTk7VMM87FT7VvTP5Ci
EsA6h9tymc71fiNe1ZDelaBatrHpDUCd9JB1YWsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR7o6CgPz9PWw9rvIp8qaruHo7GOTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2U2T2dvRDhfVDFzUGE3eUtmS21xN2g2T3hqay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAwLJ5ZoYmlwDEDEoIHwV2Kck5McMEFXNes5Qrg
S10ToyyM3iLp4I0Sk5sMsQhnXuOryZpi1SbySyivFAJWo7KdkXrnOEVNB9puHXUN
zT6syTygqSZ7f1srY2KUg6ixMGrM8kJoqNwjruWje2jdmz5dL0+LL85WZv6jmMaZ
TQsKK4oSxOlOsyCDqOjmcvQRrLTQnmoBSVz4GwHwl8ILFZ57PgSQkQl8mxam1tR/
Kn2TrMayJYjlqzpUDURNcNfhCmrDEmhZgDEaQ4FMuzwrQADrgPCWNygv/dZRyjBt
4D3Zyjc5aek1NTJStMeBX4hrFVK13yoI2vGR8qZJLcjtaI42
-----END CERTIFICATE-----
Generated at Thu May 1 19:15:18 2025 by rpki-client