Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ti3tdeClGg12pxHeRY6jcDkf96A.roa
File:                     Ti3tdeClGg12pxHeRY6jcDkf96A.roa (raw, json)
Hash identifier:          yucZMJzNF5J6iTEtAKesw33tvy0YSHvMCrjVHBJMFU8=
Subject key identifier:   4E:2D:ED:75:E0:A5:1A:0D:76:A7:11:DE:45:8E:A3:70:39:1F:F7:A0
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       01836008960A026210D9C034E0F4DF87D295
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ti3tdeClGg12pxHeRY6jcDkf96A.roa
Signing time:             Wed 21 Sep 2022 12:31:58 +0000
ROA not before:           Wed 21 Sep 2022 12:31:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        84.46.171.0/24 maxlen: 24
                          82.140.183.0/24 maxlen: 24
                          84.46.240.0/20 maxlen: 20
                          84.46.234.0/23 maxlen: 23
                          84.46.236.0/22 maxlen: 22
                          86.38.246.0/23 maxlen: 23
                          86.38.242.0/23 maxlen: 23
                          86.38.241.0/24 maxlen: 24
                          86.38.248.0/21 maxlen: 21
                          86.38.189.0/24 maxlen: 24
                          86.38.190.0/24 maxlen: 24
                          86.38.202.0/23 maxlen: 23
                          86.38.204.0/23 maxlen: 23
                          86.38.214.0/24 maxlen: 24
                          86.38.225.0/24 maxlen: 24
                          86.38.37.0/24 maxlen: 24
                          86.38.32.0/24 maxlen: 24
                          86.38.7.0/24 maxlen: 24
                          86.38.24.0/24 maxlen: 24
                          86.38.151.0/24 maxlen: 24
                          86.38.156.0/24 maxlen: 24
                          86.38.175.0/24 maxlen: 24
                          86.38.177.0/24 maxlen: 24
                          86.38.178.0/23 maxlen: 23
                          86.38.184.0/23 maxlen: 23
                          86.38.186.0/23 maxlen: 23
                          86.38.180.0/23 maxlen: 23
                          86.38.182.0/23 maxlen: 23
                          89.117.228.0/23 maxlen: 23
                          89.117.245.0/24 maxlen: 24
                          89.117.250.0/24 maxlen: 24
                          89.117.254.0/24 maxlen: 24
                          89.117.68.0/24 maxlen: 24
                          89.117.70.0/23 maxlen: 23
                          89.117.72.0/21 maxlen: 21
                          89.117.80.0/22 maxlen: 22
                          89.117.84.0/23 maxlen: 23
                          89.117.87.0/24 maxlen: 24
                          89.117.88.0/22 maxlen: 22
                          89.117.94.0/23 maxlen: 23
                          89.117.96.0/22 maxlen: 22
                          89.117.101.0/24 maxlen: 24
                          89.117.102.0/23 maxlen: 23
                          89.117.111.0/24 maxlen: 24
                          89.117.112.0/22 maxlen: 22
                          89.117.116.0/23 maxlen: 23
                          89.117.118.0/24 maxlen: 24
                          89.117.16.0/21 maxlen: 21
                          89.117.12.0/23 maxlen: 23
                          89.117.24.0/23 maxlen: 23
                          89.117.28.0/22 maxlen: 22
                          89.117.27.0/24 maxlen: 24
                          89.117.38.0/24 maxlen: 24
                          89.117.36.0/23 maxlen: 23
                          89.117.32.0/23 maxlen: 23
                          89.117.40.0/21 maxlen: 21
                          89.117.48.0/20 maxlen: 20
                          89.117.64.0/22 maxlen: 22
                          89.117.188.0/24 maxlen: 24
                          89.117.190.0/24 maxlen: 24
                          89.117.218.0/24 maxlen: 24
                          89.117.215.0/24 maxlen: 24
                          89.117.216.0/23 maxlen: 23
                          89.117.222.0/24 maxlen: 24
                          89.117.226.0/23 maxlen: 23
                          89.117.124.0/24 maxlen: 24
                          89.117.120.0/22 maxlen: 24
                          89.117.129.0/24 maxlen: 24
                          89.117.130.0/24 maxlen: 24
                          89.117.126.0/24 maxlen: 24
                          89.117.132.0/22 maxlen: 22
                          89.117.139.0/24 maxlen: 24
                          89.117.136.0/24 maxlen: 24
                          89.117.142.0/23 maxlen: 23
                          89.117.144.0/21 maxlen: 21
                          89.117.158.0/23 maxlen: 23
                          89.117.157.0/24 maxlen: 24
                          89.117.160.0/22 maxlen: 22
                          89.117.164.0/24 maxlen: 24
                          89.117.168.0/23 maxlen: 23
                          89.117.167.0/24 maxlen: 24
                          89.117.171.0/24 maxlen: 24
                          89.117.172.0/22 maxlen: 22
                          89.116.108.0/24 maxlen: 24
                          89.116.112.0/24 maxlen: 24
                          89.116.106.0/23 maxlen: 23
                          89.116.115.0/24 maxlen: 24
                          89.116.113.0/24 maxlen: 24
                          89.116.125.0/24 maxlen: 24
                          89.116.130.0/23 maxlen: 23
                          89.116.126.0/23 maxlen: 23
                          89.116.132.0/24 maxlen: 24
                          89.116.128.0/24 maxlen: 24
                          89.116.141.0/24 maxlen: 24
                          89.116.144.0/24 maxlen: 24
                          89.116.140.0/24 maxlen: 24
                          89.116.146.0/23 maxlen: 23
                          89.116.148.0/23 maxlen: 23
                          89.116.150.0/24 maxlen: 24
                          89.116.154.0/24 maxlen: 24
                          89.116.54.0/24 maxlen: 24
                          89.116.52.0/23 maxlen: 23
                          89.116.58.0/23 maxlen: 23
                          89.116.64.0/22 maxlen: 22
                          89.116.70.0/24 maxlen: 24
                          89.116.68.0/23 maxlen: 23
                          89.116.80.0/21 maxlen: 21
                          89.116.88.0/23 maxlen: 23
                          89.116.92.0/24 maxlen: 24
                          89.116.100.0/24 maxlen: 24
                          89.116.103.0/24 maxlen: 24
                          89.116.99.0/24 maxlen: 24
                          89.116.221.0/24 maxlen: 24
                          89.116.223.0/24 maxlen: 24
                          89.116.224.0/21 maxlen: 21
                          89.116.220.0/24 maxlen: 24
                          89.116.233.0/24 maxlen: 24
                          89.116.237.0/24 maxlen: 24
                          89.116.239.0/24 maxlen: 24
                          89.116.248.0/24 maxlen: 24
                          89.116.250.0/24 maxlen: 24
                          89.116.252.0/24 maxlen: 24
                          89.116.253.0/24 maxlen: 24
                          89.117.0.0/22 maxlen: 22
                          89.116.255.0/24 maxlen: 24
                          89.117.5.0/24 maxlen: 24
                          89.117.11.0/24 maxlen: 24
                          89.117.6.0/23 maxlen: 23
                          89.117.8.0/23 maxlen: 23
                          89.116.163.0/24 maxlen: 24
                          89.116.164.0/23 maxlen: 23
                          89.116.166.0/24 maxlen: 24
                          89.116.171.0/24 maxlen: 24
                          89.116.169.0/24 maxlen: 24
                          89.116.172.0/23 maxlen: 23
                          89.116.168.0/24 maxlen: 24
                          89.116.179.0/24 maxlen: 24
                          89.116.184.0/23 maxlen: 23
                          89.116.186.0/24 maxlen: 24
                          89.116.189.0/24 maxlen: 24
                          89.116.190.0/24 maxlen: 24
                          89.116.198.0/24 maxlen: 24
                          89.116.203.0/24 maxlen: 24
                          89.116.210.0/23 maxlen: 23
                          89.116.209.0/24 maxlen: 24
                          89.116.208.0/24 maxlen: 24
                          89.116.24.0/21 maxlen: 24
                          89.116.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:60:08:96:0a:02:62:10:d9:c0:34:e0:f4:df:87:d2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Sep 21 12:31:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e2ded75e0a51a0d76a711de458ea370391ff7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:4c:c7:bc:7c:b1:45:8f:da:46:8f:0c:cd:
                    c5:b7:4f:99:6a:30:78:5a:21:77:15:2b:00:29:4d:
                    2e:c6:a0:9e:81:7e:18:ab:f0:74:b6:a2:93:2d:12:
                    e9:c4:ae:3f:7d:3d:a4:f4:09:72:61:0a:86:ba:33:
                    9b:29:78:57:8c:35:e1:d4:ce:02:49:36:09:bd:f9:
                    d1:4b:0b:08:7d:aa:be:17:fc:30:82:28:ae:ad:56:
                    76:94:4f:2d:07:a4:7d:fd:d3:22:26:8a:f3:33:d2:
                    87:4a:75:b5:98:a2:d3:55:8b:f7:42:4b:9b:dd:ff:
                    ee:8e:ca:8c:5b:9a:78:c2:76:8d:5f:a9:72:44:6c:
                    29:93:c4:58:a3:a4:7c:06:59:41:f0:18:76:ab:65:
                    48:5a:09:7f:8c:7c:e7:d8:10:a6:9a:6c:9b:19:41:
                    17:7c:65:b4:bd:38:9b:d0:2a:4b:da:81:7f:9d:b8:
                    8e:b7:8d:35:03:ee:55:58:f9:f1:f1:ef:27:ca:57:
                    7b:07:82:98:41:ff:03:ba:94:9a:c9:e5:30:4b:94:
                    a5:5a:cd:c3:3c:c2:7a:5b:49:e0:eb:98:03:95:a4:
                    8f:49:86:89:88:1a:22:0e:11:c0:ef:e6:2f:22:cf:
                    e3:5f:02:78:a1:7d:67:f6:21:a4:12:ca:ec:1e:51:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2D:ED:75:E0:A5:1A:0D:76:A7:11:DE:45:8E:A3:70:39:1F:F7:A0
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ti3tdeClGg12pxHeRY6jcDkf96A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.183.0/24
                  84.46.171.0/24
                  84.46.234.0-84.46.255.255
                  86.38.7.0/24
                  86.38.24.0/24
                  86.38.32.0/24
                  86.38.37.0/24
                  86.38.151.0/24
                  86.38.156.0/24
                  86.38.175.0/24
                  86.38.177.0-86.38.187.255
                  86.38.189.0-86.38.190.255
                  86.38.202.0-86.38.205.255
                  86.38.214.0/24
                  86.38.225.0/24
                  86.38.241.0-86.38.243.255
                  86.38.246.0-86.38.255.255
                  89.116.24.0-89.116.39.255
                  89.116.52.0-89.116.54.255
                  89.116.58.0/23
                  89.116.64.0-89.116.70.255
                  89.116.80.0-89.116.89.255
                  89.116.92.0/24
                  89.116.99.0-89.116.100.255
                  89.116.103.0/24
                  89.116.106.0-89.116.108.255
                  89.116.112.0/23
                  89.116.115.0/24
                  89.116.125.0-89.116.128.255
                  89.116.130.0-89.116.132.255
                  89.116.140.0/23
                  89.116.144.0/24
                  89.116.146.0-89.116.150.255
                  89.116.154.0/24
                  89.116.163.0-89.116.166.255
                  89.116.168.0/23
                  89.116.171.0-89.116.173.255
                  89.116.179.0/24
                  89.116.184.0-89.116.186.255
                  89.116.189.0-89.116.190.255
                  89.116.198.0/24
                  89.116.203.0/24
                  89.116.208.0/22
                  89.116.220.0/23
                  89.116.223.0-89.116.231.255
                  89.116.233.0/24
                  89.116.237.0/24
                  89.116.239.0/24
                  89.116.248.0/24
                  89.116.250.0/24
                  89.116.252.0/23
                  89.116.255.0-89.117.3.255
                  89.117.5.0-89.117.9.255
                  89.117.11.0-89.117.13.255
                  89.117.16.0-89.117.25.255
                  89.117.27.0-89.117.33.255
                  89.117.36.0-89.117.38.255
                  89.117.40.0-89.117.68.255
                  89.117.70.0-89.117.85.255
                  89.117.87.0-89.117.91.255
                  89.117.94.0-89.117.99.255
                  89.117.101.0-89.117.103.255
                  89.117.111.0-89.117.118.255
                  89.117.120.0-89.117.124.255
                  89.117.126.0/24
                  89.117.129.0-89.117.130.255
                  89.117.132.0-89.117.136.255
                  89.117.139.0/24
                  89.117.142.0-89.117.151.255
                  89.117.157.0-89.117.164.255
                  89.117.167.0-89.117.169.255
                  89.117.171.0-89.117.175.255
                  89.117.188.0/24
                  89.117.190.0/24
                  89.117.215.0-89.117.218.255
                  89.117.222.0/24
                  89.117.226.0-89.117.229.255
                  89.117.245.0/24
                  89.117.250.0/24
                  89.117.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d0:77:12:e1:09:83:6f:a4:4f:30:41:7d:ae:b9:c6:e1:e3:
         31:f0:7b:1f:c0:2c:ff:a0:8d:ad:1f:ad:4e:83:88:a9:ac:c1:
         33:df:84:90:af:c7:e6:b4:5a:4c:da:c1:92:91:49:3a:60:ed:
         ee:5f:76:6e:a0:14:f3:64:1a:14:aa:60:5a:78:15:72:cb:bb:
         1c:40:6e:81:58:62:53:0f:da:02:63:7d:c1:a5:2e:a8:46:49:
         c6:97:96:c2:7e:d2:fd:a1:f0:9b:b6:7d:b5:dc:6e:d7:0c:b7:
         0b:22:04:24:20:a1:95:23:6c:db:c5:3e:26:9a:0b:93:61:d7:
         db:29:a8:e7:87:79:3e:92:41:b6:2d:c9:48:b6:e7:fd:96:9a:
         16:3c:76:61:af:5b:d8:04:ea:2f:78:62:3a:ed:a5:b4:36:9d:
         04:3b:d7:8b:4a:fb:9a:29:08:74:19:99:84:36:7b:5d:a0:89:
         53:9a:6b:44:fd:65:05:b9:5d:6d:0d:43:48:22:14:e3:8c:ec:
         02:63:58:7d:de:16:23:83:1f:b0:10:42:46:9e:0c:ce:28:6f:
         09:37:6e:ab:d0:02:d7:44:a7:b2:3f:b7:8c:74:02:9a:0e:25:
         ba:15:38:c1:29:5a:b7:bd:7e:16:1f:3b:5d:16:f4:c9:9b:66:
         9f:c8:9c:7c
-----BEGIN CERTIFICATE-----
MIIIJzCCBw+gAwIBAgISAYNgCJYKAmIQ2cA04PTfh9KVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwOTIxMTIzMTU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTJkZWQ3NWUwYTUxYTBkNzZhNzExZGU0NThlYTM3MDM5MWZmN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdFMx7x8sUWP2kaPDM3Ft0+ZajB4
WiF3FSsAKU0uxqCegX4Yq/B0tqKTLRLpxK4/fT2k9AlyYQqGujObKXhXjDXh1M4C
STYJvfnRSwsIfaq+F/wwgiiurVZ2lE8tB6R9/dMiJorzM9KHSnW1mKLTVYv3Qkub
3f/ujsqMW5p4wnaNX6lyRGwpk8RYo6R8BllB8Bh2q2VIWgl/jHzn2BCmmmybGUEX
fGW0vTib0CpL2oF/nbiOt401A+5VWPnx8e8nyld7B4KYQf8DupSayeUwS5SlWs3D
PMJ6W0ng65gDlaSPSYaJiBoiDhHA7+YvIs/jXwJ4oX1n9iGkEsrsHlEDPQIDAQAB
o4IFMzCCBS8wHQYDVR0OBBYEFE4t7XXgpRoNdqcR3kWOo3A5H/egMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvVGkzdGRlQ2xHZzEycHhIZVJZNmpjRGtmOTZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDRwYIKwYBBQUHAQcBAf8EggM2MIIDMjCCAy4EAgABMIID
JgMEAFKMtwMEAFQuqzALAwQBVC7qAwMAVC4DBABWJgcDBABWJhgDBABWJiADBABW
JiUDBABWJpcDBABWJpwDBABWJq8wDAMEAFYmsQMEAlYmuDAMAwQAVia9AwQAVia+
MAwDBAFWJsoDBAFWJswDBABWJtYDBABWJuEwDAMEAFYm8QMEAlYm8DALAwQBVib2
AwMAViYwDAMEA1l0GAMEA1l0IDAMAwQCWXQ0AwQAWXQ2AwQBWXQ6MAwDBAZZdEAD
BABZdEYwDAMEBFl0UAMEAVl0WAMEAFl0XDAMAwQAWXRjAwQAWXRkAwQAWXRnMAwD
BAFZdGoDBABZdGwDBAFZdHADBABZdHMwDAMEAFl0fQMEAFl0gDAMAwQBWXSCAwQA
WXSEAwQBWXSMAwQAWXSQMAwDBAFZdJIDBABZdJYDBABZdJowDAMEAFl0owMEAFl0
pgMEAVl0qDAMAwQAWXSrAwQBWXSsAwQAWXSzMAwDBANZdLgDBABZdLowDAMEAFl0
vQMEAFl0vgMEAFl0xgMEAFl0ywMEAll00AMEAVl03DAMAwQAWXTfAwQDWXTgAwQA
WXTpAwQAWXTtAwQAWXTvAwQAWXT4AwQAWXT6AwQBWXT8MAwDBABZdP8DBAJZdQAw
DAMEAFl1BQMEAVl1CDAMAwQAWXULAwQBWXUMMAwDBARZdRADBAFZdRgwDAMEAFl1
GwMEAVl1IDAMAwQCWXUkAwQAWXUmMAwDBANZdSgDBABZdUQwDAMEAVl1RgMEAVl1
VDAMAwQAWXVXAwQCWXVYMAwDBAFZdV4DBAJZdWAwDAMEAFl1ZQMEA1l1YDAMAwQA
WXVvAwQAWXV2MAwDBANZdXgDBABZdXwDBABZdX4wDAMEAFl1gQMEAFl1gjAMAwQC
WXWEAwQAWXWIAwQAWXWLMAwDBAFZdY4DBANZdZAwDAMEAFl1nQMEAFl1pDAMAwQA
WXWnAwQBWXWoMAwDBABZdasDBARZdaADBABZdbwDBABZdb4wDAMEAFl11wMEAFl1
2gMEAFl13jAMAwQBWXXiAwQBWXXkAwQAWXX1AwQAWXX6AwQAWXX+MA0GCSqGSIb3
DQEBCwUAA4IBAQBH0HcS4QmDb6RPMEF9rrnG4eMx8HsfwCz/oI2tH61Og4iprMEz
34SQr8fmtFpM2sGSkUk6YO3uX3ZuoBTzZBoUqmBaeBVyy7scQG6BWGJTD9oCY33B
pS6oRknGl5bCftL9ofCbtn213G7XDLcLIgQkIKGVI2zbxT4mmguTYdfbKajnh3k+
kkG2LclItuf9lpoWPHZhr1vYBOoveGI67aW0Np0EO9eLSvuaKQh0GZmENntdoIlT
mmtE/WUFuV1tDUNIIhTjjOwCY1h93hYjgx+wEEJGngzOKG8JN26r0ALXRKeyP7eM
dAKaDiW6FTjBKVq3vX4WHztdFvTJm2afyJx8
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org