Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/nEoDjLZcsyIl4kqisoA23Yh3tVk.roa
File:                     nEoDjLZcsyIl4kqisoA23Yh3tVk.roa (raw, json)
Hash identifier:          tjj144wRDmG7GJHTBolwiWaOsGbNTGBhicJAaYAY59o=
Subject key identifier:   9C:4A:03:8C:B6:5C:B3:22:25:E2:4A:A2:B2:80:36:DD:88:77:B5:59
Certificate issuer:       /CN=c8dea4e58fdfb95c8781ab8811b06119e1814efa
Certificate serial:       0186EF464DE891990C8EC283F8EDAEF86607
Authority key identifier: C8:DE:A4:E5:8F:DF:B9:5C:87:81:AB:88:11:B0:61:19:E1:81:4E:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yN6k5Y_fuVyHgauIEbBhGeGBTvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/nEoDjLZcsyIl4kqisoA23Yh3tVk.roa
Signing time:             Fri 17 Mar 2023 11:13:27 +0000
ROA not before:           Fri 17 Mar 2023 11:13:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12392
IP address blocks:        85.26.80.0/20 maxlen: 20
                          85.201.128.0/20 maxlen: 20
                          85.201.128.0/19 maxlen: 19
                          85.26.96.0/20 maxlen: 20
                          85.201.144.0/20 maxlen: 20
                          85.26.112.0/20 maxlen: 20
                          85.201.160.0/19 maxlen: 19
                          85.201.160.0/20 maxlen: 20
                          85.26.32.0/20 maxlen: 20
                          85.201.80.0/20 maxlen: 20
                          85.26.48.0/20 maxlen: 20
                          85.201.96.0/20 maxlen: 20
                          85.201.96.0/19 maxlen: 19
                          85.26.64.0/20 maxlen: 20
                          85.201.112.0/20 maxlen: 20
                          149.154.192.0/20 maxlen: 20
                          149.154.192.0/18 maxlen: 18
                          85.201.240.0/20 maxlen: 20
                          149.154.208.0/21 maxlen: 21
                          149.154.208.0/20 maxlen: 20
                          149.154.216.0/21 maxlen: 21
                          149.154.224.0/20 maxlen: 20
                          85.201.176.0/20 maxlen: 20
                          85.201.192.0/19 maxlen: 19
                          85.201.192.0/20 maxlen: 20
                          85.201.208.0/20 maxlen: 20
                          85.201.224.0/20 maxlen: 20
                          85.201.224.0/19 maxlen: 19
                          213.213.240.0/20 maxlen: 20
                          85.201.16.0/20 maxlen: 20
                          85.201.32.0/19 maxlen: 19
                          85.201.32.0/20 maxlen: 20
                          85.26.0.0/17 maxlen: 17
                          85.26.0.0/20 maxlen: 20
                          85.201.48.0/20 maxlen: 20
                          85.26.16.0/20 maxlen: 20
                          85.201.64.0/20 maxlen: 20
                          85.201.64.0/19 maxlen: 19
                          85.201.0.0/19 maxlen: 19
                          85.201.0.0/20 maxlen: 20
                          85.201.0.0/16 maxlen: 16
                          213.213.192.0/20 maxlen: 20
                          213.213.192.0/18 maxlen: 18
                          213.213.208.0/20 maxlen: 20
                          213.213.224.0/20 maxlen: 20
                          185.3.161.0/24 maxlen: 24
                          185.3.162.0/23 maxlen: 23
                          185.3.160.0/24 maxlen: 24
                          185.3.160.0/22 maxlen: 22
                          82.212.128.0/20 maxlen: 20
                          82.212.128.0/18 maxlen: 18
                          82.212.144.0/20 maxlen: 20
                          82.212.160.0/20 maxlen: 20
                          82.212.176.0/20 maxlen: 20
                          62.197.64.0/18 maxlen: 18
                          109.89.128.0/20 maxlen: 20
                          109.89.128.0/19 maxlen: 19
                          62.197.80.0/20 maxlen: 20
                          109.89.144.0/20 maxlen: 20
                          62.197.96.0/20 maxlen: 20
                          109.89.160.0/19 maxlen: 19
                          109.89.160.0/20 maxlen: 20
                          62.197.112.0/20 maxlen: 20
                          109.89.80.0/20 maxlen: 20
                          109.89.96.0/20 maxlen: 20
                          109.89.96.0/19 maxlen: 19
                          62.197.64.0/20 maxlen: 20
                          109.89.112.0/20 maxlen: 20
                          109.89.240.0/20 maxlen: 20
                          217.15.224.0/20 maxlen: 20
                          109.89.176.0/20 maxlen: 20
                          109.89.192.0/19 maxlen: 19
                          109.89.192.0/20 maxlen: 20
                          109.89.208.0/20 maxlen: 20
                          109.89.224.0/20 maxlen: 20
                          109.89.224.0/19 maxlen: 19
                          78.129.16.0/20 maxlen: 20
                          109.88.160.0/20 maxlen: 20
                          109.88.160.0/19 maxlen: 19
                          213.189.176.0/20 maxlen: 20
                          95.182.240.0/20 maxlen: 20
                          109.88.176.0/20 maxlen: 20
                          78.129.32.0/20 maxlen: 20
                          109.88.192.0/20 maxlen: 20
                          109.88.192.0/19 maxlen: 19
                          78.129.48.0/20 maxlen: 20
                          78.129.64.0/20 maxlen: 20
                          109.88.208.0/20 maxlen: 20
                          95.182.192.0/20 maxlen: 20
                          109.88.112.0/20 maxlen: 20
                          95.182.209.0/24 maxlen: 24
                          95.182.208.0/20 maxlen: 20
                          109.88.128.0/19 maxlen: 19
                          109.88.128.0/20 maxlen: 20
                          95.182.224.0/20 maxlen: 20
                          109.88.144.0/20 maxlen: 20
                          78.129.0.0/17 maxlen: 17
                          213.189.160.0/19 maxlen: 19
                          213.189.160.0/20 maxlen: 20
                          78.129.0.0/20 maxlen: 20
                          109.89.16.0/20 maxlen: 20
                          212.68.224.0/20 maxlen: 20
                          109.89.32.0/19 maxlen: 19
                          109.89.32.0/20 maxlen: 20
                          212.68.240.0/20 maxlen: 20
                          109.89.48.0/20 maxlen: 20
                          109.89.64.0/19 maxlen: 19
                          109.89.64.0/20 maxlen: 20
                          109.88.224.0/19 maxlen: 19
                          109.88.224.0/20 maxlen: 20
                          78.129.80.0/20 maxlen: 20
                          78.129.96.0/20 maxlen: 20
                          212.68.192.0/20 maxlen: 20
                          109.88.240.0/20 maxlen: 20
                          212.68.192.0/18 maxlen: 18
                          109.89.0.0/19 maxlen: 19
                          109.89.0.0/20 maxlen: 20
                          78.129.112.0/20 maxlen: 20
                          212.68.208.0/20 maxlen: 20
                          85.27.48.0/20 maxlen: 20
                          85.27.64.0/21 maxlen: 21
                          85.27.64.0/20 maxlen: 20
                          85.27.80.0/20 maxlen: 20
                          149.154.240.0/20 maxlen: 20
                          85.27.0.0/20 maxlen: 20
                          85.27.0.0/21 maxlen: 21
                          85.27.0.0/17 maxlen: 17
                          85.27.8.0/21 maxlen: 21
                          85.27.16.0/20 maxlen: 20
                          85.27.16.0/21 maxlen: 21
                          85.27.24.0/21 maxlen: 21
                          85.27.32.0/20 maxlen: 20
                          95.182.144.0/20 maxlen: 20
                          109.88.64.0/19 maxlen: 19
                          109.88.64.0/20 maxlen: 20
                          109.88.80.0/20 maxlen: 20
                          95.182.160.0/20 maxlen: 20
                          95.182.176.0/20 maxlen: 20
                          109.88.96.0/19 maxlen: 19
                          109.88.96.0/20 maxlen: 20
                          109.88.0.0/20 maxlen: 20
                          109.88.0.0/19 maxlen: 19
                          85.27.96.0/20 maxlen: 20
                          109.88.0.0/15 maxlen: 15
                          109.88.16.0/20 maxlen: 20
                          85.27.112.0/20 maxlen: 20
                          109.88.32.0/20 maxlen: 20
                          109.88.32.0/19 maxlen: 19
                          95.182.128.0/17 maxlen: 17
                          109.88.48.0/20 maxlen: 20
                          95.182.128.0/20 maxlen: 20
                          2a02:2788:600::/40 maxlen: 40
                          2a02:2788:f00::/40 maxlen: 40
                          2a02:2788:300::/40 maxlen: 40
                          2a02:2788:c00::/40 maxlen: 40
                          2a02:2788:900::/40 maxlen: 40
                          2a02:2788:800::/40 maxlen: 40
                          2a02:2788:500::/40 maxlen: 40
                          2a02:2788::/32 maxlen: 32
                          2a02:2788:700::/40 maxlen: 40
                          2a02:2788:100::/40 maxlen: 40
                          2a02:2788:400::/40 maxlen: 40
                          2a02:2788::/40 maxlen: 40
                          2a02:2788:e00::/40 maxlen: 40
                          2a02:2788:a00::/40 maxlen: 40
                          2a02:2788:200::/40 maxlen: 40
                          2a02:2788:d00::/40 maxlen: 40
                          2a02:2788:b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ef:46:4d:e8:91:99:0c:8e:c2:83:f8:ed:ae:f8:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8dea4e58fdfb95c8781ab8811b06119e1814efa
        Validity
            Not Before: Mar 17 11:13:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9c4a038cb65cb32225e24aa2b28036dd8877b559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:ed:f5:2f:94:96:2d:b7:19:1e:93:8f:eb:
                    b5:c1:de:1c:e9:51:27:44:e0:99:c4:94:f4:dd:5a:
                    d3:d9:98:b7:a3:d9:c0:65:17:96:95:a8:bf:4b:4a:
                    fd:6a:8e:0f:fc:67:ab:d9:c7:40:f4:b2:80:b0:19:
                    e4:33:f4:9c:9f:8e:b5:78:a5:e7:dc:22:57:a9:e3:
                    c4:4d:c1:51:d5:ee:f9:e9:60:45:88:7c:a8:44:3b:
                    c7:6d:34:a3:c1:43:63:df:25:a8:00:ed:28:6b:a9:
                    d9:f5:e1:a9:83:2a:b2:ff:36:e9:5a:52:d6:85:25:
                    ea:64:c6:10:51:3c:48:9b:73:51:2d:10:9c:0a:1e:
                    2f:3b:98:86:89:08:4d:aa:51:45:3e:6c:84:6f:99:
                    10:c8:b2:18:3c:3c:fb:8a:74:24:47:9b:43:6f:b6:
                    17:72:42:1d:5c:65:d9:90:72:0c:31:2d:32:2e:62:
                    eb:d6:dd:20:e9:4e:7d:f7:b1:a2:4f:70:91:32:2a:
                    5b:91:07:86:aa:75:01:1b:4e:74:33:34:c1:ef:fa:
                    6d:6c:3b:a5:1a:91:6d:5f:59:a9:a9:0d:a2:64:cc:
                    d6:0e:54:67:6d:86:96:7c:f7:18:d5:65:b9:b7:c4:
                    e6:c9:1e:e8:e2:40:b2:dd:24:db:02:c4:ce:cb:82:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:03:8C:B6:5C:B3:22:25:E2:4A:A2:B2:80:36:DD:88:77:B5:59
            X509v3 Authority Key Identifier:
                keyid:C8:DE:A4:E5:8F:DF:B9:5C:87:81:AB:88:11:B0:61:19:E1:81:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN6k5Y_fuVyHgauIEbBhGeGBTvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/nEoDjLZcsyIl4kqisoA23Yh3tVk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1620ee-e2ff-4308-af46-d882d03d423a/1/yN6k5Y_fuVyHgauIEbBhGeGBTvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.197.64.0/18
                  78.129.0.0/17
                  82.212.128.0/18
                  85.26.0.0/17
                  85.27.0.0/17
                  85.201.0.0/16
                  95.182.128.0/17
                  109.88.0.0/15
                  149.154.192.0/18
                  185.3.160.0/22
                  212.68.192.0/18
                  213.189.160.0/19
                  213.213.192.0/18
                  217.15.224.0/20
                IPv6:
                  2a02:2788::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:2e:b1:c5:5a:28:af:0a:f7:ea:ad:04:02:ed:63:af:86:
         56:52:14:5e:45:18:26:52:93:37:c3:00:f0:b1:8f:d8:d5:52:
         a9:5e:d7:04:05:11:dd:57:12:7a:b7:c4:07:ab:3c:97:36:65:
         32:99:6c:ab:74:2d:f0:a5:cd:a7:41:08:2d:0d:a4:96:ab:6f:
         23:79:94:b1:8e:50:79:1a:3f:83:3a:96:dc:78:54:7d:41:0c:
         b1:e6:d2:30:24:b7:49:26:68:f6:ab:1b:4d:95:dc:46:20:e5:
         c4:52:e5:43:1f:5b:51:09:3d:37:35:5d:18:86:ed:a3:17:3c:
         c9:db:7b:43:72:65:09:19:9c:1e:2b:4a:87:01:df:2e:9f:a4:
         23:9f:8e:29:9c:67:5d:e4:52:72:7b:4f:42:7e:da:15:ce:ed:
         04:51:3f:b1:a3:0f:63:bd:53:00:e8:3c:6b:03:52:12:a2:27:
         5b:4d:c6:73:11:c9:3c:8f:3d:41:de:50:23:38:af:7e:dd:d4:
         94:22:01:0a:e3:7c:98:5b:3f:ee:9e:61:90:ec:79:5d:06:47:
         db:01:a2:f7:67:3a:47:65:f2:39:14:1d:49:4c:b5:ff:c4:80:
         15:28:a5:e1:75:95:4b:00:e1:44:61:82:62:d4:1f:54:0b:84:
         34:05:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:37 2024 by rpki-client on console-fra.rpki-client.org