Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/dtSmmOB52mx9Whltcb5ePOkWT4k.roa
File:                     dtSmmOB52mx9Whltcb5ePOkWT4k.roa (raw, json)
Hash identifier:          CgekIYhGUpy2JlCFaijGcYBCdlx/Xoznw0zVvcE41iM=
Subject key identifier:   76:D4:A6:98:E0:79:DA:6C:7D:5A:19:6D:71:BE:5E:3C:E9:16:4F:89
Certificate issuer:       /CN=c8dea4e58fdfb95c8781ab8811b06119e1814efa
Certificate serial:       0185708CB520436E7AA68211C9DADB4B669D
Authority key identifier: C8:DE:A4:E5:8F:DF:B9:5C:87:81:AB:88:11:B0:61:19:E1:81:4E:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yN6k5Y_fuVyHgauIEbBhGeGBTvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/dtSmmOB52mx9Whltcb5ePOkWT4k.roa
Signing time:             Mon 02 Jan 2023 03:35:47 +0000
ROA not before:           Mon 02 Jan 2023 03:35:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12392
IP address blocks:        85.26.80.0/20 maxlen: 20
                          85.201.128.0/20 maxlen: 20
                          85.201.128.0/19 maxlen: 19
                          85.26.96.0/20 maxlen: 20
                          85.201.144.0/20 maxlen: 20
                          85.26.112.0/20 maxlen: 20
                          85.201.160.0/19 maxlen: 19
                          85.201.160.0/20 maxlen: 20
                          85.26.32.0/20 maxlen: 20
                          85.201.80.0/20 maxlen: 20
                          85.26.48.0/20 maxlen: 20
                          85.201.96.0/20 maxlen: 20
                          85.201.96.0/19 maxlen: 19
                          85.26.64.0/20 maxlen: 20
                          85.201.112.0/20 maxlen: 20
                          149.154.192.0/20 maxlen: 20
                          149.154.192.0/21 maxlen: 21
                          149.154.192.0/18 maxlen: 18
                          149.154.200.0/21 maxlen: 21
                          85.201.240.0/20 maxlen: 20
                          149.154.208.0/21 maxlen: 21
                          149.154.208.0/20 maxlen: 20
                          149.154.216.0/21 maxlen: 21
                          149.154.224.0/20 maxlen: 20
                          85.201.176.0/20 maxlen: 20
                          85.201.192.0/19 maxlen: 19
                          85.201.192.0/20 maxlen: 20
                          85.201.208.0/20 maxlen: 20
                          85.201.224.0/20 maxlen: 20
                          85.201.224.0/19 maxlen: 19
                          213.213.240.0/20 maxlen: 20
                          85.201.16.0/20 maxlen: 20
                          85.201.32.0/19 maxlen: 19
                          85.201.32.0/20 maxlen: 20
                          85.26.0.0/17 maxlen: 17
                          85.26.0.0/20 maxlen: 20
                          85.201.48.0/20 maxlen: 20
                          85.26.16.0/20 maxlen: 20
                          85.201.64.0/20 maxlen: 20
                          85.201.64.0/19 maxlen: 19
                          85.201.0.0/19 maxlen: 19
                          85.201.0.0/20 maxlen: 20
                          85.201.0.0/16 maxlen: 16
                          213.213.192.0/20 maxlen: 20
                          213.213.192.0/18 maxlen: 18
                          213.213.208.0/20 maxlen: 20
                          213.213.224.0/20 maxlen: 20
                          185.3.161.0/24 maxlen: 24
                          185.3.162.0/23 maxlen: 23
                          185.3.160.0/24 maxlen: 24
                          185.3.160.0/22 maxlen: 22
                          82.212.128.0/20 maxlen: 20
                          82.212.128.0/18 maxlen: 18
                          82.212.144.0/20 maxlen: 20
                          82.212.160.0/20 maxlen: 20
                          82.212.176.0/20 maxlen: 20
                          62.197.64.0/18 maxlen: 18
                          109.89.128.0/20 maxlen: 20
                          109.89.128.0/19 maxlen: 19
                          62.197.80.0/20 maxlen: 20
                          109.89.144.0/20 maxlen: 20
                          62.197.96.0/20 maxlen: 20
                          109.89.160.0/19 maxlen: 19
                          109.89.160.0/20 maxlen: 20
                          62.197.112.0/20 maxlen: 20
                          109.89.72.0/21 maxlen: 21
                          109.89.80.0/20 maxlen: 20
                          109.89.96.0/20 maxlen: 20
                          109.89.96.0/19 maxlen: 19
                          62.197.64.0/20 maxlen: 20
                          109.89.112.0/20 maxlen: 20
                          109.89.240.0/20 maxlen: 20
                          217.15.224.0/20 maxlen: 20
                          109.89.176.0/20 maxlen: 20
                          109.89.192.0/19 maxlen: 19
                          109.89.192.0/20 maxlen: 20
                          109.89.208.0/20 maxlen: 20
                          109.89.224.0/20 maxlen: 20
                          109.89.224.0/19 maxlen: 19
                          78.129.16.0/20 maxlen: 20
                          109.88.160.0/20 maxlen: 20
                          109.88.160.0/19 maxlen: 19
                          213.189.176.0/20 maxlen: 20
                          95.182.240.0/20 maxlen: 20
                          109.88.176.0/20 maxlen: 20
                          78.129.32.0/20 maxlen: 20
                          109.88.192.0/20 maxlen: 20
                          109.88.192.0/19 maxlen: 19
                          78.129.48.0/20 maxlen: 20
                          78.129.64.0/20 maxlen: 20
                          109.88.208.0/20 maxlen: 20
                          95.182.192.0/20 maxlen: 20
                          109.88.112.0/21 maxlen: 21
                          109.88.112.0/20 maxlen: 20
                          109.88.120.0/21 maxlen: 21
                          95.182.209.0/24 maxlen: 24
                          109.88.128.0/21 maxlen: 21
                          95.182.208.0/20 maxlen: 20
                          109.88.128.0/19 maxlen: 19
                          109.88.128.0/20 maxlen: 20
                          109.88.136.0/21 maxlen: 21
                          95.182.224.0/20 maxlen: 20
                          109.88.144.0/20 maxlen: 20
                          109.88.144.0/21 maxlen: 21
                          109.88.152.0/21 maxlen: 21
                          78.129.0.0/17 maxlen: 17
                          213.189.160.0/19 maxlen: 19
                          213.189.160.0/20 maxlen: 20
                          78.129.0.0/20 maxlen: 20
                          109.89.16.0/20 maxlen: 20
                          212.68.224.0/20 maxlen: 20
                          109.89.32.0/19 maxlen: 19
                          109.89.32.0/20 maxlen: 20
                          212.68.240.0/20 maxlen: 20
                          109.89.48.0/20 maxlen: 20
                          109.89.64.0/19 maxlen: 19
                          109.89.64.0/20 maxlen: 20
                          109.89.64.0/21 maxlen: 21
                          109.88.224.0/19 maxlen: 19
                          109.88.224.0/20 maxlen: 20
                          78.129.80.0/20 maxlen: 20
                          78.129.96.0/20 maxlen: 20
                          212.68.192.0/20 maxlen: 20
                          109.88.240.0/20 maxlen: 20
                          212.68.192.0/18 maxlen: 18
                          109.89.0.0/19 maxlen: 19
                          109.89.0.0/20 maxlen: 20
                          78.129.112.0/20 maxlen: 20
                          212.68.208.0/20 maxlen: 20
                          85.27.48.0/20 maxlen: 20
                          85.27.64.0/21 maxlen: 21
                          85.27.64.0/20 maxlen: 20
                          85.27.72.0/21 maxlen: 21
                          85.27.80.0/20 maxlen: 20
                          85.27.80.0/21 maxlen: 21
                          85.27.88.0/21 maxlen: 21
                          149.154.240.0/20 maxlen: 20
                          85.27.0.0/20 maxlen: 20
                          85.27.0.0/21 maxlen: 21
                          85.27.0.0/17 maxlen: 17
                          85.27.8.0/21 maxlen: 21
                          85.27.16.0/20 maxlen: 20
                          85.27.16.0/21 maxlen: 21
                          85.27.24.0/21 maxlen: 21
                          85.27.32.0/20 maxlen: 20
                          95.182.144.0/20 maxlen: 20
                          109.88.64.0/19 maxlen: 19
                          109.88.64.0/20 maxlen: 20
                          109.88.80.0/20 maxlen: 20
                          95.182.160.0/20 maxlen: 20
                          95.182.176.0/20 maxlen: 20
                          109.88.96.0/19 maxlen: 19
                          109.88.96.0/20 maxlen: 20
                          109.88.96.0/21 maxlen: 21
                          109.88.104.0/21 maxlen: 21
                          109.88.0.0/20 maxlen: 20
                          109.88.0.0/19 maxlen: 19
                          85.27.96.0/20 maxlen: 20
                          85.27.96.0/21 maxlen: 21
                          85.27.104.0/21 maxlen: 21
                          109.88.0.0/15 maxlen: 15
                          109.88.16.0/20 maxlen: 20
                          85.27.112.0/20 maxlen: 20
                          85.27.112.0/21 maxlen: 21
                          85.27.120.0/21 maxlen: 21
                          109.88.32.0/20 maxlen: 20
                          109.88.32.0/19 maxlen: 19
                          95.182.128.0/17 maxlen: 17
                          109.88.48.0/20 maxlen: 20
                          95.182.128.0/20 maxlen: 20
                          2a02:2788:f00::/40 maxlen: 40
                          2a02:2788:600::/40 maxlen: 40
                          2a02:2788:300::/40 maxlen: 40
                          2a02:2788:200::/40 maxlen: 40
                          2a02:2788:d00::/40 maxlen: 40
                          2a02:2788:a00::/40 maxlen: 40
                          2a02:2788::/40 maxlen: 40
                          2a02:2788:800::/40 maxlen: 40
                          2a02:2788:700::/40 maxlen: 40
                          2a02:2788:100::/40 maxlen: 40
                          2a02:2788:400::/40 maxlen: 40
                          2a02:2788:500::/40 maxlen: 40
                          2a02:2788::/32 maxlen: 32
                          2a02:2788:e00::/40 maxlen: 40
                          2a02:2788:b00::/40 maxlen: 40
                          2a02:2788:c00::/40 maxlen: 40
                          2a02:2788:900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:b5:20:43:6e:7a:a6:82:11:c9:da:db:4b:66:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8dea4e58fdfb95c8781ab8811b06119e1814efa
        Validity
            Not Before: Jan  2 03:35:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=76d4a698e079da6c7d5a196d71be5e3ce9164f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:e1:91:64:b8:30:3a:a6:72:b7:65:e6:cd:
                    87:65:c3:45:ea:2d:90:1f:a1:f1:98:80:ce:a7:b7:
                    26:0c:ba:aa:2d:ad:34:14:29:97:15:67:e8:bb:50:
                    e9:93:0a:0d:ab:00:4a:c3:0b:c0:a8:8d:5b:0d:e7:
                    91:a1:f0:d8:94:2c:11:e4:a9:09:6a:88:e5:fb:ea:
                    27:0c:a5:1e:28:d1:3e:05:9c:80:25:a3:d3:a3:1d:
                    7f:5b:1d:c2:28:24:9d:0b:96:00:7e:d7:68:3f:e2:
                    8a:98:bc:c9:28:49:95:7e:ff:3d:31:e6:3b:71:e5:
                    4a:18:98:76:79:1e:72:07:ed:46:82:2f:fc:ce:c7:
                    c0:7d:41:44:00:8b:f7:85:80:20:fc:51:9c:20:a6:
                    1f:fe:9f:a3:b4:05:e9:a9:2a:78:79:c7:fe:d6:6b:
                    91:85:9c:f2:82:c1:ea:16:29:7b:99:65:88:a5:9c:
                    64:68:c1:43:c6:cc:0a:27:a1:e7:e0:50:e2:27:e3:
                    37:66:44:e8:d4:ac:f3:08:47:b7:8a:63:6a:bb:cc:
                    07:2b:bb:23:65:39:0f:bd:2e:eb:9e:fc:5d:f2:c2:
                    2a:79:b5:9b:2e:f3:93:d6:d1:31:5c:7b:cb:c5:81:
                    e1:6a:3c:7b:7a:a6:7d:bb:6d:e2:ff:b1:c7:24:9e:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D4:A6:98:E0:79:DA:6C:7D:5A:19:6D:71:BE:5E:3C:E9:16:4F:89
            X509v3 Authority Key Identifier:
                keyid:C8:DE:A4:E5:8F:DF:B9:5C:87:81:AB:88:11:B0:61:19:E1:81:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN6k5Y_fuVyHgauIEbBhGeGBTvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/dtSmmOB52mx9Whltcb5ePOkWT4k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/yN6k5Y_fuVyHgauIEbBhGeGBTvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.197.64.0/18
                  78.129.0.0/17
                  82.212.128.0/18
                  85.26.0.0/17
                  85.27.0.0/17
                  85.201.0.0/16
                  95.182.128.0/17
                  109.88.0.0/15
                  149.154.192.0/18
                  185.3.160.0/22
                  212.68.192.0/18
                  213.189.160.0/19
                  213.213.192.0/18
                  217.15.224.0/20
                IPv6:
                  2a02:2788::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:93:56:10:3c:de:53:e0:2f:30:21:db:5e:0e:80:7b:69:2f:
         8c:9a:57:74:95:14:08:1d:15:7e:93:00:fb:8e:1d:71:41:da:
         fb:15:c5:7a:74:a1:5f:13:45:83:8f:1d:cf:df:52:3f:f5:e1:
         24:f4:23:ac:a6:1d:fd:4e:e7:88:bb:37:91:36:b1:a0:ab:a0:
         2b:89:84:05:36:aa:91:0c:0f:83:36:4b:82:b7:5c:0b:a9:b3:
         e8:7e:06:91:bb:ed:be:fe:a3:63:dd:1e:c0:cb:f2:bd:17:e8:
         4a:9c:a2:d5:a4:00:30:6b:3c:5e:fe:fa:f3:e4:c4:70:5c:43:
         c0:e6:df:3a:ee:fb:0a:d4:97:ea:56:3a:81:cf:25:1a:78:e3:
         92:3d:8e:0a:cb:39:e7:d1:97:85:8d:d3:5f:fe:db:cf:f7:58:
         c3:eb:d3:83:74:5b:4c:5e:eb:c5:ef:cc:45:1f:43:f7:d0:2b:
         05:e8:df:07:8d:a1:4b:79:58:45:92:fc:4c:61:12:db:ca:ec:
         4e:17:e1:9e:b1:95:5c:c9:a4:de:4d:eb:bd:31:21:69:99:36:
         fc:31:d3:f0:cc:6c:2c:ea:2a:2f:fa:e6:f6:ff:43:43:07:9c:
         b0:83:87:9c:c7:8a:35:ca:f7:79:24:6f:e7:e8:9c:bc:7c:e8:
         59:39:45:f3
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgISAYVwjLUgQ256poIRydrbS2adMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZGVhNGU1OGZkZmI5NWM4NzgxYWI4ODExYjA2MTE5ZTE4
MTRlZmEwHhcNMjMwMTAyMDMzNTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmQ0YTY5OGUwNzlkYTZjN2Q1YTE5NmQ3MWJlNWUzY2U5MTY0Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyrhkWS4MDqmcrdl5s2HZcNF6i2Q
H6HxmIDOp7cmDLqqLa00FCmXFWfou1DpkwoNqwBKwwvAqI1bDeeRofDYlCwR5KkJ
aojl++onDKUeKNE+BZyAJaPTox1/Wx3CKCSdC5YAftdoP+KKmLzJKEmVfv89MeY7
ceVKGJh2eR5yB+1Ggi/8zsfAfUFEAIv3hYAg/FGcIKYf/p+jtAXpqSp4ecf+1muR
hZzygsHqFil7mWWIpZxkaMFDxswKJ6Hn4FDiJ+M3ZkTo1KzzCEe3imNqu8wHK7sj
ZTkPvS7rnvxd8sIqebWbLvOT1tExXHvLxYHhajx7eqZ9u23i/7HHJJ58CwIDAQAB
o4ICZDCCAmAwHQYDVR0OBBYEFHbUppjgedpsfVoZbXG+XjzpFk+JMB8GA1UdIwQY
MBaAFMjepOWP37lch4GriBGwYRnhgU76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU42azVZX2Z1VnlIZ2F1SUViQmhHZUdCVHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xNjIwZWUtZTJmZi00MzA4LWFmNDYt
ZDg4MmQwM2Q0MjNhLzEvZHRTbW1PQjUybXg5V2hsdGNiNWVQT2tXVDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xNjIwZWUtZTJmZi00MzA4LWFmNDYtZDg4MmQwM2Q0MjNh
LzEveU42azVZX2Z1VnlIZ2F1SUViQmhHZUdCVHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQGPsVAAwQH
ToEAAwQGUtSAAwQHVRoAAwQHVRsAAwMAVckDBAdftoADAwFtWAMEBpWawAMEArkD
oAMEBtREwAMEBdW9oAMEBtXVwAMEBNkP4DANBAIAAjAHAwUAKgIniDANBgkqhkiG
9w0BAQsFAAOCAQEAs5NWEDzeU+AvMCHbXg6Ae2kvjJpXdJUUCB0VfpMA+44dcUHa
+xXFenShXxNFg48dz99SP/XhJPQjrKYd/U7niLs3kTaxoKugK4mEBTaqkQwPgzZL
grdcC6mz6H4Gkbvtvv6jY90ewMvyvRfoSpyi1aQAMGs8Xv768+TEcFxDwObfOu77
CtSX6lY6gc8lGnjjkj2OCss559GXhY3TX/7bz/dYw+vTg3RbTF7rxe/MRR9D99Ar
BejfB42hS3lYRZL8TGES28rsThfhnrGVXMmk3k3rvTEhaZk2/DHT8MxsLOoqL/rm
9v9DQwecsIOHnMeKNcr3eSRv5+icvHzoWTlF8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:37 2024 by rpki-client on console-fra.rpki-client.org