Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/eV-fO3R58qfET8VH8eGds4h156k.roa
File:                     eV-fO3R58qfET8VH8eGds4h156k.roa (raw, json)
Hash identifier:          CFkmccWk2CWT88EEYqRVBTRTf9zRKOsSMsgNiNeYl1k=
Subject key identifier:   79:5F:9F:3B:74:79:F2:A7:C4:4F:C5:47:F1:E1:9D:B3:88:75:E7:A9
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0B0C0F97
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/eV-fO3R58qfET8VH8eGds4h156k.roa
Signing time:             Wed 25 May 2022 09:29:32 +0000
ROA not before:           Wed 25 May 2022 09:29:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207152
IP address blocks:        89.117.70.0/23 maxlen: 24
                          89.117.72.0/21 maxlen: 24
                          89.117.84.0/23 maxlen: 24
                          89.117.88.0/22 maxlen: 24
                          89.117.94.0/23 maxlen: 24
                          89.117.96.0/22 maxlen: 24
                          89.117.102.0/23 maxlen: 24
                          89.117.112.0/22 maxlen: 24
                          89.117.109.0/24 maxlen: 24
                          89.117.116.0/23 maxlen: 24
                          89.117.12.0/23 maxlen: 24
                          89.117.24.0/23 maxlen: 24
                          89.117.28.0/22 maxlen: 24
                          89.117.36.0/23 maxlen: 24
                          89.117.32.0/23 maxlen: 24
                          89.117.64.0/22 maxlen: 24
                          89.117.190.0/24 maxlen: 24
                          89.117.188.0/24 maxlen: 24
                          89.117.215.0/24 maxlen: 24
                          89.117.222.0/24 maxlen: 24
                          89.117.132.0/22 maxlen: 24
                          89.117.129.0/24 maxlen: 24
                          89.117.139.0/24 maxlen: 24
                          89.117.142.0/23 maxlen: 24
                          89.117.158.0/23 maxlen: 24
                          89.117.160.0/22 maxlen: 24
                          84.46.234.0/23 maxlen: 24
                          89.116.106.0/23 maxlen: 24
                          86.38.246.0/23 maxlen: 24
                          89.116.108.0/24 maxlen: 24
                          89.116.125.0/24 maxlen: 24
                          89.116.126.0/23 maxlen: 24
                          89.116.132.0/24 maxlen: 24
                          89.116.128.0/24 maxlen: 24
                          89.116.130.0/23 maxlen: 24
                          89.116.137.0/24 maxlen: 24
                          89.116.135.0/24 maxlen: 24
                          89.116.141.0/24 maxlen: 24
                          89.116.150.0/24 maxlen: 24
                          89.116.148.0/23 maxlen: 24
                          89.116.158.0/24 maxlen: 24
                          89.116.154.0/24 maxlen: 24
                          89.116.153.0/24 maxlen: 24
                          89.116.58.0/23 maxlen: 24
                          89.116.68.0/23 maxlen: 24
                          86.38.202.0/23 maxlen: 24
                          89.116.88.0/23 maxlen: 24
                          89.116.92.0/24 maxlen: 24
                          89.116.218.0/24 maxlen: 24
                          89.116.253.0/24 maxlen: 24
                          89.116.252.0/24 maxlen: 24
                          89.116.255.0/24 maxlen: 24
                          89.117.8.0/23 maxlen: 24
                          89.116.166.0/24 maxlen: 24
                          89.116.163.0/24 maxlen: 24
                          89.116.161.0/24 maxlen: 24
                          89.116.172.0/23 maxlen: 24
                          89.116.179.0/24 maxlen: 24
                          89.116.177.0/24 maxlen: 24
                          89.116.175.0/24 maxlen: 24
                          89.116.186.0/24 maxlen: 24
                          89.116.184.0/23 maxlen: 24
                          89.116.190.0/24 maxlen: 24
                          89.116.189.0/24 maxlen: 24
                          89.116.210.0/23 maxlen: 24
                          86.38.178.0/23 maxlen: 24
                          86.38.186.0/23 maxlen: 24
                          86.38.184.0/23 maxlen: 24
                          89.117.228.0/23 maxlen: 24
                          89.117.245.0/24 maxlen: 24
                          89.117.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185339799 (0xb0c0f97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: May 25 09:29:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=795f9f3b7479f2a7c44fc547f1e19db38875e7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:60:1a:2c:32:74:22:5c:f8:44:b5:0c:b9:bc:
                    83:82:d4:c9:1c:58:df:7d:af:ee:c1:61:64:79:92:
                    70:c6:e9:fb:ed:a9:07:fa:02:a8:8e:fa:c5:0c:19:
                    7f:ac:ca:ab:5e:bd:8e:e6:d6:bc:03:b7:f6:9a:e7:
                    7e:30:1d:ee:c2:36:c9:4e:37:ef:74:fb:dc:c1:31:
                    94:e3:d1:5b:9f:e6:53:c0:c4:18:58:80:61:f3:c0:
                    1f:2e:4e:b6:e7:36:bb:54:37:dc:ba:10:20:7b:e7:
                    cf:89:44:62:26:2b:64:01:c4:9e:b8:44:58:cf:4b:
                    c0:55:e5:1d:f3:4c:07:4b:31:68:62:5d:a3:ef:25:
                    9c:50:7b:37:63:d2:2e:1f:7c:ed:16:97:d9:41:fc:
                    2b:07:c0:d8:fd:27:37:d6:6a:ed:c7:86:cd:ab:9c:
                    63:f1:69:cf:a8:21:bb:68:51:dc:23:84:8b:38:67:
                    31:0f:90:3c:e6:43:b0:da:ef:a8:88:9e:13:86:c9:
                    c9:4a:55:fd:53:c9:86:c5:73:9d:ea:c0:07:a2:12:
                    76:42:ee:00:b4:03:7d:66:95:90:97:3a:3c:4e:0f:
                    bc:5e:41:01:02:08:3e:cc:5e:82:f7:b3:e7:0e:9c:
                    47:ed:a9:f9:f3:0e:b4:67:5b:31:0f:e3:8f:d3:aa:
                    57:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5F:9F:3B:74:79:F2:A7:C4:4F:C5:47:F1:E1:9D:B3:88:75:E7:A9
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/eV-fO3R58qfET8VH8eGds4h156k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.234.0/23
                  86.38.178.0/23
                  86.38.184.0/22
                  86.38.202.0/23
                  86.38.246.0/23
                  89.116.58.0/23
                  89.116.68.0/23
                  89.116.88.0/23
                  89.116.92.0/24
                  89.116.106.0-89.116.108.255
                  89.116.125.0-89.116.128.255
                  89.116.130.0-89.116.132.255
                  89.116.135.0/24
                  89.116.137.0/24
                  89.116.141.0/24
                  89.116.148.0-89.116.150.255
                  89.116.153.0-89.116.154.255
                  89.116.158.0/24
                  89.116.161.0/24
                  89.116.163.0/24
                  89.116.166.0/24
                  89.116.172.0/23
                  89.116.175.0/24
                  89.116.177.0/24
                  89.116.179.0/24
                  89.116.184.0-89.116.186.255
                  89.116.189.0-89.116.190.255
                  89.116.210.0/23
                  89.116.218.0/24
                  89.116.252.0/23
                  89.116.255.0/24
                  89.117.8.0/23
                  89.117.12.0/23
                  89.117.24.0/23
                  89.117.28.0-89.117.33.255
                  89.117.36.0/23
                  89.117.64.0/22
                  89.117.70.0-89.117.79.255
                  89.117.84.0/23
                  89.117.88.0/22
                  89.117.94.0-89.117.99.255
                  89.117.102.0/23
                  89.117.109.0/24
                  89.117.112.0-89.117.117.255
                  89.117.129.0/24
                  89.117.132.0/22
                  89.117.139.0/24
                  89.117.142.0/23
                  89.117.158.0-89.117.163.255
                  89.117.188.0/24
                  89.117.190.0/24
                  89.117.215.0/24
                  89.117.222.0/24
                  89.117.228.0/23
                  89.117.245.0/24
                  89.117.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:90:bd:2a:0f:14:01:59:d7:00:4d:80:fb:be:c0:b5:99:96:
         08:6c:33:37:70:54:b7:4b:67:aa:40:06:a2:c3:d5:a4:8a:5b:
         1c:2f:2b:84:a8:62:5e:3e:a1:d2:28:da:81:29:bd:32:41:9a:
         87:cf:5d:cf:07:b7:1f:b7:27:0a:17:1b:cd:e5:c1:1f:9d:07:
         f2:53:01:07:6a:48:58:07:72:52:93:0e:ed:c1:d3:bf:30:17:
         34:ea:5a:88:41:a2:7c:f1:66:66:e7:bd:fa:a8:fc:e6:a0:c8:
         bb:9e:ad:10:3c:75:87:d3:96:2c:5e:f4:0b:35:37:48:7a:1c:
         ea:74:68:11:7e:2b:9f:73:b4:12:a6:a7:ba:00:dd:62:03:b2:
         ea:12:ff:2e:9f:4d:9d:dc:1b:a2:dc:b2:3e:6f:9d:85:b1:3a:
         e9:71:5e:de:73:f0:5f:2e:48:63:44:96:8c:bd:f3:75:75:7f:
         e2:79:9e:36:b1:83:6d:e8:34:c3:21:54:25:b6:71:c6:8c:73:
         1d:6b:f9:f0:2e:88:7b:63:44:a3:5b:6b:c1:c8:5c:34:fb:08:
         a3:6d:05:03:26:fe:13:b1:64:22:98:3c:12:0f:db:16:90:c4:
         a9:9b:08:46:62:cb:3b:07:b4:12:bf:71:78:e2:60:3a:7a:23:
         50:9f:60:9f
-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgIECwwPlzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDUy
NTA5MjkzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzk1ZjlmM2I3NDc5
ZjJhN2M0NGZjNTQ3ZjFlMTlkYjM4ODc1ZTdhOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKlgGiwydCJc+ES1DLm8g4LUyRxY332v7sFhZHmScMbp++2p
B/oCqI76xQwZf6zKq169jubWvAO39prnfjAd7sI2yU4373T73MExlOPRW5/mU8DE
GFiAYfPAHy5Otuc2u1Q33LoQIHvnz4lEYiYrZAHEnrhEWM9LwFXlHfNMB0sxaGJd
o+8lnFB7N2PSLh987RaX2UH8KwfA2P0nN9Zq7ceGzaucY/Fpz6ghu2hR3COEizhn
MQ+QPOZDsNrvqIieE4bJyUpV/VPJhsVznerAB6ISdkLuALQDfWaVkJc6PE4PvF5B
AQIIPsxegvez5w6cR+2p+fMOtGdbMQ/jj9OqV98CAwEAAaOCA70wggO5MB0GA1Ud
DgQWBBR5X587dHnyp8RPxUfx4Z2ziHXnqTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L2VWLWZPM1I1OHFmRVQ4Vkg4ZUdkczRoMTU2ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AdEGCCsGAQUFBwEHAQH/BIIBwDCCAbwwggG4BAIAATCCAbADBAFULuoDBAFWJrID
BAJWJrgDBAFWJsoDBAFWJvYDBAFZdDoDBAFZdEQDBAFZdFgDBABZdFwwDAMEAVl0
agMEAFl0bDAMAwQAWXR9AwQAWXSAMAwDBAFZdIIDBABZdIQDBABZdIcDBABZdIkD
BABZdI0wDAMEAll0lAMEAFl0ljAMAwQAWXSZAwQAWXSaAwQAWXSeAwQAWXShAwQA
WXSjAwQAWXSmAwQBWXSsAwQAWXSvAwQAWXSxAwQAWXSzMAwDBANZdLgDBABZdLow
DAMEAFl0vQMEAFl0vgMEAVl00gMEAFl02gMEAVl0/AMEAFl0/wMEAVl1CAMEAVl1
DAMEAVl1GDAMAwQCWXUcAwQBWXUgAwQBWXUkAwQCWXVAMAwDBAFZdUYDBARZdUAD
BAFZdVQDBAJZdVgwDAMEAVl1XgMEAll1YAMEAVl1ZgMEAFl1bTAMAwQEWXVwAwQB
WXV0AwQAWXWBAwQCWXWEAwQAWXWLAwQBWXWOMAwDBAFZdZ4DBAJZdaADBABZdbwD
BABZdb4DBABZddcDBABZdd4DBAFZdeQDBABZdfUDBABZdfowDQYJKoZIhvcNAQEL
BQADggEBAFmQvSoPFAFZ1wBNgPu+wLWZlghsMzdwVLdLZ6pABqLD1aSKWxwvK4So
Yl4+odIo2oEpvTJBmofPXc8Htx+3JwoXG83lwR+dB/JTAQdqSFgHclKTDu3B078w
FzTqWohBonzxZmbnvfqo/OagyLuerRA8dYfTlixe9As1N0h6HOp0aBF+K59ztBKm
p7oA3WIDsuoS/y6fTZ3cG6Lcsj5vnYWxOulxXt5z8F8uSGNEloy983V1f+J5njax
g23oNMMhVCW2ccaMcx1r+fAuiHtjRKNba8HIXDT7CKNtBQMm/hOxZCKYPBIP2xaQ
xKmbCEZiyzsHtBK/cXjiYDp6I1CfYJ8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org