Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/fe43bc-75e1-48da-8cde-68222fab1bfb/1/AI8gzMLia7sRG0AYCNHfiAc2Kx4.roa
File:                     AI8gzMLia7sRG0AYCNHfiAc2Kx4.roa (raw, json)
Hash identifier:          7KnFnpx46Tj0dDUJgTlS5S6Chv0nAq8B4Y1v5YgJIxU=
Subject key identifier:   00:8F:20:CC:C2:E2:6B:BB:11:1B:40:18:08:D1:DF:88:07:36:2B:1E
Certificate issuer:       /CN=b3b3db924602be529903dfc65663b7eaad78571d
Certificate serial:       06B0A6F2
Authority key identifier: B3:B3:DB:92:46:02:BE:52:99:03:DF:C6:56:63:B7:EA:AD:78:57:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7PbkkYCvlKZA9_GVmO36q14Vx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/fe43bc-75e1-48da-8cde-68222fab1bfb/1/AI8gzMLia7sRG0AYCNHfiAc2Kx4.roa
Signing time:             Thu 19 May 2022 05:17:17 +0000
ROA not before:           Thu 19 May 2022 05:17:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47119
IP address blocks:        188.191.112.0/22 maxlen: 22
                          188.191.112.0/23 maxlen: 23
                          188.191.118.0/23 maxlen: 23
                          188.191.116.0/22 maxlen: 22
                          188.191.116.0/23 maxlen: 23
                          188.191.114.0/23 maxlen: 23
                          188.191.112.0/20 maxlen: 20
                          188.191.112.0/21 maxlen: 21
                          188.191.124.0/23 maxlen: 23
                          188.191.124.0/22 maxlen: 22
                          188.191.122.0/23 maxlen: 23
                          188.191.120.0/22 maxlen: 22
                          188.191.120.0/23 maxlen: 23
                          188.191.126.0/23 maxlen: 23
                          79.174.36.0/23 maxlen: 23
                          79.174.32.0/23 maxlen: 23
                          79.174.32.0/22 maxlen: 22
                          79.174.32.0/24 maxlen: 24
                          79.174.34.0/24 maxlen: 24
                          79.174.33.0/24 maxlen: 24
                          79.174.34.0/23 maxlen: 23
                          79.174.32.0/20 maxlen: 20
                          79.174.32.0/19 maxlen: 19
                          79.174.38.0/24 maxlen: 24
                          79.174.37.0/24 maxlen: 24
                          79.174.36.0/22 maxlen: 22
                          79.174.36.0/24 maxlen: 24
                          79.174.35.0/24 maxlen: 24
                          79.174.42.0/24 maxlen: 24
                          79.174.39.0/24 maxlen: 24
                          79.174.38.0/23 maxlen: 23
                          79.174.44.0/23 maxlen: 23
                          79.174.44.0/22 maxlen: 22
                          79.174.44.0/24 maxlen: 24
                          79.174.43.0/24 maxlen: 24
                          79.174.42.0/23 maxlen: 23
                          79.174.41.0/24 maxlen: 24
                          79.174.40.0/23 maxlen: 23
                          79.174.40.0/24 maxlen: 24
                          79.174.40.0/22 maxlen: 22
                          79.174.48.0/20 maxlen: 20
                          79.174.51.0/24 maxlen: 24
                          79.174.50.0/23 maxlen: 23
                          79.174.50.0/24 maxlen: 24
                          79.174.49.0/24 maxlen: 24
                          79.174.48.0/24 maxlen: 24
                          79.174.48.0/23 maxlen: 23
                          79.174.48.0/22 maxlen: 22
                          79.174.46.0/24 maxlen: 24
                          79.174.46.0/23 maxlen: 23
                          79.174.45.0/24 maxlen: 24
                          79.174.52.0/23 maxlen: 23
                          79.174.52.0/22 maxlen: 22
                          79.174.52.0/24 maxlen: 24
                          79.174.58.0/23 maxlen: 23
                          79.174.56.0/22 maxlen: 22
                          79.174.56.0/23 maxlen: 23
                          79.174.54.0/23 maxlen: 23
                          79.174.60.0/22 maxlen: 22
                          79.174.60.0/23 maxlen: 23
                          79.174.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112240370 (0x6b0a6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b3db924602be529903dfc65663b7eaad78571d
        Validity
            Not Before: May 19 05:17:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=008f20ccc2e26bbb111b401808d1df8807362b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:4d:ae:17:06:dc:0c:ab:d3:6d:be:e8:f7:
                    2f:22:63:e0:78:a7:79:62:5b:58:49:38:28:e5:10:
                    f6:10:f1:04:3f:ed:95:61:94:da:ef:86:83:fd:c4:
                    67:8a:94:c9:2b:52:d9:82:58:64:98:89:1b:91:f8:
                    7d:2b:f9:c1:26:f9:1e:90:39:89:bf:2b:d7:fd:5c:
                    94:7d:e6:a7:28:7e:30:e2:dd:5e:33:67:ae:9e:cd:
                    16:f9:67:7a:46:8a:be:82:0a:79:06:38:0a:b8:5c:
                    c3:8c:48:a4:aa:32:e5:37:c5:ce:7d:5c:9b:b9:8a:
                    c2:b9:9f:ab:4c:65:3e:85:65:af:78:7c:7d:d0:59:
                    a8:d1:2e:e6:77:ce:9a:27:4d:44:39:d3:93:1b:c0:
                    26:aa:c1:0b:6f:81:40:fa:3c:92:ee:28:5d:a8:f4:
                    dc:b2:26:86:73:e1:f9:65:e3:27:76:e9:37:65:03:
                    c6:76:22:47:10:ed:6b:43:2c:34:74:73:ea:67:63:
                    e5:0f:a2:6b:3e:4f:76:80:6d:0a:55:37:37:8b:5f:
                    63:22:59:e1:ab:a8:e0:a1:8e:62:9b:07:53:83:cf:
                    b2:1a:36:36:0a:76:2b:45:5c:88:fe:37:38:f1:39:
                    5b:1d:aa:f7:34:9d:f3:cf:df:14:65:c9:19:90:d5:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8F:20:CC:C2:E2:6B:BB:11:1B:40:18:08:D1:DF:88:07:36:2B:1E
            X509v3 Authority Key Identifier:
                keyid:B3:B3:DB:92:46:02:BE:52:99:03:DF:C6:56:63:B7:EA:AD:78:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7PbkkYCvlKZA9_GVmO36q14Vx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe43bc-75e1-48da-8cde-68222fab1bfb/1/AI8gzMLia7sRG0AYCNHfiAc2Kx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe43bc-75e1-48da-8cde-68222fab1bfb/1/s7PbkkYCvlKZA9_GVmO36q14Vx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.174.32.0/19
                  188.191.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:ad:41:d7:98:02:7b:14:81:46:92:fc:5e:c4:ee:54:45:
         47:4a:18:0c:9a:05:f1:ad:a3:3d:46:66:eb:f8:0b:23:26:59:
         e8:73:58:15:bd:52:4f:90:3e:d6:8d:56:db:37:ef:53:7a:8c:
         f4:79:d2:a9:88:56:fa:12:54:b2:d4:b8:13:86:c2:0a:f5:f3:
         bb:45:4a:2d:63:b9:7d:b0:3f:ae:76:ff:89:7f:fd:88:8c:1e:
         ed:bb:4d:27:5f:ab:0d:1a:0c:75:d7:7e:37:32:29:d3:32:1d:
         79:00:28:8b:d9:ba:f1:38:3f:63:da:17:f4:39:d7:e6:97:cb:
         d5:99:cc:86:05:0a:c6:35:de:c0:fc:94:ee:1e:40:a1:be:1e:
         2a:04:ca:89:15:3e:fa:9f:3a:34:4b:dc:6a:39:8c:0d:95:16:
         27:d2:2d:8d:ef:68:c8:a8:ea:ec:2f:a4:a4:3b:76:bd:45:a5:
         f0:e2:4d:8d:67:ef:18:c8:92:f9:d2:fc:db:73:02:45:33:da:
         7f:1d:93:08:34:4d:ed:22:64:48:3e:12:a6:bd:77:77:2a:1b:
         84:6d:3f:f0:bb:35:da:6d:2a:37:23:a0:95:3d:13:7a:7d:88:
         f2:49:35:42:0f:3e:52:20:66:17:98:28:38:8e:96:9d:9a:9b:
         c4:74:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-fra.rpki-client.org