Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/pcgR3s2pz-TuZdUqBBK7BxPl_lk.roa
File:                     pcgR3s2pz-TuZdUqBBK7BxPl_lk.roa (raw, json)
Hash identifier:          uO8XNlgb8q9y2LuJn69oiAXJ/HpKy/y9OtDxvhTmEEY=
Subject key identifier:   A5:C8:11:DE:CD:A9:CF:E4:EE:65:D5:2A:04:12:BB:07:13:E5:FE:59
Certificate issuer:       /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial:       0193CED281C6B621B5D5B3131C441B96FB82
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/pcgR3s2pz-TuZdUqBBK7BxPl_lk.roa
Signing time:             Mon 16 Dec 2024 09:35:22 +0000
ROA not before:           Mon 16 Dec 2024 09:35:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6412
IP address blocks:        80.184.0.0/16 maxlen: 16
                          80.184.0.0/17 maxlen: 17
                          80.184.0.0/18 maxlen: 18
                          80.184.0.0/19 maxlen: 19
                          80.184.0.0/20 maxlen: 20
                          80.184.0.0/21 maxlen: 21
                          80.184.0.0/24 maxlen: 24
                          80.184.8.0/21 maxlen: 21
                          80.184.16.0/20 maxlen: 20
                          80.184.16.0/21 maxlen: 21
                          80.184.24.0/21 maxlen: 21
                          80.184.32.0/19 maxlen: 19
                          80.184.32.0/20 maxlen: 20
                          80.184.32.0/21 maxlen: 21
                          80.184.40.0/21 maxlen: 21
                          80.184.48.0/20 maxlen: 20
                          80.184.48.0/21 maxlen: 21
                          80.184.56.0/21 maxlen: 21
                          80.184.64.0/18 maxlen: 18
                          80.184.64.0/19 maxlen: 19
                          80.184.64.0/20 maxlen: 20
                          80.184.64.0/21 maxlen: 21
                          80.184.71.0/24 maxlen: 24
                          80.184.72.0/21 maxlen: 21
                          80.184.80.0/20 maxlen: 20
                          80.184.80.0/21 maxlen: 21
                          80.184.88.0/21 maxlen: 21
                          80.184.96.0/19 maxlen: 19
                          80.184.96.0/20 maxlen: 20
                          80.184.96.0/21 maxlen: 21
                          80.184.104.0/21 maxlen: 21
                          80.184.112.0/20 maxlen: 20
                          80.184.112.0/21 maxlen: 21
                          80.184.120.0/21 maxlen: 21
                          80.184.128.0/17 maxlen: 17
                          80.184.128.0/18 maxlen: 18
                          80.184.128.0/19 maxlen: 19
                          80.184.128.0/20 maxlen: 20
                          80.184.128.0/21 maxlen: 21
                          80.184.136.0/21 maxlen: 21
                          80.184.144.0/20 maxlen: 20
                          80.184.144.0/21 maxlen: 21
                          80.184.152.0/21 maxlen: 21
                          80.184.160.0/19 maxlen: 19
                          80.184.160.0/20 maxlen: 20
                          80.184.160.0/21 maxlen: 21
                          80.184.160.0/23 maxlen: 23
                          80.184.168.0/21 maxlen: 21
                          80.184.176.0/20 maxlen: 20
                          80.184.176.0/21 maxlen: 21
                          80.184.184.0/21 maxlen: 21
                          80.184.192.0/18 maxlen: 18
                          80.184.192.0/19 maxlen: 19
                          80.184.192.0/20 maxlen: 20
                          80.184.192.0/21 maxlen: 21
                          80.184.200.0/21 maxlen: 21
                          80.184.208.0/20 maxlen: 20
                          80.184.208.0/21 maxlen: 21
                          80.184.216.0/21 maxlen: 21
                          80.184.224.0/19 maxlen: 19
                          80.184.224.0/20 maxlen: 20
                          80.184.224.0/21 maxlen: 21
                          80.184.232.0/21 maxlen: 21
                          80.184.240.0/20 maxlen: 20
                          80.184.240.0/21 maxlen: 21
                          80.184.240.0/24 maxlen: 24
                          80.184.241.0/24 maxlen: 24
                          80.184.242.0/24 maxlen: 24
                          80.184.245.0/24 maxlen: 24
                          80.184.248.0/21 maxlen: 21
                          80.184.248.0/24 maxlen: 24
                          80.184.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ce:d2:81:c6:b6:21:b5:d5:b3:13:1c:44:1b:96:fb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
        Validity
            Not Before: Dec 16 09:35:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a5c811decda9cfe4ee65d52a0412bb0713e5fe59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:a3:60:d6:bf:3a:0d:c8:4e:14:7a:89:37:
                    a4:56:27:76:f0:07:1a:34:e5:a2:c2:ca:49:34:4c:
                    68:fc:28:6b:b8:93:45:5b:9d:1a:42:a7:75:01:ea:
                    77:38:10:da:58:95:c9:4e:25:dd:71:54:e9:43:45:
                    38:f0:3d:1a:cd:2f:94:a2:f6:a1:d2:42:0e:85:3c:
                    36:a6:40:0f:19:de:77:2e:5a:f1:0d:c6:a3:55:a9:
                    3a:38:86:e3:a2:c7:7e:cf:58:63:4c:79:97:f1:2f:
                    99:df:46:2b:a4:0e:1d:ed:74:27:b6:9e:79:4f:c1:
                    ab:50:e2:dc:79:dc:65:af:a7:9d:81:27:b1:d4:b2:
                    2a:54:66:0a:dc:1a:88:4c:03:3f:7d:e2:dd:6c:ad:
                    98:3a:b3:52:16:96:31:2b:72:65:18:16:8d:66:26:
                    9d:86:d8:9d:fd:1b:9a:c9:17:70:03:bb:22:e7:5e:
                    56:dd:47:c0:98:40:b1:c2:67:0e:43:29:73:83:21:
                    c8:41:06:ff:3d:24:d1:5b:21:b7:d7:85:9e:6f:36:
                    fb:41:fe:ea:49:6a:ce:a4:01:4c:8f:f1:29:5e:b3:
                    f8:dd:b7:65:00:4b:18:9c:33:88:81:b1:d2:92:e8:
                    34:f7:5d:0b:8a:a1:f6:36:cd:94:d5:5a:16:03:07:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C8:11:DE:CD:A9:CF:E4:EE:65:D5:2A:04:12:BB:07:13:E5:FE:59
            X509v3 Authority Key Identifier:
                keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/pcgR3s2pz-TuZdUqBBK7BxPl_lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:7e:05:4d:d1:7c:01:e5:e1:89:05:57:0e:5a:6e:1a:10:a7:
         72:81:9b:de:70:c8:a9:98:d0:e3:90:7c:1c:c1:fa:8e:d5:3f:
         90:65:47:2d:de:3f:38:c4:57:b9:c1:c9:bc:6f:a6:56:f2:36:
         9b:72:48:68:d9:4d:13:85:64:82:8e:ff:30:73:d0:9a:b2:ca:
         6b:c2:60:53:fa:00:7f:61:19:f9:a7:95:b6:83:9a:2f:f2:25:
         96:0a:fa:13:ae:58:b7:15:ff:0a:1f:9a:45:4b:9b:16:62:d9:
         ad:7a:f8:4b:40:d0:35:31:a7:e5:b2:63:af:5f:48:e1:25:6f:
         a9:51:2e:e3:a0:eb:87:9a:d2:e1:13:4a:00:34:d8:f7:33:3b:
         96:fb:10:24:22:c1:19:8c:c2:42:55:6c:6f:ab:7d:c8:c0:98:
         bd:05:8e:c9:e3:69:c5:5b:da:6a:e8:d2:46:dd:45:e4:8a:3c:
         3a:38:a9:af:5c:81:3b:4c:b8:86:ed:06:57:cd:11:7d:8f:1a:
         bf:63:66:e0:b3:0e:d0:cf:ca:36:ba:1a:7f:de:de:6e:97:12:
         4a:a3:31:5a:a9:0e:50:de:2b:e2:fd:e3:e2:f3:20:da:97:04:
         17:07:bc:1f:f9:6e:22:31:9c:74:2b:ba:f6:f9:ac:61:2d:8a:
         64:15:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:12 2024 by rpki-client on console.sobornost.net