Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/9BmgjilKIBwcB7xDx0Xam3ufG7o.roa
File:                     9BmgjilKIBwcB7xDx0Xam3ufG7o.roa (raw, json)
Hash identifier:          8s77VCqcVY3D/PZG46OXUG5G2JU6qnTmVOs1u51adlY=
Subject key identifier:   F4:19:A0:8E:29:4A:20:1C:1C:07:BC:43:C7:45:DA:9B:7B:9F:1B:BA
Certificate issuer:       /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial:       0186A1C999A8A092CB1794080C7E89D703BF
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/9BmgjilKIBwcB7xDx0Xam3ufG7o.roa
Signing time:             Thu 02 Mar 2023 10:06:29 +0000
ROA not before:           Thu 02 Mar 2023 10:06:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8315
IP address blocks:        162.248.196.0/22 maxlen: 24
                          185.113.196.0/22 maxlen: 24
                          94.198.24.0/21 maxlen: 24
                          185.113.224.0/22 maxlen: 24
                          5.100.224.0/21 maxlen: 24
                          213.171.128.0/19 maxlen: 24
                          213.171.144.0/20 maxlen: 24
                          89.18.188.0/22 maxlen: 24
                          79.99.184.0/21 maxlen: 24
                          185.113.52.0/22 maxlen: 24
                          89.18.160.0/22 maxlen: 24
                          89.18.160.0/19 maxlen: 24
                          89.18.168.0/21 maxlen: 24
                          162.251.32.0/21 maxlen: 24
                          89.18.180.0/22 maxlen: 24
                          185.12.132.0/22 maxlen: 24
                          178.251.192.0/21 maxlen: 24
                          176.62.192.0/21 maxlen: 24
                          213.214.96.0/19 maxlen: 24
                          83.98.192.0/21 maxlen: 24
                          194.105.128.0/23 maxlen: 24
                          83.98.200.0/22 maxlen: 24
                          83.98.208.0/20 maxlen: 24
                          213.247.32.0/19 maxlen: 24
                          91.216.113.0/24 maxlen: 24
                          193.34.150.0/23 maxlen: 24
                          91.216.141.0/24 maxlen: 24
                          85.92.128.0/19 maxlen: 24
                          185.38.156.0/22 maxlen: 24
                          85.92.128.0/20 maxlen: 24
                          85.92.144.0/22 maxlen: 24
                          85.92.152.0/21 maxlen: 24
                          91.200.51.0/24 maxlen: 24
                          91.200.48.0/23 maxlen: 24
                          85.158.160.0/21 maxlen: 24
                          85.158.160.0/22 maxlen: 24
                          85.158.164.0/22 maxlen: 24
                          134.0.88.0/22 maxlen: 24
                          134.0.88.0/21 maxlen: 24
                          134.0.92.0/23 maxlen: 24
                          213.189.0.0/19 maxlen: 24
                          213.189.0.0/21 maxlen: 24
                          213.189.8.0/22 maxlen: 24
                          185.77.120.0/22 maxlen: 24
                          194.165.34.0/24 maxlen: 24
                          217.195.112.0/20 maxlen: 24
                          89.30.128.0/18 maxlen: 24
                          185.74.77.0/24 maxlen: 24
                          185.74.76.0/24 maxlen: 24
                          89.30.240.0/21 maxlen: 24
                          83.98.128.0/18 maxlen: 24
                          89.30.192.0/19 maxlen: 24
                          213.189.16.0/20 maxlen: 24
                          85.222.192.0/21 maxlen: 24
                          93.175.176.0/20 maxlen: 24
                          89.30.224.0/22 maxlen: 24
                          89.30.224.0/21 maxlen: 24
                          185.30.236.0/22 maxlen: 24
                          2a00:1bd8::/32 maxlen: 48
                          2a02:2858::/29 maxlen: 48
                          2a02:20b0::/32 maxlen: 48
                          2001:4198::/32 maxlen: 48
                          2a02:2858:500::/40 maxlen: 40
                          2001:16f8::/32 maxlen: 48
                          2a02:20b2::/32 maxlen: 48
                          2a02:20b1::/32 maxlen: 48
                          2a03:5500::/31 maxlen: 48
                          2a01:40e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a1:c9:99:a8:a0:92:cb:17:94:08:0c:7e:89:d7:03:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
        Validity
            Not Before: Mar  2 10:06:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f419a08e294a201c1c07bc43c745da9b7b9f1bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c8:70:df:3e:1d:52:d8:44:8b:3f:94:6a:80:
                    69:9c:83:7e:04:c3:ff:d2:60:c4:a8:e8:47:d3:d8:
                    12:81:64:49:ef:26:d0:06:fd:94:7d:e4:f5:97:a6:
                    3c:a0:31:b2:db:30:69:bd:19:f4:4e:df:cb:95:48:
                    cd:c6:2f:f2:37:86:a0:25:b1:0f:3b:e1:c3:3f:de:
                    98:b9:c3:df:d5:f1:b4:a3:0c:63:56:b8:fa:4b:da:
                    a6:03:4f:7b:69:b6:c5:18:c7:bc:2d:cc:d7:f3:94:
                    ea:74:6a:4f:c9:17:69:2a:c6:d8:d1:46:97:61:69:
                    7c:f4:80:a0:45:fe:01:52:a0:32:d1:17:c1:04:a9:
                    5d:a7:21:80:a3:76:ca:0b:72:71:27:e6:55:55:fe:
                    d8:63:77:02:22:f5:d6:66:ee:60:7e:d9:94:e7:37:
                    57:e1:7b:6a:20:64:d6:a5:b4:99:b9:4a:66:e9:e5:
                    5e:c8:8a:b7:01:b3:a0:d1:57:ab:c6:b0:d9:c2:fb:
                    ad:9b:a7:94:6c:7d:6d:56:16:02:c2:47:e4:ab:d3:
                    8d:29:0b:b5:bb:d4:70:cb:69:bf:6e:0b:f5:60:62:
                    10:12:0a:4e:1b:08:94:13:f0:3a:f1:2f:e7:29:62:
                    84:ba:1c:3d:bc:13:87:2b:d2:42:0e:ce:81:87:79:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:19:A0:8E:29:4A:20:1C:1C:07:BC:43:C7:45:DA:9B:7B:9F:1B:BA
            X509v3 Authority Key Identifier:
                keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/9BmgjilKIBwcB7xDx0Xam3ufG7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.100.224.0/21
                  79.99.184.0/21
                  83.98.128.0-83.98.203.255
                  83.98.208.0/20
                  85.92.128.0/19
                  85.158.160.0/21
                  85.222.192.0/21
                  89.18.160.0/19
                  89.30.128.0-89.30.231.255
                  89.30.240.0/21
                  91.200.48.0/23
                  91.200.51.0/24
                  91.216.113.0/24
                  91.216.141.0/24
                  93.175.176.0/20
                  94.198.24.0/21
                  134.0.88.0/21
                  162.248.196.0/22
                  162.251.32.0/21
                  176.62.192.0/21
                  178.251.192.0/21
                  185.12.132.0/22
                  185.30.236.0/22
                  185.38.156.0/22
                  185.74.76.0/23
                  185.77.120.0/22
                  185.113.52.0/22
                  185.113.196.0/22
                  185.113.224.0/22
                  193.34.150.0/23
                  194.105.128.0/23
                  194.165.34.0/24
                  213.171.128.0/19
                  213.189.0.0/19
                  213.214.96.0/19
                  213.247.32.0/19
                  217.195.112.0/20
                IPv6:
                  2001:16f8::/32
                  2001:4198::/32
                  2a00:1bd8::/32
                  2a01:40e0::/32
                  2a02:20b0::-2a02:20b2:ffff:ffff:ffff:ffff:ffff:ffff
                  2a02:2858::/29
                  2a03:5500::/31

    Signature Algorithm: sha256WithRSAEncryption
         56:e5:af:ce:e9:0e:86:9e:41:99:d6:a9:fd:0f:78:de:c5:6a:
         af:13:6b:7e:de:71:e0:49:80:98:e3:80:d2:bc:2d:3e:34:be:
         6e:51:c3:68:6e:d1:bd:8b:49:6f:65:9b:c2:df:20:72:a0:0e:
         4a:4e:b1:e1:84:83:53:4e:8c:22:9d:fa:0d:ed:ac:e8:31:d6:
         e3:34:6e:c7:68:76:9c:ed:b7:b3:52:ea:ce:a2:ed:92:d8:3f:
         d7:1d:19:de:ed:17:1c:d4:e4:41:38:e0:46:ab:1f:23:b7:16:
         86:64:83:c3:f7:f3:b0:2d:67:42:b9:bf:f9:f9:41:2c:3d:4f:
         be:98:4f:7e:af:bc:a8:57:06:fb:b4:90:ee:0c:6b:06:03:79:
         11:28:65:9d:f7:3b:1e:3f:55:30:24:4d:98:12:99:9b:4a:00:
         3d:60:34:9c:ee:27:0f:4b:b6:79:53:76:d7:bd:5d:eb:f8:49:
         c9:fb:a0:14:f5:a2:6d:55:42:96:54:38:95:98:7b:b5:a1:13:
         18:64:92:87:61:fd:ed:11:2b:b3:0a:f4:e4:f3:34:32:77:f8:
         40:89:48:8d:11:35:49:28:76:20:42:31:76:53:f9:41:37:68:
         68:ba:e9:80:98:79:fe:12:99:c7:b7:e9:2a:84:b9:f9:4e:4e:
         a3:4a:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org