Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa
File:                     4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa (raw, json)
Hash identifier:          2K/ITDdgk6fYi6thD3A/GwKYq+VGIASYLtA7ItdKnpc=
Subject key identifier:   E1:FD:4B:3F:57:6F:CD:05:89:46:17:B4:A4:A9:D4:01:58:B6:33:32
Certificate issuer:       /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial:       019473D59DD4CE5ECFDF68E1F6E57C8650D4
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa
Signing time:             Fri 17 Jan 2025 10:36:06 +0000
ROA not before:           Fri 17 Jan 2025 10:36:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12897
IP address blocks:        5.182.236.0/22 maxlen: 22
                          45.10.60.0/22 maxlen: 22
                          45.14.188.0/22 maxlen: 22
                          45.93.108.0/22 maxlen: 22
                          45.128.180.0/22 maxlen: 22
                          45.131.36.0/22 maxlen: 22
                          45.136.168.0/22 maxlen: 22
                          45.143.76.0/22 maxlen: 22
                          46.243.80.0/21 maxlen: 21
                          85.132.192.0/19 maxlen: 19
                          92.119.8.0/22 maxlen: 22
                          94.16.64.0/19 maxlen: 19
                          94.46.64.0/19 maxlen: 19
                          95.131.96.0/21 maxlen: 21
                          134.101.16.0/20 maxlen: 20
                          149.249.128.0/19 maxlen: 19
                          185.9.28.0/22 maxlen: 22
                          185.117.68.0/22 maxlen: 22
                          185.189.140.0/22 maxlen: 22
                          185.194.64.0/22 maxlen: 22
                          185.238.252.0/22 maxlen: 22
                          195.2.160.0/19 maxlen: 19
                          195.80.52.0/22 maxlen: 22
                          212.232.80.0/20 maxlen: 20
                          213.157.0.0/19 maxlen: 19
                          213.188.96.0/19 maxlen: 19
                          2a02:b98::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:73:d5:9d:d4:ce:5e:cf:df:68:e1:f6:e5:7c:86:50:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
        Validity
            Not Before: Jan 17 10:36:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e1fd4b3f576fcd05894617b4a4a9d40158b63332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:47:56:78:44:9b:4c:dc:a0:5b:db:42:25:
                    36:cd:e4:6d:41:dc:ef:5b:53:37:a1:b0:59:43:e6:
                    94:b3:1c:75:5e:7f:8c:06:49:c6:48:c7:e8:df:87:
                    24:51:73:ed:5a:9b:28:82:9a:39:27:c7:6a:3d:60:
                    de:ca:2b:18:3a:3d:19:cd:5c:45:c5:5c:a0:61:0d:
                    9e:fe:b9:69:27:d5:1a:ab:82:46:9b:0a:97:4a:ed:
                    35:cf:35:dd:b8:1d:06:b9:3d:8a:53:6c:c1:e0:f1:
                    35:b3:1f:c3:70:d1:2a:cb:c2:a3:6c:0a:87:6c:ee:
                    ce:4b:cb:88:72:4b:5f:1b:73:08:36:20:42:4b:d9:
                    32:d3:32:5c:dc:0a:26:a0:a5:d0:e2:93:e8:d9:e7:
                    66:ff:18:50:a6:45:c9:e4:c6:64:43:65:b1:53:4f:
                    dc:e4:ec:20:d5:54:c9:c1:ae:97:61:10:04:71:1d:
                    48:d8:36:05:34:a9:c4:87:52:ba:c3:62:ee:a6:18:
                    42:1b:02:a4:69:b0:c3:a9:f7:86:d0:27:a0:0e:16:
                    44:e9:3f:f7:8b:b9:48:f5:5e:97:de:85:85:d4:4d:
                    55:81:9f:a3:10:24:8d:fc:84:f5:43:be:5a:c8:66:
                    6d:6c:f9:79:67:45:f9:c2:b0:49:56:cc:0b:e8:82:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FD:4B:3F:57:6F:CD:05:89:46:17:B4:A4:A9:D4:01:58:B6:33:32
            X509v3 Authority Key Identifier:
                keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/4f1LP1dvzQWJRhe0pKnUAVi2MzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.236.0/22
                  45.10.60.0/22
                  45.14.188.0/22
                  45.93.108.0/22
                  45.128.180.0/22
                  45.131.36.0/22
                  45.136.168.0/22
                  45.143.76.0/22
                  46.243.80.0/21
                  85.132.192.0/19
                  92.119.8.0/22
                  94.16.64.0/19
                  94.46.64.0/19
                  95.131.96.0/21
                  134.101.16.0/20
                  149.249.128.0/19
                  185.9.28.0/22
                  185.117.68.0/22
                  185.189.140.0/22
                  185.194.64.0/22
                  185.238.252.0/22
                  195.2.160.0/19
                  195.80.52.0/22
                  212.232.80.0/20
                  213.157.0.0/19
                  213.188.96.0/19
                IPv6:
                  2a02:b98::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:aa:80:a9:49:79:2f:92:02:ca:c7:10:bf:82:53:2a:e3:5a:
         77:e2:13:1e:17:ff:5d:f1:0a:61:56:f6:0e:d9:99:11:ee:eb:
         db:6b:4f:ba:d9:79:b2:94:8d:4e:5f:8b:b2:0b:71:b3:ce:26:
         0a:e1:13:8b:73:c3:ac:af:94:d9:cd:fd:00:de:15:e9:cf:eb:
         42:6c:f2:a6:2d:84:28:16:4e:86:69:be:37:db:9e:4d:0d:04:
         05:21:db:db:00:76:d6:94:41:33:7e:11:d3:60:79:0b:db:83:
         a7:45:22:ac:e6:6c:52:e0:b5:01:a7:8b:9e:3e:0d:45:e5:55:
         14:dd:e9:09:e2:3f:e9:a5:43:6c:3d:f7:7e:2d:3b:7d:50:36:
         ee:ff:63:18:4e:fa:26:fa:07:06:72:09:70:2d:90:00:6f:46:
         8c:5a:c3:89:67:3f:fb:dd:82:04:ce:dc:66:82:57:b1:47:64:
         e8:68:b0:6b:ee:bf:b5:56:51:07:0c:39:67:56:de:db:31:52:
         37:87:0c:45:65:b4:bd:a8:e6:2c:2e:23:2b:5e:a6:55:93:74:
         77:1a:c3:ba:b4:ba:6a:8b:d2:55:bb:a9:4b:48:ea:41:e0:13:
         b4:42:fe:f6:a6:a7:f4:c7:da:90:bb:ad:bd:83:d2:0d:67:01:
         c4:9e:01:e4
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAZRz1Z3Uzl7P32jh9uV8hlDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1
N2U0YTAwHhcNMjUwMTE3MTAzNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWZkNGIzZjU3NmZjZDA1ODk0NjE3YjRhNGE5ZDQwMTU4YjYzMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriZHVnhEm0zcoFvbQiU2zeRtQdzv
W1M3obBZQ+aUsxx1Xn+MBknGSMfo34ckUXPtWpsogpo5J8dqPWDeyisYOj0ZzVxF
xVygYQ2e/rlpJ9Uaq4JGmwqXSu01zzXduB0GuT2KU2zB4PE1sx/DcNEqy8KjbAqH
bO7OS8uIcktfG3MINiBCS9ky0zJc3AomoKXQ4pPo2edm/xhQpkXJ5MZkQ2WxU0/c
5Owg1VTJwa6XYRAEcR1I2DYFNKnEh1K6w2LuphhCGwKkabDDqfeG0CegDhZE6T/3
i7lI9V6X3oWF1E1VgZ+jECSN/IT1Q75ayGZtbPl5Z0X5wrBJVswL6ILw/wIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFOH9Sz9Xb80FiUYXtKSp1AFYtjMyMB8GA1UdIwQY
MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt
ZjE4YWQ5ZjRjYzM0LzEvNGYxTFAxZHZ6UVdKUmhlMHBLblVBVmkyTXpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0
LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBowQCAAEwgZwDBAIF
tuwDBAItCjwDBAItDrwDBAItXWwDBAItgLQDBAItgyQDBAItiKgDBAItj0wDBAMu
81ADBAVVhMADBAJcdwgDBAVeEEADBAVeLkADBANfg2ADBASGZRADBAWV+YADBAK5
CRwDBAK5dUQDBAK5vYwDBAK5wkADBAK57vwDBAXDAqADBALDUDQDBATU6FADBAXV
nQADBAXVvGAwDQQCAAIwBwMFACoCC5gwDQYJKoZIhvcNAQELBQADggEBAIeqgKlJ
eS+SAsrHEL+CUyrjWnfiEx4X/13xCmFW9g7ZmRHu69trT7rZebKUjU5fi7ILcbPO
JgrhE4tzw6yvlNnN/QDeFenP60Js8qYthCgWToZpvjfbnk0NBAUh29sAdtaUQTN+
EdNgeQvbg6dFIqzmbFLgtQGni54+DUXlVRTd6QniP+mlQ2w9934tO31QNu7/YxhO
+ib6BwZyCXAtkABvRoxaw4lnP/vdggTO3GaCV7FHZOhosGvuv7VWUQcMOWdW3tsx
UjeHDEVltL2o5iwuIyteplWTdHcaw7q0umqL0lW7qUtI6kHgE7RC/vamp/TH2pC7
rb2D0g1nAcSeAeQ=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:10 2025 by rpki-client