Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/1-PYFQI0iPdE1VdpShnq5LgP72KI.roa
File:                     1-PYFQI0iPdE1VdpShnq5LgP72KI.roa (raw, json)
Hash identifier:          fs4Het9FGoDiN0b40G/zeRP12Oo4Kh2G66R/hMI3N4M=
Subject key identifier:   F8:F6:05:40:8D:22:3D:D1:35:55:DA:52:86:7A:B9:2E:03:FB:D8:A2
Certificate issuer:       /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial:       01830E794FA0552385E2E8B92B8F8EC045E9
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/1-PYFQI0iPdE1VdpShnq5LgP72KI.roa
Signing time:             Mon 05 Sep 2022 16:26:14 +0000
ROA not before:           Mon 05 Sep 2022 16:26:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        89.40.161.0/24 maxlen: 24
                          89.39.242.0/24 maxlen: 24
                          93.113.213.0/24 maxlen: 24
                          89.40.35.0/24 maxlen: 24
                          185.170.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0e:79:4f:a0:55:23:85:e2:e8:b9:2b:8f:8e:c0:45:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
        Validity
            Not Before: Sep  5 16:26:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8f605408d223dd13555da52867ab92e03fbd8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:a8:2e:5b:68:b2:6a:28:0b:4a:5c:6b:45:
                    b7:b0:6d:90:a6:9f:ec:61:56:a6:7f:56:f6:b7:5d:
                    d3:b3:d4:d0:25:60:c7:0c:0c:08:6f:fa:c1:65:fc:
                    53:cf:5b:41:a5:af:23:56:f5:da:7f:a9:0f:d1:a4:
                    7f:f0:8c:e6:1e:0e:2e:98:41:ee:d6:87:51:be:1c:
                    f6:bf:92:46:8d:7c:df:3a:c3:f7:a4:a5:56:bf:de:
                    7e:cf:2f:44:b6:08:0f:26:b1:45:fa:33:37:16:20:
                    d5:88:03:b0:c7:75:d2:54:7b:98:2c:76:dd:41:94:
                    5b:c2:2a:9f:8a:52:5f:c7:cc:1f:e5:0c:9b:91:fd:
                    c8:33:36:ce:13:c2:81:ac:c0:58:61:38:c6:95:43:
                    07:54:40:7f:4d:82:2f:c8:9c:54:3a:55:bd:b2:e8:
                    18:e3:d8:5a:83:87:1d:de:c9:20:b0:0b:f0:6b:64:
                    d5:1e:8f:f5:b2:24:29:0d:30:5e:1c:c6:33:ed:2d:
                    d2:50:68:f6:e8:b9:b4:e4:74:6e:41:9c:a2:cf:2e:
                    fd:c3:8b:05:0b:09:06:ad:03:4b:08:16:aa:96:fe:
                    dc:01:c0:d9:d9:d4:08:ee:66:33:d8:76:3f:25:55:
                    18:5a:2c:23:ef:fe:13:2c:50:f4:da:f5:99:92:12:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:05:40:8D:22:3D:D1:35:55:DA:52:86:7A:B9:2E:03:FB:D8:A2
            X509v3 Authority Key Identifier:
                keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/1-PYFQI0iPdE1VdpShnq5LgP72KI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.39.242.0/24
                  89.40.35.0/24
                  89.40.161.0/24
                  93.113.213.0/24
                  185.170.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:0a:90:57:63:b4:62:fa:a5:59:8a:c5:47:ab:81:24:2b:5f:
         dc:23:95:36:83:9c:2d:fc:06:7f:42:67:ea:bf:85:83:6c:ec:
         44:1a:8c:a9:6a:26:a4:6b:8e:79:d4:d5:d0:02:8a:bf:fd:4d:
         ed:29:50:85:a1:14:80:01:c8:45:7e:f1:fb:58:44:9a:f9:d1:
         6a:a2:40:b6:30:73:f3:f4:27:8c:f9:a0:32:da:49:49:00:7b:
         0c:d1:d9:7b:f4:20:59:a6:d7:8d:aa:8a:79:32:cf:1f:5a:5e:
         81:d3:de:4b:d8:59:6c:e9:55:73:16:4c:af:00:2f:1b:e9:f9:
         ea:0f:0e:7b:71:af:8b:4a:0f:1f:11:9b:ad:47:d6:45:d7:3a:
         35:6f:80:d0:e6:a5:49:3e:df:b2:79:b8:71:f7:fa:a6:23:08:
         d8:7b:9e:5c:3b:1a:0a:ea:96:66:93:83:f0:50:57:8e:3a:6d:
         8a:a3:ab:6c:ee:c4:65:31:19:c7:f4:fc:96:db:6a:16:1d:c0:
         27:08:b9:15:08:c3:76:78:98:af:ae:3d:c9:69:e8:0a:46:b0:
         e3:a7:88:cc:d7:76:9f:1c:77:b6:f9:ea:7c:95:9b:af:2a:9e:
         71:7f:df:ac:35:53:bf:cd:6a:23:ae:5c:44:7f:5d:8e:b7:1d:
         ce:8a:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org