Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TWW_a0h1B702DnN2cr1shXLCQ1Y.roa
File:                     TWW_a0h1B702DnN2cr1shXLCQ1Y.roa (raw, json)
Hash identifier:          eZ5XzOM81Gfk5bMBb1ZiDsvyIdiXhU3ZZ11C2+ag3sw=
Subject key identifier:   4D:65:BF:6B:48:75:07:BD:36:0E:73:76:72:BD:6C:85:72:C2:43:56
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0ACC8CCB
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TWW_a0h1B702DnN2cr1shXLCQ1Y.roa
Signing time:             Thu 12 May 2022 07:52:03 +0000
ROA not before:           Thu 12 May 2022 07:52:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207152
IP address blocks:        89.117.70.0/23 maxlen: 24
                          89.117.68.0/24 maxlen: 24
                          89.117.72.0/21 maxlen: 24
                          89.117.84.0/23 maxlen: 24
                          89.117.88.0/22 maxlen: 24
                          89.117.94.0/23 maxlen: 24
                          89.117.96.0/22 maxlen: 24
                          89.117.102.0/23 maxlen: 24
                          89.117.112.0/22 maxlen: 24
                          89.117.109.0/24 maxlen: 24
                          89.117.116.0/23 maxlen: 24
                          89.117.12.0/23 maxlen: 24
                          89.117.24.0/23 maxlen: 24
                          89.117.28.0/22 maxlen: 24
                          89.117.36.0/23 maxlen: 24
                          89.117.32.0/23 maxlen: 24
                          89.117.64.0/22 maxlen: 24
                          89.117.190.0/24 maxlen: 24
                          89.117.188.0/24 maxlen: 24
                          89.117.215.0/24 maxlen: 24
                          89.117.222.0/24 maxlen: 24
                          89.117.132.0/22 maxlen: 24
                          89.117.129.0/24 maxlen: 24
                          89.117.139.0/24 maxlen: 24
                          89.117.142.0/23 maxlen: 24
                          89.117.158.0/23 maxlen: 24
                          89.117.160.0/22 maxlen: 24
                          84.46.234.0/23 maxlen: 24
                          89.116.106.0/23 maxlen: 24
                          86.38.246.0/23 maxlen: 24
                          89.116.108.0/24 maxlen: 24
                          89.116.125.0/24 maxlen: 24
                          89.116.126.0/23 maxlen: 24
                          89.116.132.0/24 maxlen: 24
                          89.116.128.0/24 maxlen: 24
                          89.116.130.0/23 maxlen: 24
                          89.116.137.0/24 maxlen: 24
                          89.116.135.0/24 maxlen: 24
                          89.116.141.0/24 maxlen: 24
                          89.116.150.0/24 maxlen: 24
                          89.116.148.0/23 maxlen: 24
                          89.116.158.0/24 maxlen: 24
                          89.116.154.0/24 maxlen: 24
                          89.116.153.0/24 maxlen: 24
                          89.116.58.0/23 maxlen: 24
                          89.116.68.0/23 maxlen: 24
                          89.116.70.0/24 maxlen: 24
                          86.38.202.0/23 maxlen: 24
                          89.116.88.0/23 maxlen: 24
                          89.116.92.0/24 maxlen: 24
                          89.116.218.0/24 maxlen: 24
                          89.116.253.0/24 maxlen: 24
                          89.116.252.0/24 maxlen: 24
                          89.116.255.0/24 maxlen: 24
                          89.117.8.0/23 maxlen: 24
                          89.117.6.0/23 maxlen: 24
                          89.116.166.0/24 maxlen: 24
                          89.116.163.0/24 maxlen: 24
                          89.116.161.0/24 maxlen: 24
                          89.116.172.0/23 maxlen: 24
                          89.116.179.0/24 maxlen: 24
                          89.116.177.0/24 maxlen: 24
                          89.116.175.0/24 maxlen: 24
                          89.116.186.0/24 maxlen: 24
                          89.116.184.0/23 maxlen: 24
                          89.116.190.0/24 maxlen: 24
                          89.116.189.0/24 maxlen: 24
                          89.116.210.0/23 maxlen: 24
                          86.38.178.0/23 maxlen: 24
                          86.38.186.0/23 maxlen: 24
                          86.38.184.0/23 maxlen: 24
                          86.38.182.0/23 maxlen: 24
                          89.117.228.0/23 maxlen: 24
                          89.117.245.0/24 maxlen: 24
                          89.117.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181177547 (0xacc8ccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: May 12 07:52:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d65bf6b487507bd360e737672bd6c8572c24356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:80:1f:6c:80:33:46:46:8d:ac:c1:f6:85:
                    b1:a9:12:7c:25:2f:56:13:90:bd:5d:69:a3:1b:84:
                    83:83:12:c3:cc:eb:f8:b6:ef:a5:6d:f8:dd:d3:ba:
                    6f:a2:cd:fa:b4:4e:3e:b0:f3:bf:39:ca:35:1d:8d:
                    3b:00:18:96:a2:97:6b:e8:ba:ea:45:55:9c:54:72:
                    73:60:44:97:8e:f8:df:a4:0d:a2:4f:90:e6:67:60:
                    84:13:5d:3c:2d:13:36:dc:f5:8a:c9:0c:bd:6d:18:
                    65:e0:44:c9:8f:e3:a6:e9:06:4d:36:88:ad:ac:0d:
                    47:91:bb:b2:0b:3b:d4:c6:9e:1e:f2:3e:b2:6f:2a:
                    97:01:91:4f:ec:2a:0c:04:ef:3d:02:eb:29:19:1e:
                    ac:01:69:e7:85:85:87:52:46:59:77:b3:25:07:55:
                    e8:8a:4d:e2:5f:07:4f:e8:22:16:cb:d8:bd:8c:5e:
                    64:67:39:73:fc:b1:4c:10:11:83:db:bc:e0:d5:b5:
                    be:d6:b6:7c:3a:01:c8:d5:6f:b5:6b:d0:cc:2f:bd:
                    d1:bb:15:a0:29:c4:e2:ae:f9:38:da:43:e9:b1:75:
                    87:71:d1:f1:62:8b:93:16:4e:96:95:eb:bd:18:18:
                    cb:d5:23:90:4b:c8:f0:46:e1:30:d9:fb:04:25:07:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:65:BF:6B:48:75:07:BD:36:0E:73:76:72:BD:6C:85:72:C2:43:56
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TWW_a0h1B702DnN2cr1shXLCQ1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.234.0/23
                  86.38.178.0/23
                  86.38.182.0-86.38.187.255
                  86.38.202.0/23
                  86.38.246.0/23
                  89.116.58.0/23
                  89.116.68.0-89.116.70.255
                  89.116.88.0/23
                  89.116.92.0/24
                  89.116.106.0-89.116.108.255
                  89.116.125.0-89.116.128.255
                  89.116.130.0-89.116.132.255
                  89.116.135.0/24
                  89.116.137.0/24
                  89.116.141.0/24
                  89.116.148.0-89.116.150.255
                  89.116.153.0-89.116.154.255
                  89.116.158.0/24
                  89.116.161.0/24
                  89.116.163.0/24
                  89.116.166.0/24
                  89.116.172.0/23
                  89.116.175.0/24
                  89.116.177.0/24
                  89.116.179.0/24
                  89.116.184.0-89.116.186.255
                  89.116.189.0-89.116.190.255
                  89.116.210.0/23
                  89.116.218.0/24
                  89.116.252.0/23
                  89.116.255.0/24
                  89.117.6.0-89.117.9.255
                  89.117.12.0/23
                  89.117.24.0/23
                  89.117.28.0-89.117.33.255
                  89.117.36.0/23
                  89.117.64.0-89.117.68.255
                  89.117.70.0-89.117.79.255
                  89.117.84.0/23
                  89.117.88.0/22
                  89.117.94.0-89.117.99.255
                  89.117.102.0/23
                  89.117.109.0/24
                  89.117.112.0-89.117.117.255
                  89.117.129.0/24
                  89.117.132.0/22
                  89.117.139.0/24
                  89.117.142.0/23
                  89.117.158.0-89.117.163.255
                  89.117.188.0/24
                  89.117.190.0/24
                  89.117.215.0/24
                  89.117.222.0/24
                  89.117.228.0/23
                  89.117.245.0/24
                  89.117.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:5c:d3:a0:c1:23:f0:60:96:70:e5:51:05:5d:08:f6:c1:76:
         04:36:f2:f9:43:61:99:20:77:d9:52:36:f3:cc:fc:a2:2b:97:
         18:13:48:15:23:e2:c6:7b:0a:ff:f8:56:ef:25:e1:17:25:f2:
         68:52:ea:30:b1:af:7f:fe:9d:74:6f:9d:18:4f:98:03:3a:1e:
         02:7c:6b:eb:36:66:11:f1:c4:25:e9:b2:ce:b9:1e:75:8b:6d:
         7b:c7:84:3e:82:f1:e8:a7:b8:11:40:7d:6e:9c:b6:4f:16:f9:
         9c:ac:86:0c:d3:c1:d3:26:f5:07:cd:32:30:f4:d2:9e:9e:c9:
         65:66:39:48:6b:f2:aa:ff:14:de:81:5a:1d:5c:6f:43:a4:6a:
         7e:ed:1b:c2:d2:8d:e1:b1:a9:5a:85:fb:df:90:2c:7c:5c:9b:
         65:10:8d:04:b2:75:6e:e2:19:ef:d6:7e:c9:14:d7:61:9d:64:
         fc:de:c5:ac:9b:24:8c:66:8a:d8:d6:d9:cc:ae:27:bf:37:19:
         4e:97:b4:3c:7e:58:36:2e:86:d4:31:5d:8d:84:8e:e5:a3:48:
         e7:1b:67:f7:83:a2:c6:6a:31:53:d5:dd:20:c5:ad:7c:7d:72:
         5d:56:79:d8:34:f5:be:88:dd:58:2d:bb:bc:d6:87:22:4c:e4:
         d4:b6:00:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org