Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GGTd_0wuGNaP-Wnn4zP9H7cBzjw.roa
File:                     GGTd_0wuGNaP-Wnn4zP9H7cBzjw.roa (raw, json)
Hash identifier:          MIpHTvWuMh4AGrg6gm6lQDFqDtPMvGHV36E1bBL8XnE=
Subject key identifier:   18:64:DD:FF:4C:2E:18:D6:8F:F9:69:E7:E3:33:FD:1F:B7:01:CE:3C
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0184B2E6A57C6BCAD9514BA36247A372A87F
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GGTd_0wuGNaP-Wnn4zP9H7cBzjw.roa
Signing time:             Sat 26 Nov 2022 07:46:10 +0000
ROA not before:           Sat 26 Nov 2022 07:46:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.176.54.0/24 maxlen: 24
                          193.176.55.0/24 maxlen: 24
                          45.154.104.0/23 maxlen: 24
                          91.199.168.0/24 maxlen: 24
                          141.98.156.0/23 maxlen: 24
                          147.78.122.0/23 maxlen: 24
                          147.78.120.0/23 maxlen: 24
                          45.149.186.0/23 maxlen: 24
                          45.149.184.0/23 maxlen: 24
                          45.158.10.0/23 maxlen: 24
                          45.158.8.0/23 maxlen: 24
                          45.153.4.0/23 maxlen: 23
                          195.206.230.0/24 maxlen: 24
                          195.206.231.0/24 maxlen: 24
                          176.105.224.0/23 maxlen: 24
                          195.206.234.0/24 maxlen: 24
                          195.206.235.0/24 maxlen: 24
                          45.153.6.0/23 maxlen: 24
                          45.142.236.0/23 maxlen: 24
                          45.142.238.0/23 maxlen: 24
                          193.111.116.0/24 maxlen: 24
                          193.111.117.0/24 maxlen: 24
                          45.158.170.0/23 maxlen: 24
                          45.158.168.0/23 maxlen: 24
                          193.151.182.0/23 maxlen: 24
                          193.151.180.0/23 maxlen: 24
                          195.20.98.0/24 maxlen: 24
                          194.104.156.0/24 maxlen: 24
                          194.104.158.0/24 maxlen: 24
                          195.20.105.0/24 maxlen: 24
                          195.20.99.0/24 maxlen: 24
                          194.105.21.0/24 maxlen: 24
                          152.89.250.0/23 maxlen: 24
                          193.29.96.0/23 maxlen: 24
                          193.29.98.0/23 maxlen: 24
                          194.147.4.0/23 maxlen: 24
                          194.147.6.0/23 maxlen: 24
                          194.5.146.0/23 maxlen: 24
                          193.142.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b2:e6:a5:7c:6b:ca:d9:51:4b:a3:62:47:a3:72:a8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Nov 26 07:46:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1864ddff4c2e18d68ff969e7e333fd1fb701ce3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:3a:bf:30:e5:f3:fa:3e:e3:c2:e2:fd:4d:
                    06:e5:cd:04:c0:7c:c5:ce:eb:41:59:b0:cd:a4:85:
                    ea:e4:ee:44:9a:1b:dc:02:c1:69:55:a6:57:3e:f6:
                    f4:15:5e:be:03:81:75:34:1e:43:cf:20:5d:55:a0:
                    6f:fa:b1:ea:37:00:8b:70:ca:77:22:39:40:84:2f:
                    b0:e1:45:46:5c:41:55:5d:d2:be:0b:43:4e:30:f1:
                    81:b9:11:fe:42:b7:3c:6a:1d:77:ee:b2:36:46:58:
                    db:3d:3e:da:5c:38:4b:90:e6:93:d7:e1:49:8d:21:
                    93:18:8a:e3:cc:94:f0:72:3e:1b:2b:66:97:3d:56:
                    15:f0:0e:56:54:08:06:fd:40:8a:59:6a:82:4a:c2:
                    8f:e5:7a:f4:e9:e3:07:a3:bf:c7:07:31:78:4a:d2:
                    b7:5a:8f:b1:8f:9a:a0:0e:9a:ed:0f:34:dd:d4:9e:
                    bd:9b:34:b2:7b:84:3f:ce:c6:53:4e:0d:70:9d:95:
                    e9:9a:db:72:3b:0c:20:a0:85:a5:9f:59:ac:3a:28:
                    ff:31:fb:3c:9e:3d:22:f7:1b:ed:a1:93:a7:45:72:
                    77:1e:f6:e2:1b:5c:a2:42:51:a7:13:56:e2:fe:2a:
                    c6:b3:b5:b3:8b:93:09:18:07:00:a4:e2:8b:27:26:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:64:DD:FF:4C:2E:18:D6:8F:F9:69:E7:E3:33:FD:1F:B7:01:CE:3C
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GGTd_0wuGNaP-Wnn4zP9H7cBzjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.236.0/22
                  45.149.184.0/22
                  45.153.4.0/22
                  45.154.104.0/23
                  45.158.8.0/22
                  45.158.168.0/22
                  91.199.168.0/24
                  141.98.156.0/23
                  147.78.120.0/22
                  152.89.250.0/23
                  176.105.224.0/23
                  193.29.96.0/22
                  193.111.116.0/23
                  193.142.22.0/24
                  193.151.180.0/22
                  193.176.54.0/23
                  194.5.146.0/23
                  194.104.156.0/24
                  194.104.158.0/24
                  194.105.21.0/24
                  194.147.4.0/22
                  195.20.98.0/23
                  195.20.105.0/24
                  195.206.230.0/23
                  195.206.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:54:e5:eb:b1:95:07:cb:a9:5f:b1:fd:a5:03:8c:2f:19:09:
         39:c9:f4:02:8e:d7:cf:8b:ab:89:3d:52:42:42:f3:22:6d:9b:
         97:2c:af:40:b4:7d:0e:ff:38:59:e4:fd:f0:d4:5b:13:ac:8b:
         73:55:aa:dc:67:fd:e6:cf:b4:26:e0:ab:73:d4:3e:92:2d:8c:
         67:2c:a0:01:2d:03:1d:fe:35:d6:70:db:65:3e:45:5e:1b:43:
         81:86:8f:ee:20:ef:36:82:51:03:c2:d7:ed:72:6e:6e:05:f1:
         91:ca:cf:3f:73:a7:21:2e:4c:6b:f6:6c:f2:c8:cf:d0:b4:2f:
         e2:12:54:2c:fb:7f:dc:0f:bf:35:90:01:e0:5d:76:55:91:b2:
         37:04:23:5b:d1:15:36:fd:11:3a:1e:6f:08:3a:51:80:59:48:
         4b:89:75:17:7c:c2:d8:ef:33:03:7f:eb:a9:4e:aa:71:5d:fe:
         9b:1a:63:3c:dc:67:e8:e2:99:a0:b3:b1:46:c9:1f:dc:c5:86:
         d0:9f:12:d0:fd:58:34:73:92:05:92:13:77:b2:62:75:72:48:
         26:4e:6e:51:e6:5c:2e:18:9c:66:4b:57:63:8d:df:64:2b:53:
         be:92:dc:b1:f2:cf:87:c0:da:49:ee:24:c1:96:ee:7e:e9:d8:
         4e:39:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org