Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa
File:                     UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (raw, json)
Hash identifier:          yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=
Subject key identifier:   50:76:43:48:2C:20:E3:E0:E3:09:3C:36:4E:14:95:F5:83:23:B5:8F
Certificate issuer:       /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial:       01952867718EF555EFE79C745F8B053AF754
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa
Signing time:             Fri 21 Feb 2025 12:07:02 +0000
ROA not before:           Fri 21 Feb 2025 12:07:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15598
IP address blocks:        62.146.0.0/22 maxlen: 22
                          62.146.4.0/22 maxlen: 22
                          62.146.8.0/22 maxlen: 22
                          62.146.12.0/22 maxlen: 22
                          62.146.16.0/22 maxlen: 22
                          62.146.17.0/24 maxlen: 24
                          62.146.20.0/22 maxlen: 22
                          62.146.24.0/22 maxlen: 22
                          62.146.28.0/22 maxlen: 22
                          62.146.32.0/22 maxlen: 22
                          62.146.36.0/22 maxlen: 22
                          62.146.40.0/22 maxlen: 22
                          62.146.44.0/22 maxlen: 22
                          62.146.48.0/22 maxlen: 22
                          62.146.52.0/22 maxlen: 22
                          62.146.56.0/22 maxlen: 22
                          62.146.60.0/22 maxlen: 22
                          62.146.64.0/22 maxlen: 22
                          62.146.68.0/22 maxlen: 22
                          62.146.72.0/22 maxlen: 22
                          62.146.76.0/22 maxlen: 22
                          62.146.80.0/22 maxlen: 22
                          62.146.84.0/22 maxlen: 22
                          62.146.88.0/22 maxlen: 22
                          62.146.92.0/22 maxlen: 22
                          62.146.96.0/22 maxlen: 22
                          62.146.100.0/22 maxlen: 22
                          62.146.104.0/22 maxlen: 22
                          62.146.108.0/22 maxlen: 22
                          62.146.112.0/22 maxlen: 22
                          62.146.116.0/22 maxlen: 22
                          62.146.120.0/22 maxlen: 22
                          62.146.124.0/22 maxlen: 22
                          62.146.128.0/22 maxlen: 22
                          62.146.132.0/22 maxlen: 22
                          62.146.136.0/22 maxlen: 22
                          62.146.140.0/22 maxlen: 22
                          62.146.144.0/22 maxlen: 22
                          62.146.148.0/22 maxlen: 22
                          62.146.152.0/22 maxlen: 22
                          62.146.156.0/22 maxlen: 22
                          62.146.160.0/22 maxlen: 22
                          62.146.184.0/22 maxlen: 22
                          62.146.188.0/22 maxlen: 22
                          62.146.192.0/22 maxlen: 22
                          62.146.196.0/22 maxlen: 22
                          62.146.200.0/22 maxlen: 22
                          62.146.204.0/22 maxlen: 22
                          62.146.208.0/22 maxlen: 22
                          62.146.212.0/22 maxlen: 22
                          62.146.212.0/24 maxlen: 24
                          62.146.216.0/22 maxlen: 22
                          62.146.220.0/22 maxlen: 22
                          62.146.240.0/22 maxlen: 22
                          80.190.4.0/22 maxlen: 22
                          80.190.8.0/21 maxlen: 21
                          80.190.16.0/21 maxlen: 21
                          80.190.24.0/21 maxlen: 21
                          80.190.32.0/21 maxlen: 21
                          80.190.40.0/21 maxlen: 21
                          80.190.48.0/21 maxlen: 21
                          80.190.56.0/21 maxlen: 21
                          80.190.64.0/21 maxlen: 21
                          80.190.88.0/21 maxlen: 21
                          80.190.96.0/21 maxlen: 21
                          80.190.104.0/21 maxlen: 21
                          80.190.112.0/21 maxlen: 21
                          80.190.120.0/21 maxlen: 21
                          80.190.128.0/21 maxlen: 21
                          80.190.136.0/21 maxlen: 21
                          80.190.144.0/21 maxlen: 21
                          80.190.152.0/21 maxlen: 21
                          80.190.160.0/21 maxlen: 21
                          80.190.168.0/21 maxlen: 21
                          80.190.176.0/21 maxlen: 21
                          80.190.184.0/21 maxlen: 21
                          80.190.192.0/21 maxlen: 21
                          80.190.200.0/21 maxlen: 21
                          80.190.208.0/21 maxlen: 21
                          80.190.216.0/21 maxlen: 21
                          80.190.224.0/21 maxlen: 21
                          80.190.232.0/21 maxlen: 21
                          80.190.240.0/21 maxlen: 21
                          80.190.248.0/21 maxlen: 21
                          81.17.104.0/22 maxlen: 22
                          81.17.108.0/22 maxlen: 22
                          81.17.112.0/22 maxlen: 22
                          81.17.116.0/22 maxlen: 22
                          82.149.64.0/22 maxlen: 22
                          82.149.68.0/22 maxlen: 22
                          82.149.84.0/22 maxlen: 22
                          82.149.88.0/22 maxlen: 22
                          82.149.92.0/22 maxlen: 22
                          185.234.108.0/24 maxlen: 24
                          212.112.224.0/19 maxlen: 19
                          212.123.96.0/19 maxlen: 19
                          2a01:138::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:28:67:71:8e:f5:55:ef:e7:9c:74:5f:8b:05:3a:f7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
        Validity
            Not Before: Feb 21 12:07:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=507643482c20e3e0e3093c364e1495f58323b58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:f1:4c:04:8e:85:d8:85:8d:4c:0f:0f:b5:
                    87:c3:ba:bf:ea:1b:a7:c6:0a:7f:77:50:d1:86:97:
                    cd:e1:e8:ea:d4:53:27:f7:3a:82:70:72:41:95:22:
                    7e:63:83:9b:d1:fa:97:60:fb:c8:0d:47:6b:f4:6e:
                    d1:e5:eb:22:47:ca:8e:d5:b3:e5:42:f4:ab:6c:e3:
                    30:c0:1f:21:6b:89:a7:97:f5:47:42:9b:43:93:07:
                    65:c0:6b:7d:65:d9:72:1e:da:e0:53:33:6e:d3:9d:
                    21:a8:05:3a:f2:71:ab:3b:dc:53:a9:4d:81:fa:11:
                    ff:72:10:c7:e8:35:13:d9:52:aa:fe:03:ef:a1:b3:
                    86:c5:b6:a1:3d:c3:4e:81:da:c1:09:da:52:23:47:
                    0d:a5:5b:e1:1f:10:36:56:bb:63:ee:39:e5:77:ff:
                    b6:13:1b:5d:6e:27:31:c8:03:51:7e:45:70:ae:47:
                    5a:9a:cd:a4:2f:03:b6:50:8b:73:17:a3:c6:33:a4:
                    6e:bd:fe:58:05:9e:b0:16:09:9a:97:a4:45:ce:1d:
                    6d:29:23:dc:d9:8a:b8:be:3a:b4:83:a4:93:b8:f2:
                    38:68:c9:3e:29:d7:cb:d1:ae:fd:01:f0:38:ba:0d:
                    e8:3a:34:d2:34:2f:4c:30:a6:63:e5:35:cd:04:44:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:76:43:48:2C:20:E3:E0:E3:09:3C:36:4E:14:95:F5:83:23:B5:8F
            X509v3 Authority Key Identifier:
                keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.146.0.0-62.146.163.255
                  62.146.184.0-62.146.223.255
                  62.146.240.0/22
                  80.190.4.0-80.190.71.255
                  80.190.88.0-80.190.255.255
                  81.17.104.0-81.17.119.255
                  82.149.64.0/21
                  82.149.84.0-82.149.95.255
                  185.234.108.0/24
                  212.112.224.0/19
                  212.123.96.0/19
                IPv6:
                  2a01:138::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:4d:50:80:dd:ba:58:8d:61:0f:52:a0:ff:c4:20:b0:80:10:
         08:c4:3f:aa:86:51:10:ea:f7:84:25:60:26:a7:46:bc:37:93:
         c8:0e:d7:07:86:1e:c4:f9:5d:c0:6a:f4:34:d1:f5:96:1c:2e:
         bc:88:71:12:c8:b6:40:17:fb:fb:2a:64:8f:4f:1f:a9:f5:e4:
         9a:57:9b:36:2c:bb:a5:0a:31:57:e1:4e:58:47:5a:b9:f0:53:
         bf:76:d5:9f:67:61:6d:18:ad:32:a2:66:77:b7:71:61:6f:99:
         c7:3e:7c:96:cd:06:c3:05:67:5f:e2:14:82:6b:8e:ca:31:3e:
         e8:51:06:31:76:a8:1d:51:b2:cc:06:1a:e7:23:23:c6:64:6a:
         d5:82:d5:ef:54:0e:d1:c2:d3:94:fd:9a:42:d9:be:dd:4c:34:
         1f:b2:09:0d:29:c3:4f:ab:c5:1d:3e:04:71:0f:71:a5:5c:bb:
         29:29:6b:da:aa:95:7d:15:63:08:6c:0b:60:a0:62:1c:72:39:
         e1:ae:b0:5a:20:0c:88:fb:b4:8b:42:35:cc:87:bb:b1:ca:a6:
         7a:dc:76:43:2f:02:5a:5c:c8:79:de:77:a0:c1:2e:37:5b:9b:
         0e:45:f3:1a:f1:f6:c1:13:8d:58:c0:7d:8d:f5:07:d8:91:0b:
         47:6a:e2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net