Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/H62lsykFYVBloBtu4OolJbNAMbU.roa
File:                     H62lsykFYVBloBtu4OolJbNAMbU.roa (raw, json)
Hash identifier:          MhWG3nEWVhJJ4ZMFCiU7wHHsMhJvFKfeSq5nDlDKhtE=
Subject key identifier:   1F:AD:A5:B3:29:05:61:50:65:A0:1B:6E:E0:EA:25:25:B3:40:31:B5
Certificate issuer:       /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial:       018437E698800F2E94244417E939141411CE
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/H62lsykFYVBloBtu4OolJbNAMbU.roa
Signing time:             Wed 02 Nov 2022 10:32:49 +0000
ROA not before:           Wed 02 Nov 2022 10:32:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15517
IP address blocks:        80.238.136.0/24 maxlen: 24
                          80.238.134.0/24 maxlen: 24
                          80.238.139.0/24 maxlen: 24
                          80.238.144.0/20 maxlen: 20
                          80.238.140.0/22 maxlen: 22
                          80.238.160.0/20 maxlen: 20
                          45.85.92.0/22 maxlen: 22
                          80.238.176.0/20 maxlen: 20
                          80.238.129.0/24 maxlen: 24
                          80.238.132.0/22 maxlen: 22
                          80.238.128.0/17 maxlen: 17
                          80.238.130.0/23 maxlen: 23
                          80.238.130.0/24 maxlen: 24
                          62.65.128.0/19 maxlen: 19
                          62.65.137.0/24 maxlen: 24
                          62.65.144.0/21 maxlen: 21
                          62.65.143.0/24 maxlen: 24
                          62.65.142.0/24 maxlen: 24
                          62.65.141.0/24 maxlen: 24
                          62.65.158.0/24 maxlen: 24
                          62.65.153.0/24 maxlen: 24
                          62.65.154.0/23 maxlen: 23
                          62.65.156.0/23 maxlen: 23
                          80.238.192.0/21 maxlen: 21
                          80.238.200.0/22 maxlen: 22
                          80.238.200.0/21 maxlen: 21
                          80.238.208.0/21 maxlen: 21
                          80.238.216.0/22 maxlen: 22
                          80.238.226.0/23 maxlen: 23
                          80.238.225.0/24 maxlen: 24
                          80.238.223.0/24 maxlen: 24
                          80.238.232.0/21 maxlen: 21
                          80.238.230.0/23 maxlen: 23
                          80.238.228.0/22 maxlen: 22
                          80.238.236.0/22 maxlen: 22
                          94.78.3.0/24 maxlen: 24
                          94.78.0.0/18 maxlen: 18
                          94.78.2.0/24 maxlen: 24
                          2a01:330::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:37:e6:98:80:0f:2e:94:24:44:17:e9:39:14:14:11:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
        Validity
            Not Before: Nov  2 10:32:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1fada5b32905615065a01b6ee0ea2525b34031b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:6a:b5:b5:f2:3b:48:40:8a:a9:44:d0:4f:
                    f4:7b:b8:2e:31:65:d4:67:b5:8e:5c:55:d5:b1:c2:
                    2f:62:57:c2:52:25:84:17:59:5e:1a:6d:3c:28:65:
                    73:25:f8:de:8f:ca:17:d4:70:78:46:3a:22:aa:30:
                    57:a3:97:86:a0:d5:d2:a7:97:fa:ca:ec:4a:b8:9f:
                    4c:53:60:93:e9:42:4f:5a:73:86:c0:84:4e:54:ba:
                    63:69:ef:4b:d0:00:8c:8d:79:b0:ba:6b:79:ef:5b:
                    c6:bb:8d:1e:51:19:3d:f5:69:ff:c3:65:45:9d:01:
                    23:95:62:7f:7c:99:5e:be:ac:a8:ec:e8:a9:30:27:
                    30:73:e9:e6:a8:be:83:9f:51:cf:dc:ec:1e:4c:9a:
                    43:e9:63:83:b6:5d:1e:73:d3:8b:b0:0c:74:66:17:
                    0e:91:84:71:f7:a6:19:4f:a2:64:e6:26:aa:71:57:
                    85:c1:12:50:b5:65:40:78:ab:6b:9a:7e:bb:aa:11:
                    98:27:f2:42:26:01:b3:54:d1:a5:29:83:e4:65:8f:
                    f3:30:f3:9a:54:14:61:a7:50:b0:d0:f4:89:4b:0b:
                    28:47:55:02:45:32:d1:dd:d2:1e:8f:f6:33:3b:16:
                    5a:07:42:8e:47:d3:8f:1e:11:b0:f4:ef:3e:11:4b:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AD:A5:B3:29:05:61:50:65:A0:1B:6E:E0:EA:25:25:B3:40:31:B5
            X509v3 Authority Key Identifier:
                keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/H62lsykFYVBloBtu4OolJbNAMbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.92.0/22
                  62.65.128.0/19
                  80.238.128.0/17
                  94.78.0.0/18
                IPv6:
                  2a01:330::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:6a:2e:48:ad:69:d2:56:08:02:4a:e8:5d:75:7d:39:e0:34:
         39:58:f3:0d:24:25:78:20:cc:c7:61:85:c1:39:85:df:3c:bb:
         06:a8:7c:63:b4:47:68:6c:6a:97:b9:36:58:09:af:43:f5:85:
         51:0b:4a:80:ce:56:f8:65:f9:88:44:af:4a:5a:d9:65:7e:69:
         a5:7d:fb:75:b3:a2:f0:02:cc:97:93:80:e3:b3:00:65:41:b1:
         df:c4:ef:7a:e0:cc:01:ea:38:cd:61:31:b7:57:bb:91:9c:83:
         51:25:41:93:a4:e8:60:31:32:0d:fd:82:09:c8:a7:3b:10:5a:
         82:08:f3:a8:2d:05:3c:2f:65:d0:31:3c:c2:ce:a8:60:29:f4:
         1a:2a:af:76:38:08:61:36:c5:93:dc:bb:fa:f1:12:ed:b0:06:
         05:37:b0:88:5f:9e:26:bf:96:a0:af:5a:ad:a5:ea:1c:10:ef:
         e8:de:34:36:a3:da:ec:0a:65:e5:56:5d:be:a6:d2:05:fb:37:
         78:b7:5a:84:ee:45:80:b1:9e:9f:c1:b3:05:4e:03:87:f0:ec:
         41:6c:aa:dd:c8:83:33:7b:bb:3b:d5:06:33:55:db:93:fc:4d:
         1c:5c:32:55:35:6d:44:96:bd:9c:04:c5:6f:57:b1:08:e7:fb:
         c4:a1:96:95
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYQ35piADy6UJEQX6TkUFBHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjYyYjNjZmE4YjkwNTkwNjhjMjlkNDZiOTkyNjNiYTJk
ZTUwYzEwHhcNMjIxMTAyMTAzMjQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmFkYTViMzI5MDU2MTUwNjVhMDFiNmVlMGVhMjUyNWIzNDAzMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5tqtbXyO0hAiqlE0E/0e7guMWXU
Z7WOXFXVscIvYlfCUiWEF1leGm08KGVzJfjej8oX1HB4RjoiqjBXo5eGoNXSp5f6
yuxKuJ9MU2CT6UJPWnOGwIROVLpjae9L0ACMjXmwumt571vGu40eURk99Wn/w2VF
nQEjlWJ/fJlevqyo7OipMCcwc+nmqL6Dn1HP3OweTJpD6WODtl0ec9OLsAx0ZhcO
kYRx96YZT6Jk5iaqcVeFwRJQtWVAeKtrmn67qhGYJ/JCJgGzVNGlKYPkZY/zMPOa
VBRhp1Cw0PSJSwsoR1UCRTLR3dIej/YzOxZaB0KOR9OPHhGw9O8+EUt7HQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFB+tpbMpBWFQZaAbbuDqJSWzQDG1MB8GA1UdIwQY
MBaAFJ9mKzz6i5BZBowp1GuZJjui3lDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJZclBQcUxrRmtHakNuVWE1a21PNkxlVU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yNTEyYzUtMjUyYi00OTY3LTg5YTct
NmExZjk3ZmY4ZDM0LzEvSDYybHN5a0ZZVkJsb0J0dTRPb2xKYk5BTWJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yNTEyYzUtMjUyYi00OTY3LTg5YTctNmExZjk3ZmY4ZDM0
LzEvbjJZclBQcUxrRmtHakNuVWE1a21PNkxlVU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLVVcAwQF
PkGAAwQHUO6AAwQGXk4AMA0EAgACMAcDBQAqAQMwMA0GCSqGSIb3DQEBCwUAA4IB
AQB0ai5IrWnSVggCSuhddX054DQ5WPMNJCV4IMzHYYXBOYXfPLsGqHxjtEdobGqX
uTZYCa9D9YVRC0qAzlb4ZfmIRK9KWtllfmmlfft1s6LwAsyXk4DjswBlQbHfxO96
4MwB6jjNYTG3V7uRnINRJUGTpOhgMTIN/YIJyKc7EFqCCPOoLQU8L2XQMTzCzqhg
KfQaKq92OAhhNsWT3Lv68RLtsAYFN7CIX54mv5agr1qtpeocEO/o3jQ2o9rsCmXl
Vl2+ptIF+zd4t1qE7kWAsZ6fwbMFTgOH8OxBbKrdyIMze7s71QYzVduT/E0cXDJV
NW1Elr2cBMVvV7EI5/vEoZaV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:33 2024 by rpki-client on console-fra.rpki-client.org