Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/7kpPR2mGodImIih-PtTb70MXqsU.roa
File:                     7kpPR2mGodImIih-PtTb70MXqsU.roa (raw, json)
Hash identifier:          ic884xRpcLE1UwfOQddTZKxHxnJFfSSqjn0ztwOGLVA=
Subject key identifier:   EE:4A:4F:47:69:86:A1:D2:26:22:28:7E:3E:D4:DB:EF:43:17:AA:C5
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       0190E9CA8FED9A40EC9BB327DF42F84D8328
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/7kpPR2mGodImIih-PtTb70MXqsU.roa
Signing time:             Thu 25 Jul 2024 12:08:04 +0000
ROA not before:           Thu 25 Jul 2024 12:08:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     30781
IP address blocks:        5.226.0.0/21 maxlen: 24
                          31.7.248.0/21 maxlen: 24
                          31.172.160.0/22 maxlen: 24
                          31.172.232.0/21 maxlen: 24
                          37.26.184.0/21 maxlen: 24
                          37.61.240.0/21 maxlen: 24
                          37.110.192.0/21 maxlen: 24
                          37.156.226.0/24 maxlen: 24
                          46.22.192.0/20 maxlen: 24
                          46.102.116.0/24 maxlen: 24
                          46.231.216.0/21 maxlen: 24
                          46.247.128.0/22 maxlen: 24
                          46.255.200.0/21 maxlen: 24
                          77.72.88.0/21 maxlen: 24
                          77.246.80.0/20 maxlen: 24
                          78.153.224.0/19 maxlen: 24
                          82.96.128.0/18 maxlen: 24
                          82.163.36.0/22 maxlen: 24
                          82.196.24.0/21 maxlen: 24
                          85.31.192.0/19 maxlen: 24
                          87.121.136.0/21 maxlen: 24
                          88.212.144.0/21 maxlen: 24
                          89.37.106.0/24 maxlen: 24
                          89.44.77.0/24 maxlen: 24
                          89.44.210.0/24 maxlen: 24
                          89.200.240.0/23 maxlen: 24
                          91.224.162.0/23 maxlen: 24
                          91.226.193.0/24 maxlen: 24
                          91.250.244.0/24 maxlen: 24
                          94.100.160.0/20 maxlen: 24
                          95.143.64.0/20 maxlen: 24
                          149.232.160.0/20 maxlen: 24
                          176.241.120.0/21 maxlen: 24
                          185.4.60.0/23 maxlen: 24
                          185.4.62.0/24 maxlen: 24
                          185.15.140.0/22 maxlen: 24
                          185.53.80.0/22 maxlen: 24
                          185.61.184.0/21 maxlen: 24
                          185.62.184.0/22 maxlen: 24
                          185.78.156.0/22 maxlen: 24
                          185.91.224.0/22 maxlen: 24
                          185.92.36.0/22 maxlen: 24
                          185.114.100.0/22 maxlen: 24
                          185.209.52.0/22 maxlen: 24
                          193.39.119.0/24 maxlen: 24
                          193.151.84.0/22 maxlen: 24
                          193.151.84.0/24 maxlen: 24
                          193.151.87.0/24 maxlen: 24
                          193.189.124.0/23 maxlen: 24
                          194.42.100.0/23 maxlen: 24
                          194.116.142.0/23 maxlen: 24
                          195.128.147.0/24 maxlen: 24
                          195.189.186.0/23 maxlen: 24
                          195.234.35.0/24 maxlen: 24
                          212.18.240.0/21 maxlen: 24
                          212.85.229.0/24 maxlen: 24
                          212.85.230.0/23 maxlen: 24
                          2a00:68c0::/32 maxlen: 48
                          2a00:78c0::/29 maxlen: 48
                          2a01:240::/32 maxlen: 48
                          2a01:290::/32 maxlen: 48
                          2a02:398::/32 maxlen: 48
                          2a03:bdc0::/32 maxlen: 48
                          2a04:cc00::/29 maxlen: 48
                          2a0b:41c0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e9:ca:8f:ed:9a:40:ec:9b:b3:27:df:42:f8:4d:83:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Jul 25 12:08:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee4a4f476986a1d22622287e3ed4dbef4317aac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:60:cf:7f:d3:b9:51:67:4f:2d:49:93:73:fd:
                    61:6e:a3:b1:6e:07:d1:57:83:e8:e5:c3:24:b0:59:
                    e0:c9:da:48:ca:70:7b:12:f0:8e:aa:cd:5b:38:59:
                    b2:5c:04:01:7a:58:f7:1d:d4:a2:01:ac:c8:a3:22:
                    88:76:43:eb:07:bd:f8:a6:22:54:bf:f9:72:30:12:
                    f5:34:1b:8e:bc:53:1c:69:4e:c3:2c:f6:7c:95:83:
                    4f:42:66:e4:fa:d9:b8:89:1e:52:9d:d9:67:2a:57:
                    6d:21:d1:b5:01:7f:e8:73:96:b3:59:f2:76:bf:28:
                    0b:18:db:e2:ac:86:c9:00:6c:85:f9:5e:55:53:cb:
                    11:95:f9:56:6a:84:a7:8e:ab:1b:80:d9:7d:d6:95:
                    17:46:e7:f3:6d:00:76:a5:5d:17:6f:d2:b3:18:38:
                    dc:69:91:ca:84:4f:61:3c:e2:bf:06:90:25:17:fa:
                    d9:50:75:3f:dc:71:12:94:01:a2:d5:53:cd:12:e4:
                    72:07:a9:9e:54:e8:b0:b3:b2:6e:eb:78:37:20:00:
                    17:6d:2a:b1:04:25:e4:a4:08:6d:9f:42:92:aa:e5:
                    27:25:8e:12:d2:26:5e:21:d7:a8:13:eb:5a:ff:f1:
                    cd:a5:89:a1:60:a4:ae:65:a7:60:d1:6f:c9:d5:d7:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4A:4F:47:69:86:A1:D2:26:22:28:7E:3E:D4:DB:EF:43:17:AA:C5
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/7kpPR2mGodImIih-PtTb70MXqsU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.0.0/21
                  31.7.248.0/21
                  31.172.160.0/22
                  31.172.232.0/21
                  37.26.184.0/21
                  37.61.240.0/21
                  37.110.192.0/21
                  37.156.226.0/24
                  46.22.192.0/20
                  46.102.116.0/24
                  46.231.216.0/21
                  46.247.128.0/22
                  46.255.200.0/21
                  77.72.88.0/21
                  77.246.80.0/20
                  78.153.224.0/19
                  82.96.128.0/18
                  82.163.36.0/22
                  82.196.24.0/21
                  85.31.192.0/19
                  87.121.136.0/21
                  88.212.144.0/21
                  89.37.106.0/24
                  89.44.77.0/24
                  89.44.210.0/24
                  89.200.240.0/23
                  91.224.162.0/23
                  91.226.193.0/24
                  91.250.244.0/24
                  94.100.160.0/20
                  95.143.64.0/20
                  149.232.160.0/20
                  176.241.120.0/21
                  185.4.60.0-185.4.62.255
                  185.15.140.0/22
                  185.53.80.0/22
                  185.61.184.0/21
                  185.62.184.0/22
                  185.78.156.0/22
                  185.91.224.0/22
                  185.92.36.0/22
                  185.114.100.0/22
                  185.209.52.0/22
                  193.39.119.0/24
                  193.151.84.0/22
                  193.189.124.0/23
                  194.42.100.0/23
                  194.116.142.0/23
                  195.128.147.0/24
                  195.189.186.0/23
                  195.234.35.0/24
                  212.18.240.0/21
                  212.85.229.0-212.85.231.255
                IPv6:
                  2a00:68c0::/32
                  2a00:78c0::/29
                  2a01:240::/32
                  2a01:290::/32
                  2a02:398::/32
                  2a03:bdc0::/32
                  2a04:cc00::/29
                  2a0b:41c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         be:b1:bc:2b:e8:0c:26:d6:fb:6a:56:47:a5:35:cf:0f:21:37:
         12:de:e9:ad:de:1a:07:3d:f5:fd:2c:41:a0:44:c3:fd:1a:d7:
         99:74:79:10:fb:15:d9:4e:7c:e0:12:c4:c2:b5:77:53:73:91:
         bd:7b:7f:1d:ea:56:c9:c7:2a:69:8d:cb:9d:01:e3:95:a3:ce:
         e0:48:1c:b0:15:56:76:d8:e1:5c:54:17:92:f3:3f:19:df:df:
         82:67:0e:70:8c:70:e6:f8:e0:52:be:92:8b:db:49:d1:58:4e:
         c6:de:07:70:bb:75:39:8b:11:e6:ed:19:11:4d:65:00:26:56:
         50:a7:e8:35:3e:30:63:2e:75:b3:1b:73:3f:18:9f:9d:c0:27:
         e2:97:d7:02:4e:f9:6b:f4:ef:96:8f:99:61:e1:87:a4:b7:6f:
         10:5a:c4:be:66:50:99:6d:7e:48:fc:2d:6e:7c:f4:be:a1:70:
         1e:0c:2c:f5:c3:b2:8a:85:9f:67:3c:3f:36:4c:fc:59:e3:df:
         46:09:8d:42:cb:5d:85:c8:9e:80:69:bd:b1:a5:f9:af:03:dd:
         17:8f:ca:a2:cd:af:97:d8:91:5b:f2:df:bd:f2:2b:13:30:a1:
         4e:8f:25:5b:2a:2f:68:c2:0d:79:6f:e6:e9:ae:28:11:3a:ef:
         03:65:e9:1d
-----BEGIN CERTIFICATE-----
MIIGjzCCBXegAwIBAgISAZDpyo/tmkDsm7Mn30L4TYMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjQwNzI1MTIwODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTRhNGY0NzY5ODZhMWQyMjYyMjI4N2UzZWQ0ZGJlZjQzMTdhYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mDPf9O5UWdPLUmTc/1hbqOxbgfR
V4Po5cMksFngydpIynB7EvCOqs1bOFmyXAQBelj3HdSiAazIoyKIdkPrB734piJU
v/lyMBL1NBuOvFMcaU7DLPZ8lYNPQmbk+tm4iR5SndlnKldtIdG1AX/oc5azWfJ2
vygLGNvirIbJAGyF+V5VU8sRlflWaoSnjqsbgNl91pUXRufzbQB2pV0Xb9KzGDjc
aZHKhE9hPOK/BpAlF/rZUHU/3HESlAGi1VPNEuRyB6meVOiws7Ju63g3IAAXbSqx
BCXkpAhtn0KSquUnJY4S0iZeIdeoE+ta//HNpYmhYKSuZadg0W/J1deTxwIDAQAB
o4IDmzCCA5cwHQYDVR0OBBYEFO5KT0dphqHSJiIofj7U2+9DF6rFMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvN2twUFIybUdvZEltSWloLVB0VGI3ME1YcXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBrwYIKwYBBQUHAQcBAf8EggGeMIIBmjCCAVYEAgABMIIB
TgMEAwXiAAMEAx8H+AMEAh+soAMEAx+s6AMEAyUauAMEAyU98AMEAyVuwAMEACWc
4gMEBC4WwAMEAC5mdAMEAy7n2AMEAi73gAMEAy7/yAMEA01IWAMEBE32UAMEBU6Z
4AMEBlJggAMEAlKjJAMEA1LEGAMEBVUfwAMEA1d5iAMEA1jUkAMEAFklagMEAFks
TQMEAFks0gMEAVnI8AMEAVvgogMEAFviwQMEAFv69AMEBF5koAMEBF+PQAMEBJXo
oAMEA7DxeDAMAwQCuQQ8AwQAuQQ+AwQCuQ+MAwQCuTVQAwQDuT24AwQCuT64AwQC
uU6cAwQCuVvgAwQCuVwkAwQCuXJkAwQCudE0AwQAwSd3AwQCwZdUAwQBwb18AwQB
wipkAwQBwnSOAwQAw4CTAwQBw726AwQAw+ojAwQD1BLwMAwDBADUVeUDBAPUVeAw
PgQCAAIwOAMFACoAaMADBQMqAHjAAwUAKgECQAMFACoBApADBQAqAgOYAwUAKgO9
wAMFAyoEzAADBQMqC0HAMA0GCSqGSIb3DQEBCwUAA4IBAQC+sbwr6Awm1vtqVkel
Nc8PITcS3umt3hoHPfX9LEGgRMP9GteZdHkQ+xXZTnzgEsTCtXdTc5G9e38d6lbJ
xyppjcudAeOVo87gSBywFVZ22OFcVBeS8z8Z39+CZw5wjHDm+OBSvpKL20nRWE7G
3gdwu3U5ixHm7RkRTWUAJlZQp+g1PjBjLnWzG3M/GJ+dwCfil9cCTvlr9O+Wj5lh
4Yekt28QWsS+ZlCZbX5I/C1ufPS+oXAeDCz1w7KKhZ9nPD82TPxZ499GCY1Cy12F
yJ6Aab2xpfmvA90Xj8qiza+X2JFb8t+98isTMKFOjyVbKi9owg15b+bprigROu8D
Zekd
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:48 2024 by rpki-client on console.sobornost.net