Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/rK2XH9uoZ0-8MtYoGHnDsBOtpSU.roa
File:                     rK2XH9uoZ0-8MtYoGHnDsBOtpSU.roa (raw, json)
Hash identifier:          DNdZ1QKsoV6o/TtItenLoTxByIq3JmStoc6h2ieJRRc=
Subject key identifier:   AC:AD:97:1F:DB:A8:67:4F:BC:32:D6:28:18:79:C3:B0:13:AD:A5:25
Certificate issuer:       /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial:       01887165B9E76E7C9C1807D6FF7996236F35
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/rK2XH9uoZ0-8MtYoGHnDsBOtpSU.roa
Signing time:             Wed 31 May 2023 10:41:12 +0000
ROA not before:           Wed 31 May 2023 10:41:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9125
IP address blocks:        93.93.192.0/21 maxlen: 21
                          92.42.253.0/24 maxlen: 24
                          92.42.252.0/24 maxlen: 24
                          92.42.248.0/22 maxlen: 22
                          92.42.254.0/24 maxlen: 24
                          92.42.255.0/24 maxlen: 24
                          89.23.93.0/24 maxlen: 24
                          89.23.68.0/23 maxlen: 23
                          89.23.70.0/24 maxlen: 24
                          89.23.65.0/24 maxlen: 24
                          89.23.75.0/24 maxlen: 24
                          178.254.133.0/24 maxlen: 24
                          178.254.136.0/22 maxlen: 22
                          178.254.144.0/20 maxlen: 20
                          178.254.145.0/24 maxlen: 24
                          178.254.140.0/22 maxlen: 22
                          178.254.165.0/24 maxlen: 24
                          178.254.163.0/24 maxlen: 24
                          178.254.172.0/24 maxlen: 24
                          178.254.169.0/24 maxlen: 24
                          178.254.175.0/24 maxlen: 24
                          178.254.177.0/24 maxlen: 24
                          178.254.183.0/24 maxlen: 24
                          178.254.182.0/24 maxlen: 24
                          178.254.184.0/21 maxlen: 21
                          178.254.128.0/21 maxlen: 21
                          95.140.112.0/22 maxlen: 22
                          95.140.116.0/22 maxlen: 22
                          95.140.115.0/24 maxlen: 24
                          95.140.120.0/23 maxlen: 23
                          95.140.124.0/22 maxlen: 22
                          95.140.125.0/24 maxlen: 24
                          185.157.44.0/24 maxlen: 24
                          109.111.254.0/24 maxlen: 24
                          217.169.208.0/20 maxlen: 20
                          217.169.208.0/22 maxlen: 22
                          217.169.212.0/22 maxlen: 22
                          217.169.219.0/24 maxlen: 24
                          217.169.216.0/22 maxlen: 22
                          217.169.220.0/22 maxlen: 22
                          5.172.34.0/24 maxlen: 24
                          5.172.33.0/24 maxlen: 24
                          5.172.34.0/23 maxlen: 23
                          5.172.36.0/23 maxlen: 23
                          5.172.36.0/22 maxlen: 22
                          109.111.226.0/24 maxlen: 24
                          109.111.225.0/24 maxlen: 24
                          109.111.224.0/24 maxlen: 24
                          109.111.232.0/22 maxlen: 22
                          109.111.229.0/24 maxlen: 24
                          109.111.228.0/24 maxlen: 24
                          109.111.230.0/23 maxlen: 23
                          109.111.227.0/24 maxlen: 24
                          109.111.240.0/24 maxlen: 24
                          109.111.236.0/22 maxlen: 22
                          109.111.246.0/24 maxlen: 24
                          109.111.243.0/24 maxlen: 24
                          109.111.244.0/24 maxlen: 24
                          109.111.250.0/24 maxlen: 24
                          109.111.252.0/23 maxlen: 23
                          109.111.247.0/24 maxlen: 24
                          109.111.248.0/24 maxlen: 24
                          2a02:b58::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:71:65:b9:e7:6e:7c:9c:18:07:d6:ff:79:96:23:6f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
        Validity
            Not Before: May 31 10:41:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=acad971fdba8674fbc32d6281879c3b013ada525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:75:bb:f3:7b:57:7e:dd:4b:15:0b:46:18:
                    ff:0e:b6:ba:b2:ed:3e:52:5e:39:81:66:3d:11:64:
                    07:4c:16:59:ce:46:4e:33:ca:dc:c3:61:b7:ef:00:
                    03:21:8f:4c:c5:4f:d4:9c:74:37:87:bc:28:8b:20:
                    76:7c:ce:2c:b8:bd:19:ef:b1:ef:b3:51:88:47:5f:
                    d8:ef:70:e7:94:ae:b2:a9:06:48:3d:74:76:72:2b:
                    ae:1c:bf:c5:5e:39:9f:41:a8:d1:fb:97:10:2d:1f:
                    24:4e:6b:ea:0c:6b:88:0d:03:76:a8:d6:fd:54:3c:
                    af:c1:4a:72:49:50:a9:e4:ef:ee:d0:c0:f6:4c:1b:
                    12:d0:c6:52:c0:8d:6e:6f:05:e8:51:c8:62:ec:bc:
                    44:bb:a0:a9:8b:81:a3:c2:07:be:6a:ab:db:70:05:
                    b1:b6:61:58:4a:fe:93:51:d1:d4:e6:37:63:ec:d6:
                    6c:94:8e:f5:25:00:d8:20:de:ab:07:26:65:62:6e:
                    8b:7c:4f:52:90:ca:95:c9:62:96:a5:c7:cc:7c:98:
                    2c:7d:37:28:54:b6:1a:3d:ae:da:a6:35:0f:0d:12:
                    c7:5a:2a:6f:83:89:0b:ad:50:12:b4:24:f5:cb:b1:
                    23:79:72:60:24:1b:90:9b:9d:ef:a3:68:f8:51:05:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AD:97:1F:DB:A8:67:4F:BC:32:D6:28:18:79:C3:B0:13:AD:A5:25
            X509v3 Authority Key Identifier:
                keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/rK2XH9uoZ0-8MtYoGHnDsBOtpSU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.172.33.0-5.172.39.255
                  89.23.65.0/24
                  89.23.68.0-89.23.70.255
                  89.23.75.0/24
                  89.23.93.0/24
                  92.42.248.0/21
                  93.93.192.0/21
                  95.140.112.0-95.140.121.255
                  95.140.124.0/22
                  109.111.224.0-109.111.240.255
                  109.111.243.0-109.111.244.255
                  109.111.246.0-109.111.248.255
                  109.111.250.0/24
                  109.111.252.0-109.111.254.255
                  178.254.128.0/19
                  178.254.163.0/24
                  178.254.165.0/24
                  178.254.169.0/24
                  178.254.172.0/24
                  178.254.175.0/24
                  178.254.177.0/24
                  178.254.182.0-178.254.191.255
                  185.157.44.0/24
                  217.169.208.0/20
                IPv6:
                  2a02:b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:0e:dc:8a:d5:0e:f4:ca:ae:88:fa:36:78:8e:8e:8b:ec:
         1f:36:93:37:f7:22:2f:d9:31:ac:51:55:14:75:be:bd:4b:a2:
         11:d7:fa:da:96:98:bc:0b:7d:4b:8a:59:b8:08:db:1e:c7:80:
         ad:1c:6e:6f:55:26:47:69:db:e9:1b:7c:79:ce:d9:bd:2e:a1:
         35:c2:d1:16:1e:6c:aa:8d:2d:5d:3e:c0:b9:d9:67:7d:96:e5:
         2f:a7:aa:9b:a1:6c:39:34:b2:ba:99:a6:da:6e:84:6f:60:fd:
         f7:56:d4:d8:bf:57:9c:8d:b7:35:07:86:39:b2:09:c6:0a:7e:
         1f:7d:7b:1d:89:2f:22:93:5f:d5:0f:e1:61:94:3a:0d:af:33:
         62:18:a9:20:bb:77:41:8d:a0:71:cc:17:a6:65:ed:7e:85:90:
         fa:2d:5c:5c:ce:42:5c:a5:eb:2c:83:3e:5f:f6:3e:ff:f4:da:
         64:b6:2c:af:e1:a4:b9:66:00:8b:0c:73:ab:72:3b:ae:85:94:
         8c:e7:70:12:b8:85:30:72:b2:0c:95:1a:57:16:16:33:7c:1a:
         ba:ed:97:1b:3c:f5:27:94:98:63:15:72:fb:40:73:60:30:d8:
         f0:90:bd:91:54:56:33:11:ef:48:74:96:07:58:9e:60:57:41:
         9c:ab:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org