Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/4_GUOwl_gKPngnEnfDMdomXQ3Ig.roa
File:                     4_GUOwl_gKPngnEnfDMdomXQ3Ig.roa (raw, json)
Hash identifier:          oXBwdn/TxvpPdBtHFFVuhOBgHCaFryMkvevuu011U14=
Subject key identifier:   E3:F1:94:3B:09:7F:80:A3:E7:82:71:27:7C:33:1D:A2:65:D0:DC:88
Certificate issuer:       /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial:       0185A0EED40BBC88D19FA89842D658E70B3B
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/4_GUOwl_gKPngnEnfDMdomXQ3Ig.roa
Signing time:             Wed 11 Jan 2023 13:04:44 +0000
ROA not before:           Wed 11 Jan 2023 13:04:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15517
IP address blocks:        80.238.136.0/24 maxlen: 24
                          80.238.134.0/24 maxlen: 24
                          80.238.139.0/24 maxlen: 24
                          80.238.144.0/20 maxlen: 20
                          80.238.140.0/22 maxlen: 22
                          80.238.160.0/20 maxlen: 20
                          45.85.92.0/22 maxlen: 22
                          80.238.176.0/20 maxlen: 20
                          80.238.129.0/24 maxlen: 24
                          80.238.128.0/17 maxlen: 17
                          80.238.130.0/24 maxlen: 24
                          62.65.128.0/19 maxlen: 19
                          62.65.137.0/24 maxlen: 24
                          62.65.144.0/21 maxlen: 21
                          62.65.143.0/24 maxlen: 24
                          62.65.142.0/24 maxlen: 24
                          62.65.141.0/24 maxlen: 24
                          62.65.158.0/24 maxlen: 24
                          62.65.153.0/24 maxlen: 24
                          62.65.154.0/23 maxlen: 23
                          62.65.156.0/23 maxlen: 23
                          80.238.192.0/21 maxlen: 21
                          80.238.200.0/22 maxlen: 22
                          80.238.208.0/21 maxlen: 21
                          80.238.216.0/23 maxlen: 23
                          80.238.216.0/22 maxlen: 22
                          80.238.218.0/24 maxlen: 24
                          80.238.225.0/24 maxlen: 24
                          80.238.223.0/24 maxlen: 24
                          94.78.3.0/24 maxlen: 24
                          94.78.0.0/18 maxlen: 18
                          94.78.2.0/24 maxlen: 24
                          2a01:330::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a0:ee:d4:0b:bc:88:d1:9f:a8:98:42:d6:58:e7:0b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
        Validity
            Not Before: Jan 11 13:04:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3f1943b097f80a3e78271277c331da265d0dc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:69:f8:4a:05:ca:5e:e0:08:bc:75:d9:76:30:
                    cd:c8:4c:e2:72:f2:5e:a9:c1:b1:e9:d7:f0:74:c9:
                    89:9b:9c:75:0f:d3:10:86:93:a9:aa:e8:73:10:45:
                    32:a0:2f:c0:59:bd:e1:5a:8e:73:64:7b:82:1b:cc:
                    1c:a2:9f:3c:96:d6:53:18:67:38:40:f1:9a:58:39:
                    d8:2b:ad:08:48:ce:20:9c:8f:df:fb:04:cc:8d:70:
                    4a:44:70:2d:83:bf:fb:5b:56:16:6b:53:3e:a9:08:
                    25:c3:21:7b:ec:c9:a6:ed:3b:b9:e0:6b:ff:7d:bf:
                    54:e1:0b:00:cf:e4:da:3d:18:dd:9c:d3:f2:75:af:
                    1a:7f:1f:50:e5:a2:47:e0:09:c8:c9:aa:f1:3f:19:
                    84:da:f1:29:c9:59:8c:d6:e9:d7:d2:36:57:26:07:
                    dd:03:76:9d:c1:25:27:86:ac:fd:2d:72:95:da:fe:
                    7a:39:0e:88:b9:2e:2c:53:df:97:98:a0:2f:4d:73:
                    fd:ac:a8:c2:d0:72:fa:94:2c:82:07:83:08:4a:05:
                    76:ba:dd:a4:08:f7:9f:33:16:cb:22:5b:78:fd:0d:
                    9d:58:d2:90:4c:8f:9a:2d:7e:c3:7b:ce:53:27:3b:
                    31:30:45:91:8d:d8:64:8a:45:e5:27:09:7b:24:bd:
                    dd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:94:3B:09:7F:80:A3:E7:82:71:27:7C:33:1D:A2:65:D0:DC:88
            X509v3 Authority Key Identifier:
                keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/4_GUOwl_gKPngnEnfDMdomXQ3Ig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.92.0/22
                  62.65.128.0/19
                  80.238.128.0/17
                  94.78.0.0/18
                IPv6:
                  2a01:330::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:20:d3:a0:c9:0f:23:a8:be:ed:8c:ac:9e:f1:3f:96:37:9e:
         80:a4:68:e9:aa:56:0a:7e:55:83:63:69:43:e6:b3:26:59:6e:
         77:9f:6c:4d:60:dc:b5:e2:5b:b3:9d:98:28:d0:c6:ca:a9:4f:
         1e:18:25:54:8b:2b:9e:27:49:ad:8f:7b:40:aa:57:0b:45:26:
         f9:f2:5d:46:8b:25:c3:d6:d5:a9:e7:9a:c4:82:17:e3:37:d3:
         d8:dd:f9:ed:e5:be:f1:c5:f2:f9:52:56:74:cb:ea:64:51:e3:
         c6:62:f7:4e:bf:3b:36:36:75:99:4c:48:d2:52:24:13:c9:00:
         a4:c4:91:7f:dd:c8:73:61:18:5f:dc:0c:c4:bd:cf:5b:94:1a:
         ac:f1:93:e4:18:80:35:ae:ac:dd:cd:13:d2:75:70:94:9d:46:
         64:29:f2:5a:62:a4:4b:c8:9c:b4:be:24:28:67:93:a0:26:d9:
         c6:d7:cc:12:df:e4:94:9d:4c:6d:a7:a6:5f:27:c2:c9:31:e1:
         dc:56:f3:0a:74:9d:f6:7c:0a:85:f5:45:d1:f5:19:99:40:18:
         44:b3:cf:69:d2:eb:74:bc:fa:41:6e:48:55:68:0d:78:00:a4:
         04:b4:e1:05:de:2d:1c:44:86:93:52:5d:94:d6:35:29:1a:36:
         1b:49:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:55 2024 by rpki-client on console-ams.rpki-client.org