Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/zpLViSP1mtGrcERbXmR4V_Zd6cE.roa
File:                     zpLViSP1mtGrcERbXmR4V_Zd6cE.roa (raw, json)
Hash identifier:          yuKnJy9vuRLwT9M7eUlYmO+BbnE5uOEv2Od3+EfguMU=
Subject key identifier:   CE:92:D5:89:23:F5:9A:D1:AB:70:44:5B:5E:64:78:57:F6:5D:E9:C1
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       0194228D66E4FA07219CDBC8697549C6087C
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/zpLViSP1mtGrcERbXmR4V_Zd6cE.roa
Signing time:             Wed 01 Jan 2025 15:47:59 +0000
ROA not before:           Wed 01 Jan 2025 15:47:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49673
IP address blocks:        94.247.104.0/21 maxlen: 21
                          94.247.110.0/23 maxlen: 23
                          94.247.110.0/24 maxlen: 24
                          94.247.111.0/24 maxlen: 24
                          185.54.244.0/22 maxlen: 22
                          185.54.244.0/24 maxlen: 24
                          2a02:47a0:a::/48 maxlen: 48
                          2a02:47a0:a:112::/64 maxlen: 64
                          2a02:47a0:a:115::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:66:e4:fa:07:21:9c:db:c8:69:75:49:c6:08:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Jan  1 15:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ce92d58923f59ad1ab70445b5e647857f65de9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:4b:bd:b0:98:9a:0d:2d:24:bc:0a:d3:0e:
                    73:65:56:30:7d:8d:fd:2d:92:b1:f2:a6:7d:c3:da:
                    a0:fc:0e:d6:be:65:c9:cc:8b:68:9c:47:6c:7d:d8:
                    dd:eb:44:fa:37:14:98:3a:ad:1e:ee:91:8b:69:20:
                    30:44:57:d5:db:ad:19:88:21:50:04:1d:02:8b:02:
                    a3:84:94:01:a7:1a:9a:6d:72:7e:d1:51:1a:11:b7:
                    99:fb:2d:df:db:40:75:14:6e:6f:07:03:1e:ff:d3:
                    35:87:d8:fd:1a:08:d2:e3:44:5e:ab:77:60:1c:9a:
                    8e:b3:38:0d:70:08:f4:2f:cf:d0:4d:a3:90:a5:09:
                    64:a4:0b:f1:f1:0a:15:e1:1d:17:19:0b:6f:c8:4a:
                    48:3a:af:7a:31:71:7e:eb:c9:06:f6:fe:9c:85:db:
                    52:ef:a8:8b:42:c2:97:f3:9d:eb:80:b4:32:1d:e0:
                    ac:64:98:c0:1f:89:35:4b:1f:04:a4:be:70:19:7f:
                    f1:2b:18:2d:1d:65:b3:19:cd:1d:ed:55:b9:bd:a6:
                    55:ab:75:51:de:b5:30:91:5d:b8:58:9d:cb:2d:68:
                    0c:06:5a:90:31:85:7d:3e:ff:10:70:a4:77:52:a6:
                    54:de:44:34:a6:b9:a7:27:9c:83:70:f5:8a:ce:eb:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:92:D5:89:23:F5:9A:D1:AB:70:44:5B:5E:64:78:57:F6:5D:E9:C1
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/zpLViSP1mtGrcERbXmR4V_Zd6cE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.104.0/21
                  185.54.244.0/22
                IPv6:
                  2a02:47a0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:8b:2f:2e:ac:60:7d:07:9d:ad:04:86:59:d7:27:00:28:
         36:09:a5:98:6b:fd:61:5a:ca:0a:5b:77:d9:99:ff:db:1f:75:
         df:33:4d:56:9c:11:c2:6b:3c:f7:94:79:06:fb:4e:b8:81:eb:
         d4:69:bb:48:03:c7:1e:ff:4c:3e:ac:fc:00:20:b6:81:22:46:
         83:e4:8b:c2:a0:37:b5:20:23:29:ad:45:75:bc:bd:95:93:39:
         38:6f:7f:8f:e1:42:bb:cd:77:13:aa:91:b8:e5:8a:9d:1b:38:
         cd:a8:b0:86:42:b1:8d:b2:6b:33:66:70:82:72:f2:09:a3:54:
         24:e7:70:6e:6f:ed:e2:38:6f:af:5b:3d:c7:4d:db:3a:fb:05:
         3c:1c:c9:59:3b:ef:33:71:a3:be:db:95:8b:9c:3c:68:21:a8:
         1e:6a:35:f2:4d:2b:7e:21:af:f6:0d:29:4f:72:ab:00:72:7e:
         17:24:62:80:7b:a2:00:66:f5:37:e6:c0:1b:ea:c0:01:64:76:
         82:8e:1b:a9:e4:7c:d4:67:e0:f6:83:a9:04:e3:47:93:e7:74:
         82:f0:c8:99:4e:e9:fe:1d:1b:9b:14:b0:e4:0c:e7:b9:5e:73:
         34:8d:1f:76:78:07:f5:8e:fc:49:17:4f:2e:0f:08:03:70:1a:
         50:bd:8b:cc
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQijWbk+gchnNvIaXVJxgh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4
MGIxZTMwHhcNMjUwMTAxMTU0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTkyZDU4OTIzZjU5YWQxYWI3MDQ0NWI1ZTY0Nzg1N2Y2NWRlOWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBFLvbCYmg0tJLwK0w5zZVYwfY39
LZKx8qZ9w9qg/A7WvmXJzItonEdsfdjd60T6NxSYOq0e7pGLaSAwRFfV260ZiCFQ
BB0CiwKjhJQBpxqabXJ+0VEaEbeZ+y3f20B1FG5vBwMe/9M1h9j9GgjS40Req3dg
HJqOszgNcAj0L8/QTaOQpQlkpAvx8QoV4R0XGQtvyEpIOq96MXF+68kG9v6chdtS
76iLQsKX853rgLQyHeCsZJjAH4k1Sx8EpL5wGX/xKxgtHWWzGc0d7VW5vaZVq3VR
3rUwkV24WJ3LLWgMBlqQMYV9Pv8QcKR3UqZU3kQ0prmnJ5yDcPWKzutmJwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFM6S1Ykj9ZrRq3BEW15keFf2XenBMB8GA1UdIwQY
MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct
ZmZiNzA5Zjc2NjhjLzEvenBMVmlTUDFtdEdyY0VSYlhtUjRWX1pkNmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj
LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDXvdoAwQC
uTb0MA8EAgACMAkDBwAqAkegAAowDQYJKoZIhvcNAQELBQADggEBAEG8iy8urGB9
B52tBIZZ1ycAKDYJpZhr/WFaygpbd9mZ/9sfdd8zTVacEcJrPPeUeQb7TriB69Rp
u0gDxx7/TD6s/AAgtoEiRoPki8KgN7UgIymtRXW8vZWTOThvf4/hQrvNdxOqkbjl
ip0bOM2osIZCsY2yazNmcIJy8gmjVCTncG5v7eI4b69bPcdN2zr7BTwcyVk77zNx
o77blYucPGghqB5qNfJNK34hr/YNKU9yqwByfhckYoB7ogBm9TfmwBvqwAFkdoKO
G6nkfNRn4PaDqQTjR5PndILwyJlO6f4dG5sUsOQM57leczSNH3Z4B/WO/EkXTy4P
CANwGlC9i8w=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:41 2025 by rpki-client