Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fee_MNoCUgqBYj6V2mCjGHNomVI.roa
File:                     fee_MNoCUgqBYj6V2mCjGHNomVI.roa (raw, json)
Hash identifier:          qiWyXbFTKWzwhe4SwAtJhizI0zawQE+TAjcJa03vCCs=
Subject key identifier:   7D:E7:BF:30:DA:02:52:0A:81:62:3E:95:DA:60:A3:18:73:68:99:52
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       697655BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fee_MNoCUgqBYj6V2mCjGHNomVI.roa
Signing time:             Thu 10 Feb 2022 15:19:46 +0000
ROA not before:           Thu 10 Feb 2022 15:19:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
                          2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769362879 (0x697655bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 10 15:19:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7de7bf30da02520a81623e95da60a31873689952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:05:16:c3:c6:f6:cf:3e:74:8d:3f:68:af:87:
                    16:2d:8d:fb:79:ea:84:82:c9:7b:38:a6:26:0d:bb:
                    af:b2:78:f7:45:1b:ee:cf:bc:07:52:14:99:05:1a:
                    8b:ab:6a:ec:60:a8:82:2a:f8:df:10:65:17:54:6a:
                    03:dc:f9:f5:1f:28:ce:97:f6:12:1e:27:f6:d4:6d:
                    5d:9d:94:b3:d5:48:53:c7:07:c6:75:b6:50:7d:dd:
                    63:9b:cc:30:7c:f1:3d:eb:da:f4:c0:0b:78:e9:68:
                    21:53:47:55:2a:ca:6f:51:14:1b:b4:c8:77:00:fb:
                    d9:c1:84:b4:0e:77:ba:cc:02:0e:ba:88:ec:44:3e:
                    48:e2:85:ca:2f:d4:50:fa:03:c1:e9:e9:ea:09:7d:
                    28:45:8a:ac:dc:71:e3:94:dc:4a:ed:e9:22:73:15:
                    9d:fb:07:8f:36:de:8a:1d:ca:7c:76:eb:17:98:80:
                    45:4e:10:39:8a:88:2c:9a:c9:5e:b0:18:61:4f:66:
                    7f:e2:d3:09:af:e7:e3:e3:31:ee:0f:e3:a1:9f:b8:
                    c2:95:e8:0b:0e:77:2e:88:1d:ca:e8:86:39:1c:0f:
                    ae:8a:5d:30:cc:11:1b:d7:6c:53:eb:bb:a3:4b:80:
                    7b:7b:6e:fb:71:7c:fa:66:39:b9:be:66:cf:36:d1:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E7:BF:30:DA:02:52:0A:81:62:3E:95:DA:60:A3:18:73:68:99:52
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fee_MNoCUgqBYj6V2mCjGHNomVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:71:72:48:87:47:34:20:4e:18:d1:76:68:b9:d7:3e:74:57:
         b4:52:0a:77:69:e0:be:65:4c:a5:03:f9:f1:94:bb:91:87:b5:
         4f:e3:3e:53:ab:b8:89:d6:d9:81:86:79:bc:bd:c0:56:c5:d6:
         b9:3d:38:39:06:ef:de:7f:75:4c:bb:9a:95:1d:c4:3e:66:de:
         21:a6:06:80:af:2e:02:6d:87:de:e0:8d:dd:e3:44:1b:66:95:
         04:18:d9:a1:28:04:d0:dc:91:66:64:ce:42:f2:c5:5a:5d:92:
         2e:e5:f5:2c:2f:8e:c3:fe:c8:8e:af:ab:c0:ca:e1:82:35:e3:
         1d:96:f1:9e:05:47:83:fd:55:b2:40:db:bc:0b:05:5a:5c:fa:
         43:5d:02:a2:ca:d1:8d:68:08:78:0e:a5:bf:1d:ec:6e:02:25:
         83:a7:49:9e:2c:7a:ef:32:5d:3c:a2:14:d7:85:1c:5d:2c:74:
         b0:ce:19:67:45:76:61:aa:3d:53:70:fb:00:e0:bb:83:d1:fb:
         55:55:f5:71:26:3f:dc:df:bf:cd:90:83:b1:27:00:64:a4:86:
         80:1d:ce:83:b9:42:4c:9f:e0:21:31:53:8b:ae:3b:68:6c:ae:
         81:48:97:51:8f:6c:36:8d:58:82:44:75:a0:90:6f:06:76:34:
         d7:0a:66:5b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaXZVvzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
MDE1MTk0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2RlN2JmMzBkYTAy
NTIwYTgxNjIzZTk1ZGE2MGEzMTg3MzY4OTk1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPcFFsPG9s8+dI0/aK+HFi2N+3nqhILJezimJg27r7J490Ub
7s+8B1IUmQUai6tq7GCogir43xBlF1RqA9z59R8ozpf2Eh4n9tRtXZ2Us9VIU8cH
xnW2UH3dY5vMMHzxPeva9MALeOloIVNHVSrKb1EUG7TIdwD72cGEtA53uswCDrqI
7EQ+SOKFyi/UUPoDwenp6gl9KEWKrNxx45TcSu3pInMVnfsHjzbeih3KfHbrF5iA
RU4QOYqILJrJXrAYYU9mf+LTCa/n4+Mx7g/joZ+4wpXoCw53LogdyuiGORwPropd
MMwRG9dsU+u7o0uAe3tu+3F8+mY5ub5mzzbRuqkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR9578w2gJSCoFiPpXaYKMYc2iZUjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2ZlZV9NTm9DVWdxQllqNlYybUNqR0hOb21WSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAncXJIh0c0IE4Y0XZoudc+dFe0Ugp3aeC+ZUyl
A/nxlLuRh7VP4z5Tq7iJ1tmBhnm8vcBWxda5PTg5Bu/ef3VMu5qVHcQ+Zt4hpgaA
ry4CbYfe4I3d40QbZpUEGNmhKATQ3JFmZM5C8sVaXZIu5fUsL47D/siOr6vAyuGC
NeMdlvGeBUeD/VWyQNu8CwVaXPpDXQKiytGNaAh4DqW/HexuAiWDp0meLHrvMl08
ohTXhRxdLHSwzhlnRXZhqj1TcPsA4LuD0ftVVfVxJj/c37/NkIOxJwBkpIaAHc6D
uUJMn+AhMVOLrjtobK6BSJdRj2w2jViCRHWgkG8GdjTXCmZb
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:15 2025 by rpki-client