Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jkq4dEcJg01RGb5RKkzpde8pi6w.roa
File:                     Jkq4dEcJg01RGb5RKkzpde8pi6w.roa (raw, json)
Hash identifier:          BuhPNyLUgawGhDO3vVojNIHLWSXc8rwJHw79WaGfKfY=
Subject key identifier:   26:4A:B8:74:47:09:83:4D:51:19:BE:51:2A:4C:E9:75:EF:29:8B:AC
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0196265F92523957FAEE7403DA73ED7F9B6D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jkq4dEcJg01RGb5RKkzpde8pi6w.roa
Signing time:             Fri 11 Apr 2025 19:41:59 +0000
ROA not before:           Fri 11 Apr 2025 19:41:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34665
IP address blocks:        5.8.0.0/21 maxlen: 22
                          5.8.8.0/22 maxlen: 22
                          5.8.8.0/23 maxlen: 23
                          5.8.8.0/24 maxlen: 24
                          5.8.9.0/24 maxlen: 24
                          5.8.10.0/23 maxlen: 23
                          5.8.10.0/24 maxlen: 24
                          5.8.11.0/24 maxlen: 24
                          5.8.12.0/22 maxlen: 22
                          5.8.16.0/24 maxlen: 24
                          5.8.48.0/22 maxlen: 22
                          5.8.48.0/23 maxlen: 23
                          5.8.48.0/24 maxlen: 24
                          5.8.49.0/24 maxlen: 24
                          5.8.50.0/23 maxlen: 23
                          5.8.50.0/24 maxlen: 24
                          5.8.51.0/24 maxlen: 24
                          5.8.52.0/22 maxlen: 22
                          5.8.52.0/23 maxlen: 23
                          5.8.52.0/24 maxlen: 24
                          5.8.53.0/24 maxlen: 24
                          5.8.54.0/23 maxlen: 23
                          5.8.54.0/24 maxlen: 24
                          5.8.55.0/24 maxlen: 24
                          5.8.60.0/23 maxlen: 23
                          5.8.65.0/24 maxlen: 24
                          5.8.80.0/21 maxlen: 23
                          5.101.0.0/22 maxlen: 22
                          5.101.0.0/23 maxlen: 23
                          5.101.0.0/24 maxlen: 24
                          5.101.1.0/24 maxlen: 24
                          5.101.2.0/23 maxlen: 23
                          5.101.2.0/24 maxlen: 24
                          5.101.3.0/24 maxlen: 24
                          5.101.4.0/22 maxlen: 22
                          5.101.4.0/23 maxlen: 23
                          5.101.4.0/24 maxlen: 24
                          5.101.5.0/24 maxlen: 24
                          5.101.6.0/23 maxlen: 23
                          5.101.6.0/24 maxlen: 24
                          5.101.7.0/24 maxlen: 24
                          5.101.32.0/22 maxlen: 24
                          5.101.64.0/22 maxlen: 22
                          5.101.64.0/23 maxlen: 23
                          5.101.64.0/24 maxlen: 24
                          5.101.65.0/24 maxlen: 24
                          5.101.66.0/23 maxlen: 23
                          5.101.66.0/24 maxlen: 24
                          5.101.67.0/24 maxlen: 24
                          5.101.80.0/21 maxlen: 21
                          5.101.90.0/23 maxlen: 23
                          5.188.44.0/22 maxlen: 22
                          5.188.44.0/23 maxlen: 23
                          5.188.44.0/24 maxlen: 24
                          5.188.45.0/24 maxlen: 24
                          5.188.46.0/23 maxlen: 23
                          5.188.46.0/24 maxlen: 24
                          5.188.47.0/24 maxlen: 24
                          5.188.49.0/24 maxlen: 24
                          5.188.208.0/23 maxlen: 23
                          5.188.210.0/24 maxlen: 24
                          5.188.211.0/24 maxlen: 24
                          5.188.223.0/24 maxlen: 24
                          5.188.233.0/24 maxlen: 24
                          5.188.234.0/23 maxlen: 23
                          31.44.188.0/22 maxlen: 32
                          31.184.192.0/22 maxlen: 22
                          31.184.192.0/23 maxlen: 23
                          31.184.192.0/24 maxlen: 24
                          31.184.193.0/24 maxlen: 24
                          31.184.194.0/23 maxlen: 23
                          31.184.194.0/24 maxlen: 24
                          31.184.195.0/24 maxlen: 24
                          31.184.196.0/22 maxlen: 22
                          31.184.196.0/23 maxlen: 23
                          31.184.196.0/24 maxlen: 24
                          31.184.197.0/24 maxlen: 24
                          31.184.198.0/23 maxlen: 23
                          31.184.198.0/24 maxlen: 24
                          31.184.199.0/24 maxlen: 24
                          31.184.238.0/23 maxlen: 23
                          31.184.243.0/24 maxlen: 24
                          37.9.48.0/24 maxlen: 24
                          37.139.53.0/24 maxlen: 24
                          37.139.54.0/23 maxlen: 23
                          37.139.56.0/22 maxlen: 22
                          37.139.56.0/23 maxlen: 23
                          37.139.56.0/24 maxlen: 24
                          37.139.57.0/24 maxlen: 24
                          37.139.58.0/23 maxlen: 23
                          37.139.58.0/24 maxlen: 24
                          37.139.59.0/24 maxlen: 24
                          46.161.2.0/23 maxlen: 23
                          46.161.8.0/24 maxlen: 24
                          46.161.10.0/24 maxlen: 24
                          46.161.14.0/23 maxlen: 23
                          46.161.20.0/22 maxlen: 22
                          46.161.28.0/22 maxlen: 22
                          46.161.32.0/22 maxlen: 22
                          46.161.44.0/22 maxlen: 22
                          46.161.48.0/22 maxlen: 22
                          46.161.48.0/23 maxlen: 23
                          46.161.48.0/24 maxlen: 24
                          46.161.49.0/24 maxlen: 24
                          46.161.50.0/23 maxlen: 23
                          46.161.50.0/24 maxlen: 24
                          46.161.51.0/24 maxlen: 24
                          91.243.48.0/22 maxlen: 22
                          91.243.48.0/23 maxlen: 23
                          91.243.48.0/24 maxlen: 24
                          91.243.49.0/24 maxlen: 24
                          91.243.50.0/23 maxlen: 23
                          91.243.50.0/24 maxlen: 24
                          91.243.51.0/24 maxlen: 24
                          91.243.52.0/22 maxlen: 22
                          91.243.56.0/22 maxlen: 22
                          91.243.60.0/24 maxlen: 24
                          91.243.61.0/24 maxlen: 24
                          91.243.90.0/24 maxlen: 24
                          91.243.91.0/24 maxlen: 24
                          91.243.93.0/24 maxlen: 24
                          95.215.0.0/22 maxlen: 24
                          95.215.0.0/23 maxlen: 23
                          95.215.0.0/24 maxlen: 24
                          95.215.1.0/24 maxlen: 24
                          95.215.2.0/23 maxlen: 23
                          95.215.2.0/24 maxlen: 24
                          95.215.3.0/24 maxlen: 24
                          146.185.223.0/24 maxlen: 24
                          146.185.224.0/21 maxlen: 21
                          188.143.232.0/22 maxlen: 22
                          188.143.232.0/23 maxlen: 23
                          188.143.232.0/24 maxlen: 24
                          188.143.233.0/24 maxlen: 24
                          188.143.235.0/24 maxlen: 24
                          195.2.240.0/23 maxlen: 24
                          2a00:1d78:100:1c0::/58 maxlen: 58

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:26:5f:92:52:39:57:fa:ee:74:03:da:73:ed:7f:9b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Apr 11 19:41:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=264ab8744709834d5119be512a4ce975ef298bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:8c:c7:7f:b1:57:12:ee:90:c5:7e:bc:81:
                    4b:37:4e:63:02:2c:df:77:3c:6c:d2:5b:17:12:54:
                    06:6c:81:e3:11:8c:70:f2:33:c8:74:ce:3f:a7:98:
                    07:ad:29:ca:66:b2:8f:9b:3f:09:71:db:9b:e5:75:
                    99:db:6c:7c:cb:33:ec:0b:ea:9b:dc:26:2e:83:35:
                    27:e8:44:0c:97:57:f8:1d:0f:4c:67:3f:3c:c8:bc:
                    ff:39:b4:77:22:a9:82:c3:85:b9:92:c1:b1:3b:23:
                    fb:1f:1a:57:43:af:bb:e3:71:fc:76:62:67:17:10:
                    36:01:7f:4c:62:17:7d:c6:65:a2:d3:bd:e3:69:60:
                    a4:90:a5:b6:c3:b2:94:15:74:a2:0f:9c:59:23:cc:
                    3e:0c:88:07:c0:30:4f:d5:a0:d7:e0:11:9a:72:9a:
                    84:55:7d:45:55:d4:47:68:77:6e:bf:90:04:ef:d0:
                    68:98:ac:20:24:2c:90:c2:57:23:20:1e:97:ee:51:
                    70:4e:b9:f8:df:b7:07:bc:b2:26:51:4e:ac:12:83:
                    54:c8:9b:2a:54:62:e5:57:2e:c8:c3:ed:cd:66:bc:
                    7e:51:94:74:66:d7:36:a5:2c:2d:da:4f:b2:91:4d:
                    20:4b:e9:59:56:ca:28:25:1a:c4:5b:97:7c:e8:25:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4A:B8:74:47:09:83:4D:51:19:BE:51:2A:4C:E9:75:EF:29:8B:AC
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jkq4dEcJg01RGb5RKkzpde8pi6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.0.0-5.8.16.255
                  5.8.48.0/21
                  5.8.60.0/23
                  5.8.65.0/24
                  5.8.80.0/21
                  5.101.0.0/21
                  5.101.32.0/22
                  5.101.64.0/22
                  5.101.80.0/21
                  5.101.90.0/23
                  5.188.44.0/22
                  5.188.49.0/24
                  5.188.208.0/22
                  5.188.223.0/24
                  5.188.233.0-5.188.235.255
                  31.44.188.0/22
                  31.184.192.0/21
                  31.184.238.0/23
                  31.184.243.0/24
                  37.9.48.0/24
                  37.139.53.0-37.139.59.255
                  46.161.2.0/23
                  46.161.8.0/24
                  46.161.10.0/24
                  46.161.14.0/23
                  46.161.20.0/22
                  46.161.28.0-46.161.35.255
                  46.161.44.0-46.161.51.255
                  91.243.48.0-91.243.61.255
                  91.243.90.0/23
                  91.243.93.0/24
                  95.215.0.0/22
                  146.185.223.0-146.185.231.255
                  188.143.232.0/22
                  195.2.240.0/23
                IPv6:
                  2a00:1d78:100:1c0::/58

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:ce:b1:69:c8:8e:42:2e:f6:92:62:f2:69:98:cc:27:4a:
         0b:12:12:ec:54:4d:22:6e:7f:26:99:b5:96:00:97:23:a6:63:
         86:ba:51:7f:4a:d7:89:83:6d:28:e4:ca:c5:d2:8e:6b:49:3b:
         fa:41:ef:c0:4f:5c:fd:2c:54:87:14:df:c6:76:b7:da:b7:1a:
         78:67:88:87:ff:fc:e2:c4:a8:8e:0a:4f:d4:7d:85:23:a1:d4:
         fb:96:71:66:0a:44:dc:c5:84:dd:84:cb:84:c6:9e:77:0d:48:
         81:c7:3b:f5:54:ea:bb:57:cf:4d:b4:ae:b5:ff:17:ca:5a:59:
         60:16:12:b5:9d:f2:84:47:83:ce:4c:eb:f6:a9:d5:51:a2:c7:
         56:1e:c2:23:2e:dc:44:e2:0a:21:c5:a2:02:c8:88:7d:fe:c1:
         95:ab:c0:23:eb:f6:93:1b:71:85:10:12:53:a9:78:6f:1b:69:
         be:04:9b:f3:8a:69:ef:cc:c0:54:7e:1c:2e:65:98:24:6b:b7:
         e4:f6:b4:a5:01:58:bb:b7:94:a5:8a:1c:cf:e6:79:71:2a:af:
         6d:93:7d:35:e1:21:88:df:33:82:b6:3d:4d:1a:a8:53:2d:78:
         50:0f:b5:14:78:02:20:86:a4:25:f0:bd:38:52:20:90:f0:cd:
         de:3c:28:2b
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgISAZYmX5JSOVf67nQD2nPtf5ttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwNDExMTk0MTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjRhYjg3NDQ3MDk4MzRkNTExOWJlNTEyYTRjZTk3NWVmMjk4YmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMSMx3+xVxLukMV+vIFLN05jAizf
dzxs0lsXElQGbIHjEYxw8jPIdM4/p5gHrSnKZrKPmz8Jcdub5XWZ22x8yzPsC+qb
3CYugzUn6EQMl1f4HQ9MZz88yLz/ObR3IqmCw4W5ksGxOyP7HxpXQ6+743H8dmJn
FxA2AX9MYhd9xmWi073jaWCkkKW2w7KUFXSiD5xZI8w+DIgHwDBP1aDX4BGacpqE
VX1FVdRHaHduv5AE79BomKwgJCyQwlcjIB6X7lFwTrn437cHvLImUU6sEoNUyJsq
VGLlVy7Iw+3NZrx+UZR0Ztc2pSwt2k+ykU0gS+lZVsooJRrEW5d86CV6bQIDAQAB
o4IDKTCCAyUwHQYDVR0OBBYEFCZKuHRHCYNNURm+USpM6XXvKYusMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvSmtxNGRFY0pnMDFSR2I1UktrenBkZThwaTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPQYIKwYBBQUHAQcBAf8EggEsMIIBKDCCAREEAgABMIIB
CTALAwMDBQgDBAAFCBADBAMFCDADBAEFCDwDBAAFCEEDBAMFCFADBAMFZQADBAIF
ZSADBAIFZUADBAMFZVADBAEFZVoDBAIFvCwDBAAFvDEDBAIFvNADBAAFvN8wDAME
AAW86QMEAgW86AMEAh8svAMEAx+4wAMEAR+47gMEAB+48wMEACUJMDAMAwQAJYs1
AwQCJYs4AwQBLqECAwQALqEIAwQALqEKAwQBLqEOAwQCLqEUMAwDBAIuoRwDBAIu
oSAwDAMEAi6hLAMEAi6hMDAMAwQEW/MwAwQBW/M8AwQBW/NaAwQAW/NdAwQCX9cA
MAwDBACSud8DBAOSueADBAK8j+gDBAHDAvAwEQQCAAIwCwMJBioAHXgBAAHAMA0G
CSqGSIb3DQEBCwUAA4IBAQBt2s6xaciOQi72kmLyaZjMJ0oLEhLsVE0ibn8mmbWW
AJcjpmOGulF/SteJg20o5MrF0o5rSTv6Qe/AT1z9LFSHFN/Gdrfatxp4Z4iH//zi
xKiOCk/UfYUjodT7lnFmCkTcxYTdhMuExp53DUiBxzv1VOq7V89NtK61/xfKWllg
FhK1nfKER4POTOv2qdVRosdWHsIjLtxE4gohxaICyIh9/sGVq8Aj6/aTG3GFEBJT
qXhvG2m+BJvzimnvzMBUfhwuZZgka7fk9rSlAVi7t5SlihzP5nlxKq9tk3014SGI
3zOCtj1NGqhTLXhQD7UUeAIghqQl8L04UiCQ8M3ePCgr
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net