Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5CikPgAp5jK6pSp3Js9BBzIPLTs.roa
File:                     5CikPgAp5jK6pSp3Js9BBzIPLTs.roa (raw, json)
Hash identifier:          3KlXSk2A55yorEOG87Fyp/oyUbDybm4fyMBJebbovv0=
Subject key identifier:   E4:28:A4:3E:00:29:E6:32:BA:A5:2A:77:26:CF:41:07:32:0F:2D:3B
Certificate issuer:       /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial:       019421B1E5D18E3D355A84494396C0D9EDA2
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5CikPgAp5jK6pSp3Js9BBzIPLTs.roa
Signing time:             Wed 01 Jan 2025 11:48:14 +0000
ROA not before:           Wed 01 Jan 2025 11:48:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21416
IP address blocks:        62.76.253.0/24 maxlen: 24
                          212.193.104.0/24 maxlen: 24
                          212.193.105.0/24 maxlen: 24
                          212.193.106.0/24 maxlen: 24
                          212.193.107.0/24 maxlen: 24
                          212.193.108.0/24 maxlen: 24
                          212.193.109.0/24 maxlen: 24
                          212.193.110.0/24 maxlen: 24
                          212.193.111.0/24 maxlen: 24
                          212.193.112.0/24 maxlen: 24
                          212.193.113.0/24 maxlen: 24
                          212.193.114.0/24 maxlen: 24
                          212.193.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:e5:d1:8e:3d:35:5a:84:49:43:96:c0:d9:ed:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
        Validity
            Not Before: Jan  1 11:48:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e428a43e0029e632baa52a7726cf4107320f2d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2c:7a:54:1b:9c:51:ad:41:d7:71:be:bf:88:
                    52:18:9c:a0:7a:cd:3c:e1:f8:25:41:0c:c4:b6:ac:
                    3f:8f:ba:b0:3d:21:ad:7b:ee:50:9a:ef:86:ac:e2:
                    b4:68:79:1b:e1:be:34:59:e0:ac:2d:be:51:b0:73:
                    cd:96:bc:8e:01:99:3d:1d:d6:b5:88:e2:b4:33:ab:
                    46:e3:a2:77:32:8c:43:69:43:f9:a1:ed:1d:98:c4:
                    03:e1:4c:7f:d6:c2:e4:2a:d6:0b:60:75:cf:dc:32:
                    c6:73:ff:02:84:81:2c:6d:99:6a:2e:c5:78:f6:d7:
                    aa:ce:a3:9d:d3:32:80:e9:4c:80:2b:d0:fa:a9:73:
                    e7:6f:b9:12:80:c5:05:9b:b5:8b:ae:68:8a:b9:c6:
                    f0:59:67:7c:7d:a5:7b:56:dd:7b:dd:10:e8:7d:ad:
                    35:1a:d5:cf:e1:73:13:a4:01:d4:82:2e:c1:45:81:
                    fe:79:cc:99:43:23:c0:9c:0c:4d:2b:3f:02:a4:1f:
                    05:f5:bf:1c:37:1b:ea:f9:ff:5e:56:99:b6:5f:1b:
                    d2:20:88:19:3e:2d:27:61:3f:57:da:a4:1e:f3:30:
                    5b:5d:2f:25:5d:85:0f:61:11:2e:72:07:d6:9b:47:
                    4a:3e:a5:97:b3:33:00:74:6d:c5:e0:ab:31:a6:3c:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:28:A4:3E:00:29:E6:32:BA:A5:2A:77:26:CF:41:07:32:0F:2D:3B
            X509v3 Authority Key Identifier:
                keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/5CikPgAp5jK6pSp3Js9BBzIPLTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.76.253.0/24
                  212.193.104.0-212.193.115.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:0a:d6:f5:4f:7d:3a:3f:0a:b2:2c:98:fa:24:8a:f8:b4:
         fe:f4:12:57:e4:d7:17:6a:87:0e:83:c0:12:81:c9:ab:52:99:
         35:99:4a:a8:2c:11:a1:f3:38:cf:29:eb:b3:29:12:e8:32:30:
         1f:30:36:07:b4:e8:2e:2c:96:0b:21:7c:c1:3f:88:b8:21:47:
         8c:a1:8e:6e:bb:de:50:0e:e7:5f:a0:cb:38:f5:25:4f:13:22:
         16:fd:e5:b0:e8:df:83:38:76:f2:b7:bb:03:48:d8:36:23:34:
         d3:7e:e9:aa:4b:e8:25:92:41:16:d5:53:68:11:fd:2e:a4:04:
         e9:59:a8:bd:31:a0:0f:67:c5:41:12:eb:aa:ba:ed:a8:76:82:
         e6:0e:5b:78:a9:5b:9c:17:9b:6d:56:f8:bf:89:b0:22:6b:b8:
         b6:7a:a9:07:a0:93:00:61:db:da:37:c0:70:ee:b5:62:02:b7:
         4e:65:c7:b9:8c:c8:a9:bd:a7:a2:82:8c:0f:54:df:37:ee:d1:
         f0:24:1e:e4:b7:6a:b8:6d:f0:24:f1:0b:ed:13:a9:e6:5c:c6:
         a5:69:14:58:91:bd:aa:63:f6:7c:34:50:a2:3f:a4:b7:53:b8:
         cd:d7:af:a0:82:74:aa:aa:70:6d:a7:da:8e:c2:de:67:05:1c:
         42:60:60:6b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQhseXRjj01WoRJQ5bA2e2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2
OTdhMDMwHhcNMjUwMTAxMTE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDI4YTQzZTAwMjllNjMyYmFhNTJhNzcyNmNmNDEwNzMyMGYyZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCx6VBucUa1B13G+v4hSGJyges08
4fglQQzEtqw/j7qwPSGte+5Qmu+GrOK0aHkb4b40WeCsLb5RsHPNlryOAZk9Hda1
iOK0M6tG46J3MoxDaUP5oe0dmMQD4Ux/1sLkKtYLYHXP3DLGc/8ChIEsbZlqLsV4
9teqzqOd0zKA6UyAK9D6qXPnb7kSgMUFm7WLrmiKucbwWWd8faV7Vt173RDofa01
GtXP4XMTpAHUgi7BRYH+ecyZQyPAnAxNKz8CpB8F9b8cNxvq+f9eVpm2XxvSIIgZ
Pi0nYT9X2qQe8zBbXS8lXYUPYREucgfWm0dKPqWXszMAdG3F4KsxpjxqeQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOQopD4AKeYyuqUqdybPQQcyDy07MB8GA1UdIwQY
MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt
Njg4ZDMzM2VkOWQ1LzEvNUNpa1BnQXA1aks2cFNwM0pzOUJCeklQTFRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1
LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAPkz9MAwD
BAPUwWgDBALUwXAwDQYJKoZIhvcNAQELBQADggEBAF8JCtb1T306PwqyLJj6JIr4
tP70Elfk1xdqhw6DwBKByatSmTWZSqgsEaHzOM8p67MpEugyMB8wNge06C4slgsh
fME/iLghR4yhjm673lAO51+gyzj1JU8TIhb95bDo34M4dvK3uwNI2DYjNNN+6apL
6CWSQRbVU2gR/S6kBOlZqL0xoA9nxUES66q67ah2guYOW3ipW5wXm21W+L+JsCJr
uLZ6qQegkwBh29o3wHDutWICt05lx7mMyKm9p6KCjA9U3zfu0fAkHuS3arht8CTx
C+0TqeZcxqVpFFiRvapj9nw0UKI/pLdTuM3Xr6CCdKqqcG2n2o7C3mcFHEJgYGs=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:19 2025 by rpki-client