Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/eULZwWlN8xNxFQwrs-jvxQcDc-k.roa
File:                     eULZwWlN8xNxFQwrs-jvxQcDc-k.roa (raw, json)
Hash identifier:          8NRDlSo/tUlx5rNnzKdUgO1LU4TTdXZpU3DGi57X/5Q=
Subject key identifier:   79:42:D9:C1:69:4D:F3:13:71:15:0C:2B:B3:E8:EF:C5:07:03:73:E9
Certificate issuer:       /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial:       09DFEB43
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/eULZwWlN8xNxFQwrs-jvxQcDc-k.roa
Signing time:             Tue 24 May 2022 12:45:15 +0000
ROA not before:           Tue 24 May 2022 12:45:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15517
IP address blocks:        80.238.136.0/24 maxlen: 24
                          80.238.134.0/23 maxlen: 23
                          80.238.139.0/24 maxlen: 24
                          80.238.144.0/20 maxlen: 20
                          80.238.140.0/22 maxlen: 22
                          80.238.160.0/20 maxlen: 20
                          45.85.92.0/22 maxlen: 22
                          80.238.176.0/20 maxlen: 20
                          80.238.129.0/24 maxlen: 24
                          80.238.128.0/17 maxlen: 17
                          80.238.130.0/24 maxlen: 24
                          62.65.128.0/19 maxlen: 19
                          62.65.137.0/24 maxlen: 24
                          62.65.144.0/21 maxlen: 21
                          62.65.143.0/24 maxlen: 24
                          62.65.142.0/24 maxlen: 24
                          62.65.141.0/24 maxlen: 24
                          62.65.158.0/24 maxlen: 24
                          62.65.153.0/24 maxlen: 24
                          62.65.154.0/23 maxlen: 23
                          62.65.156.0/23 maxlen: 23
                          80.238.192.0/21 maxlen: 21
                          80.238.200.0/22 maxlen: 22
                          80.238.208.0/21 maxlen: 21
                          80.238.216.0/22 maxlen: 22
                          80.238.225.0/24 maxlen: 24
                          80.238.223.0/24 maxlen: 24
                          80.238.230.0/23 maxlen: 23
                          80.238.236.0/22 maxlen: 22
                          94.78.3.0/24 maxlen: 24
                          94.78.0.0/18 maxlen: 18
                          94.78.2.0/24 maxlen: 24
                          2a01:330::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165669699 (0x9dfeb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
        Validity
            Not Before: May 24 12:45:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7942d9c1694df31371150c2bb3e8efc5070373e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:81:20:29:99:1d:08:68:f6:67:86:25:65:
                    99:78:ca:be:9a:75:29:28:a6:00:5f:64:03:4a:e3:
                    99:d0:82:58:b1:d1:60:aa:4e:77:59:48:a8:76:af:
                    b9:78:9a:f2:8e:eb:fb:49:ab:59:28:a0:3c:f9:31:
                    19:42:de:a5:44:f0:6d:69:f6:82:2a:83:06:d4:3d:
                    47:26:67:63:6b:19:5f:73:93:cb:00:ff:dc:be:8f:
                    dc:6d:7d:22:1d:6f:84:92:09:06:7e:6a:0f:25:6b:
                    ff:54:d0:9e:bb:01:aa:1a:83:63:d9:55:86:3b:2c:
                    07:6f:f8:bc:2e:cf:7e:db:4c:30:db:1b:04:7a:34:
                    fb:55:4d:1c:d0:4d:c9:84:46:12:f9:75:3b:13:1b:
                    9b:58:a9:e6:62:60:f5:8c:fe:15:d1:98:63:70:98:
                    9a:a0:47:30:c6:7f:50:cc:9e:0d:73:62:e6:82:bc:
                    38:a6:0b:26:e7:47:b0:56:7d:11:42:4b:8e:7a:cc:
                    ec:3e:2b:39:0b:3a:bf:2e:9e:8c:bf:b7:75:8a:6c:
                    15:41:ad:ab:bf:c1:70:8a:40:ca:6b:61:53:f2:c7:
                    8e:6e:ee:b6:27:a3:1c:71:ae:c0:ff:04:d1:ed:db:
                    3e:70:26:c0:9d:24:ed:43:af:eb:90:d3:f6:eb:1c:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:D9:C1:69:4D:F3:13:71:15:0C:2B:B3:E8:EF:C5:07:03:73:E9
            X509v3 Authority Key Identifier:
                keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/eULZwWlN8xNxFQwrs-jvxQcDc-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.92.0/22
                  62.65.128.0/19
                  80.238.128.0/17
                  94.78.0.0/18
                IPv6:
                  2a01:330::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:d2:8d:50:c2:d5:97:78:2e:5b:5c:7b:a8:56:d0:37:48:19:
         d8:b8:e7:8d:8f:bf:fd:fc:71:7c:e2:9e:05:4a:d8:ed:17:75:
         7f:14:42:1c:0a:06:95:a0:3d:84:a4:29:4b:b6:b9:3d:b1:51:
         79:15:f1:29:39:b4:d1:f9:2d:7e:ac:ed:ce:1f:0a:f4:2a:1b:
         d2:9e:4d:b7:73:3d:6f:79:d0:63:fd:2a:6f:d5:f6:50:a7:7c:
         93:07:04:05:c3:0d:32:ee:3c:cb:c2:f4:54:de:ad:b5:7b:2c:
         75:9f:52:fb:6c:aa:6a:67:1b:9c:82:6f:6b:b8:50:f4:99:cb:
         5c:62:c7:a8:df:3a:76:1d:05:0a:56:56:8e:0f:f1:05:dd:ec:
         87:c2:19:b9:f4:1c:22:36:e0:2e:1b:36:8e:fb:ad:0a:33:9b:
         d1:4a:b7:4c:c1:dc:d9:60:bf:13:b9:b1:69:4e:85:c9:e2:6e:
         87:3e:93:58:73:8e:c4:9c:fb:8a:1a:b0:4f:03:c0:e3:37:e4:
         62:91:b5:e2:58:73:f2:3d:86:8a:33:bf:d6:53:1f:8f:5a:12:
         08:8e:55:e3:48:83:3c:8f:fd:a7:e6:7e:53:64:be:0b:43:01:
         6b:db:b9:c2:cb:79:92:f4:02:53:44:b2:cb:8c:8e:51:55:fe:
         ce:8a:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:55 2024 by rpki-client on console-ams.rpki-client.org