Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/TPTipmCf9BsOGFcyPoYhIPJPS2A.roa
File:                     TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (raw, json)
Hash identifier:          aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=
Subject key identifier:   4C:F4:E2:A6:60:9F:F4:1B:0E:18:57:32:3E:86:21:20:F2:4F:4B:60
Certificate issuer:       /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial:       0194236A49AF589102539AEEDAD10B5771AF
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/TPTipmCf9BsOGFcyPoYhIPJPS2A.roa
Signing time:             Wed 01 Jan 2025 19:49:15 +0000
ROA not before:           Wed 01 Jan 2025 19:49:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57119
IP address blocks:        185.212.20.0/22 maxlen: 22
                          185.212.20.0/24 maxlen: 24
                          185.212.21.0/24 maxlen: 24
                          185.212.22.0/24 maxlen: 24
                          185.212.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:49:af:58:91:02:53:9a:ee:da:d1:0b:57:71:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
        Validity
            Not Before: Jan  1 19:49:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4cf4e2a6609ff41b0e1857323e862120f24f4b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:df:76:a9:05:3b:8c:80:0b:9c:80:f8:cf:
                    8f:02:bb:52:e1:bd:b6:a5:ec:ba:67:2f:f1:15:5a:
                    1b:e3:41:ca:be:3a:7c:15:44:75:dd:57:80:41:80:
                    2c:76:77:7b:47:b3:3f:e6:0b:9b:c7:72:b5:fd:88:
                    0d:0b:78:c8:d7:fd:37:5f:98:d4:e8:d4:e6:9f:08:
                    ba:d2:11:54:01:0c:d3:1d:2a:9a:7c:6d:fa:c0:d4:
                    a7:38:d1:80:85:dc:fa:6b:ac:b8:1f:ff:04:4b:c4:
                    f3:73:76:02:05:90:4d:75:95:35:f6:11:0e:d1:b5:
                    b9:16:22:6f:be:02:40:bc:cd:29:6d:85:29:27:3e:
                    b0:03:2e:86:2a:dc:7c:82:0b:bd:c4:2d:27:93:4a:
                    c8:8b:09:a0:04:92:ad:9e:7a:58:52:27:a6:cd:13:
                    31:a4:85:a8:25:05:58:ec:ae:ae:d3:78:20:f1:09:
                    ba:8d:dc:2f:78:bd:1f:3b:83:62:f5:f9:35:41:d8:
                    ff:3f:2d:03:32:63:b7:0d:8e:f9:1e:6a:27:14:2f:
                    78:5a:65:43:bc:f6:df:af:11:4a:59:a6:43:6d:dd:
                    7e:22:95:05:7a:35:f1:ed:bf:09:c6:d8:ad:8d:1a:
                    81:07:f0:11:4a:ec:e5:af:0e:c3:da:cd:24:55:3f:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F4:E2:A6:60:9F:F4:1B:0E:18:57:32:3E:86:21:20:F2:4F:4B:60
            X509v3 Authority Key Identifier:
                keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/TPTipmCf9BsOGFcyPoYhIPJPS2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:97:d3:f3:9c:c4:37:97:09:f5:2f:18:ff:87:81:82:79:3d:
         08:32:dc:a1:e4:78:9e:f9:e2:df:40:b4:79:75:eb:65:8e:dc:
         4b:10:6c:e1:72:23:00:cf:fd:47:61:17:a7:b9:6c:75:63:48:
         e6:b9:9c:d4:9d:b0:14:af:6e:d0:89:22:32:e7:0a:3f:31:22:
         3b:21:6c:8d:ef:94:e0:96:7a:04:ac:0d:03:53:e1:b5:ad:72:
         fb:27:76:83:45:34:eb:2b:26:e7:d0:61:95:a3:09:45:91:20:
         65:c3:6f:9a:6a:2e:72:26:7d:c2:16:ce:f4:bd:bf:c5:3e:9e:
         24:3b:23:b8:ca:c2:73:cd:23:c9:bb:53:5e:b8:1c:48:a3:a1:
         9b:77:d5:0e:af:52:36:f9:d0:b0:46:04:8a:2e:d0:af:f3:ed:
         f6:5f:05:8e:51:d4:0a:17:3f:e4:cc:ae:39:aa:b9:54:1f:0d:
         65:41:1d:20:7d:e0:01:8e:d0:ca:22:f0:03:02:79:1c:d0:16:
         1c:c7:5c:5e:7d:c0:5f:77:43:65:5a:d1:d5:65:8d:01:54:9f:
         f4:ad:9c:4a:3a:a7:2b:f4:90:e9:c5:cf:72:52:ae:f2:56:9c:
         20:fe:99:82:88:08:e9:27:fa:ed:35:e7:99:b2:9a:cb:bc:4c:
         d4:aa:91:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjakmvWJECU5ru2tELV3GvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZWE5ZjBmZjc2OTZlMDk3MzY3NDY1ZGUzNGI0ZWJkMDFi
NWQ3MmEwHhcNMjUwMTAxMTk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Y0ZTJhNjYwOWZmNDFiMGUxODU3MzIzZTg2MjEyMGYyNGY0YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW7fdqkFO4yAC5yA+M+PArtS4b22
pey6Zy/xFVob40HKvjp8FUR13VeAQYAsdnd7R7M/5gubx3K1/YgNC3jI1/03X5jU
6NTmnwi60hFUAQzTHSqafG36wNSnONGAhdz6a6y4H/8ES8Tzc3YCBZBNdZU19hEO
0bW5FiJvvgJAvM0pbYUpJz6wAy6GKtx8ggu9xC0nk0rIiwmgBJKtnnpYUiemzRMx
pIWoJQVY7K6u03gg8Qm6jdwveL0fO4Ni9fk1Qdj/Py0DMmO3DY75HmonFC94WmVD
vPbfrxFKWaZDbd1+IpUFejXx7b8JxtitjRqBB/ARSuzlrw7D2s0kVT/8mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEz04qZgn/QbDhhXMj6GISDyT0tgMB8GA1UdIwQY
MBaAFG3qnw/3aW4Jc2dGXeNLTr0BtdcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTIt
MWE5YWJhYjI0ZGM5LzEvVFBUaXBtQ2Y5QnNPR0ZjeVBvWWhJUEpQUzJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZmUxZWItM2ExYi00NGVlLWI4ZTItMWE5YWJhYjI0ZGM5
LzEvYmVxZkRfZHBiZ2x6WjBaZDQwdE92UUcxMXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudQUMA0G
CSqGSIb3DQEBCwUAA4IBAQAal9PznMQ3lwn1Lxj/h4GCeT0IMtyh5Hie+eLfQLR5
detljtxLEGzhciMAz/1HYRenuWx1Y0jmuZzUnbAUr27QiSIy5wo/MSI7IWyN75Tg
lnoErA0DU+G1rXL7J3aDRTTrKybn0GGVowlFkSBlw2+aai5yJn3CFs70vb/FPp4k
OyO4ysJzzSPJu1NeuBxIo6Gbd9UOr1I2+dCwRgSKLtCv8+32XwWOUdQKFz/kzK45
qrlUHw1lQR0gfeABjtDKIvADAnkc0BYcx1xefcBfd0NlWtHVZY0BVJ/0rZxKOqcr
9JDpxc9yUq7yVpwg/pmCiAjpJ/rtNeeZsprLvEzUqpHI
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:12 2025 by rpki-client