Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vU5cLqEsYbAiUxwBE1GLPX1rPLg.roa
File:                     vU5cLqEsYbAiUxwBE1GLPX1rPLg.roa (raw, json)
Hash identifier:          taQ0StsSpmn4Iem2zyOoJx5W4Uq0W6qdxJ36p6VCpJ0=
Subject key identifier:   BD:4E:5C:2E:A1:2C:61:B0:22:53:1C:01:13:51:8B:3D:7D:6B:3C:B8
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0AA23E5E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vU5cLqEsYbAiUxwBE1GLPX1rPLg.roa
Signing time:             Fri 06 May 2022 11:50:26 +0000
ROA not before:           Fri 06 May 2022 11:50:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        89.117.109.0/24 maxlen: 24
                          82.140.183.0/24 maxlen: 24
                          82.140.182.0/24 maxlen: 24
                          86.38.4.0/23 maxlen: 24
                          89.117.48.0/20 maxlen: 24
                          86.38.175.0/24 maxlen: 24
                          86.38.180.0/23 maxlen: 24
                          89.117.120.0/22 maxlen: 24
                          84.46.200.0/24 maxlen: 24
                          89.117.160.0/22 maxlen: 24
                          86.38.242.0/23 maxlen: 24
                          86.38.241.0/24 maxlen: 24
                          89.116.135.0/24 maxlen: 24
                          89.116.156.0/24 maxlen: 24
                          89.116.158.0/24 maxlen: 24
                          89.116.56.0/24 maxlen: 24
                          86.38.189.0/24 maxlen: 24
                          86.38.190.0/24 maxlen: 24
                          89.116.58.0/23 maxlen: 24
                          86.38.200.0/24 maxlen: 24
                          89.116.68.0/23 maxlen: 24
                          86.38.214.0/24 maxlen: 24
                          86.38.216.0/22 maxlen: 24
                          86.38.220.0/23 maxlen: 24
                          86.38.225.0/24 maxlen: 24
                          86.38.226.0/24 maxlen: 24
                          89.116.96.0/24 maxlen: 24
                          86.38.238.0/24 maxlen: 24
                          89.116.218.0/24 maxlen: 24
                          89.116.242.0/23 maxlen: 24
                          89.116.246.0/23 maxlen: 24
                          89.117.11.0/24 maxlen: 24
                          89.116.175.0/24 maxlen: 24
                          89.116.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178404958 (0xaa23e5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: May  6 11:50:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd4e5c2ea12c61b022531c0113518b3d7d6b3cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:50:e4:dd:73:ae:33:d3:4f:0b:58:08:76:
                    14:77:63:19:e0:89:c7:42:21:6b:48:f0:0b:40:ab:
                    80:f7:5b:9e:b7:92:bd:a1:1c:af:21:2d:24:d2:54:
                    a1:b9:e5:d0:b9:28:f6:dd:71:39:a5:c4:2d:ab:c2:
                    aa:27:b6:99:ed:e6:27:c5:3b:56:89:db:fe:fb:9b:
                    68:bf:87:f7:6d:aa:c3:59:9d:11:ee:15:a3:7c:4e:
                    b1:3a:b5:19:83:79:11:ae:1d:6f:98:4c:d8:15:f7:
                    98:de:8f:13:c9:46:ba:b1:ef:bb:9b:75:a0:c0:b4:
                    cb:04:b2:e7:0a:c0:e6:22:3c:c8:d5:41:30:93:c8:
                    1f:30:54:bf:61:36:d3:7b:0c:9d:39:5e:8d:cb:67:
                    d7:c3:9f:a2:a8:d4:95:28:e5:cf:fe:45:65:a2:54:
                    0d:c1:28:fc:1c:35:4f:e0:85:a8:78:ba:5d:80:fa:
                    90:58:07:87:5d:ef:38:5d:c3:b1:2f:a3:fc:b6:a4:
                    05:09:40:0c:2c:af:0b:d3:4e:2d:d5:65:7e:47:e2:
                    be:42:d3:fe:74:fe:82:52:12:35:80:1f:54:76:13:
                    4c:eb:cc:46:d6:fc:98:a6:ec:3f:d8:d1:47:bd:79:
                    d7:d3:09:9c:7b:3c:ca:69:e9:c4:6c:bc:38:63:ad:
                    38:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:5C:2E:A1:2C:61:B0:22:53:1C:01:13:51:8B:3D:7D:6B:3C:B8
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vU5cLqEsYbAiUxwBE1GLPX1rPLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.182.0/23
                  84.46.200.0/24
                  86.38.4.0/23
                  86.38.175.0/24
                  86.38.180.0/23
                  86.38.189.0-86.38.190.255
                  86.38.200.0/24
                  86.38.214.0/24
                  86.38.216.0-86.38.221.255
                  86.38.225.0-86.38.226.255
                  86.38.238.0/24
                  86.38.241.0-86.38.243.255
                  89.116.56.0/24
                  89.116.58.0/23
                  89.116.68.0/23
                  89.116.96.0/24
                  89.116.135.0/24
                  89.116.156.0/24
                  89.116.158.0/24
                  89.116.175.0/24
                  89.116.177.0/24
                  89.116.218.0/24
                  89.116.242.0/23
                  89.116.246.0/23
                  89.117.11.0/24
                  89.117.48.0/20
                  89.117.109.0/24
                  89.117.120.0/22
                  89.117.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:11:23:ae:58:45:67:0b:29:1e:7b:0b:9f:ba:8a:d5:ea:46:
         4a:4e:d6:3e:c9:f5:16:ab:13:08:49:8e:96:35:ed:32:ea:ee:
         34:bb:b3:98:04:ef:8d:bb:9d:aa:b7:66:69:f1:16:65:f4:31:
         9a:55:29:59:8a:79:aa:94:6d:fb:18:33:c8:23:73:e9:53:83:
         ca:3d:25:ac:9b:46:09:96:35:94:d5:dc:b6:86:80:c7:b6:1b:
         a6:71:9f:34:2f:00:65:9a:be:e3:83:0c:0c:36:78:84:df:10:
         18:d2:b1:cb:4c:b0:84:a6:ad:3f:c4:12:31:b9:9f:98:f7:d4:
         53:0c:cf:83:b6:4c:71:dc:d6:e4:84:93:7c:47:a6:11:9f:67:
         0d:56:3a:da:d1:66:84:dc:58:77:e0:26:5c:9d:9e:a1:e3:c9:
         71:b2:18:21:35:2e:ad:d1:79:00:c2:0f:37:97:7b:f9:a5:01:
         fc:c2:55:73:96:55:c3:1f:fb:91:6e:61:b2:0e:12:34:91:92:
         26:f0:2e:6f:a2:c4:ca:c2:2b:07:76:39:a2:37:c4:1c:38:a7:
         c7:df:02:b0:c1:d3:15:c1:53:8d:ce:14:ba:e7:1a:48:a6:ae:
         d6:81:7b:eb:85:ce:ec:71:73:b3:ce:df:17:88:1b:d5:a9:f5:
         a7:7e:84:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org