Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/975188-f017-49e3-b7b6-e92bf90ac5a3/1/lwjaUwSdLsC2UYbJ7xZbPiSps48.roa
File:                     lwjaUwSdLsC2UYbJ7xZbPiSps48.roa (raw, json)
Hash identifier:          dGwch+5JdyC69ZtaHCa9tFxIMI8WwJZD89BJjMP/0Os=
Subject key identifier:   97:08:DA:53:04:9D:2E:C0:B6:51:86:C9:EF:16:5B:3E:24:A9:B3:8F
Certificate issuer:       /CN=49d99fddb5bd8a2923c85279f6ee249c71678960
Certificate serial:       0BB22CAF
Authority key identifier: 49:D9:9F:DD:B5:BD:8A:29:23:C8:52:79:F6:EE:24:9C:71:67:89:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sdmf3bW9iikjyFJ59u4knHFniWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/975188-f017-49e3-b7b6-e92bf90ac5a3/1/lwjaUwSdLsC2UYbJ7xZbPiSps48.roa
Signing time:             Sat 01 Jan 2022 01:57:24 +0000
ROA not before:           Sat 01 Jan 2022 01:57:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13097
IP address blocks:        213.178.192.0/20 maxlen: 24
                          46.229.80.0/20 maxlen: 24
                          84.234.100.0/22 maxlen: 24
                          185.178.12.0/22 maxlen: 24
                          185.138.36.0/22 maxlen: 24
                          89.189.32.0/20 maxlen: 24
                          80.70.116.0/22 maxlen: 24
                          89.189.56.0/21 maxlen: 24
                          82.163.32.0/22 maxlen: 24
                          2a01:7540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196226223 (0xbb22caf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d99fddb5bd8a2923c85279f6ee249c71678960
        Validity
            Not Before: Jan  1 01:57:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9708da53049d2ec0b65186c9ef165b3e24a9b38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:0c:f5:4a:0d:10:8e:f6:3f:11:47:84:7e:
                    ff:d4:0d:f9:91:ea:c0:bc:8b:6f:13:fe:b6:8f:e5:
                    10:c0:fd:a5:b4:bb:31:ce:64:14:14:a8:61:ab:f9:
                    88:59:8e:5f:97:e9:73:31:14:48:50:9f:bb:81:3b:
                    fa:98:4b:ec:f9:38:a1:28:fe:6e:25:9c:e6:50:ea:
                    d0:96:ca:0e:85:73:86:df:4b:48:6f:4e:f5:1f:0d:
                    7b:55:ee:d0:0a:07:65:67:bf:ad:8c:54:c3:46:02:
                    ec:fe:ca:a6:97:30:85:83:b4:d7:fa:01:df:e6:39:
                    01:6a:12:e7:d5:0b:c7:5b:f5:65:7a:ff:9d:01:c3:
                    af:e3:2b:7b:73:a9:24:10:03:85:bf:13:9f:5d:ff:
                    6e:42:e2:98:10:25:98:d8:1b:b2:48:12:53:f6:5d:
                    56:8c:a7:02:fc:00:34:56:b9:6d:f0:e4:c5:07:d6:
                    39:cf:4a:e3:1e:dc:47:cd:b6:1d:99:01:ff:fb:d8:
                    b9:b7:2c:83:3a:08:04:2c:b1:93:ee:58:64:f4:83:
                    55:4d:26:18:44:e2:e9:cc:20:20:1d:20:75:8a:76:
                    fa:81:41:65:7d:85:12:5f:63:5b:44:5b:af:ef:18:
                    29:a4:88:3c:cc:b3:78:b9:2f:28:da:e4:83:04:d1:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:08:DA:53:04:9D:2E:C0:B6:51:86:C9:EF:16:5B:3E:24:A9:B3:8F
            X509v3 Authority Key Identifier:
                keyid:49:D9:9F:DD:B5:BD:8A:29:23:C8:52:79:F6:EE:24:9C:71:67:89:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sdmf3bW9iikjyFJ59u4knHFniWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/975188-f017-49e3-b7b6-e92bf90ac5a3/1/lwjaUwSdLsC2UYbJ7xZbPiSps48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/975188-f017-49e3-b7b6-e92bf90ac5a3/1/Sdmf3bW9iikjyFJ59u4knHFniWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.80.0/20
                  80.70.116.0/22
                  82.163.32.0/22
                  84.234.100.0/22
                  89.189.32.0/20
                  89.189.56.0/21
                  185.138.36.0/22
                  185.178.12.0/22
                  213.178.192.0/20
                IPv6:
                  2a01:7540::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:41:5e:3b:a7:bb:37:0f:e8:59:4b:71:f0:c0:a0:eb:1a:f0:
         99:2d:95:4d:b8:64:98:eb:38:63:af:35:ff:c0:d9:62:01:f8:
         0f:5c:50:fb:89:9b:b9:2b:cb:c7:7f:9e:6a:ba:dc:bb:1e:41:
         67:b0:d3:d0:55:50:4f:18:a0:6a:83:10:13:fe:44:aa:37:30:
         46:1e:d8:e6:eb:9a:97:25:bd:0c:68:65:00:e3:91:31:f5:ec:
         dc:eb:ac:52:0b:77:2f:cf:36:07:3e:99:b5:95:4d:d8:26:cf:
         d7:c0:54:4c:5b:8e:f9:5e:6d:b4:af:48:2e:79:7c:67:92:c7:
         24:6e:db:d4:5e:2e:2d:a1:43:2b:ea:4d:50:67:67:e5:a0:b9:
         af:10:6b:b1:cc:78:37:69:22:3d:61:07:13:56:4b:82:30:d8:
         da:96:ad:a7:cb:2a:97:95:65:95:77:8b:95:42:04:53:22:5e:
         e9:f3:57:3b:ae:0f:f4:95:63:5f:14:49:91:3a:74:3d:5a:8b:
         8b:bd:27:f2:83:27:44:05:9d:a9:a4:a1:ad:3c:4d:cd:67:88:
         f0:17:0f:f7:b4:c3:86:2a:fb:1b:fc:9a:9b:ae:c1:82:37:0d:
         da:f0:19:4c:34:2a:ac:4e:ea:ae:c1:2f:47:8d:36:1f:89:35:
         bf:53:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-fra.rpki-client.org