Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/w63GOtzwUSPDxlnBS7NrFPDkJvo.roa
File:                     w63GOtzwUSPDxlnBS7NrFPDkJvo.roa (raw, json)
Hash identifier:          O+5RZcIrEEAAPCLYoEdbJOsQ69dW3Fm4bCfSUv9q4fs=
Subject key identifier:   C3:AD:C6:3A:DC:F0:51:23:C3:C6:59:C1:4B:B3:6B:14:F0:E4:26:FA
Certificate issuer:       /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial:       01942826FCC2AEA68CF938728AD1BB0AA795
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/w63GOtzwUSPDxlnBS7NrFPDkJvo.roa
Signing time:             Thu 02 Jan 2025 17:53:51 +0000
ROA not before:           Thu 02 Jan 2025 17:53:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     719
IP address blocks:        31.7.16.0/20 maxlen: 20
                          46.182.112.0/21 maxlen: 21
                          62.142.0.0/16 maxlen: 16
                          62.148.192.0/19 maxlen: 19
                          62.216.96.0/19 maxlen: 19
                          62.240.64.0/19 maxlen: 19
                          62.248.128.0/17 maxlen: 17
                          77.109.192.0/18 maxlen: 18
                          80.81.160.0/19 maxlen: 19
                          80.88.176.0/20 maxlen: 20
                          80.186.0.0/16 maxlen: 16
                          80.248.96.0/19 maxlen: 19
                          81.197.0.0/16 maxlen: 16
                          81.209.0.0/17 maxlen: 17
                          82.103.192.0/18 maxlen: 18
                          82.118.192.0/19 maxlen: 19
                          82.141.64.0/18 maxlen: 18
                          82.215.192.0/18 maxlen: 18
                          83.245.128.0/17 maxlen: 17
                          84.230.0.0/15 maxlen: 15
                          85.76.0.0/14 maxlen: 14
                          85.156.0.0/16 maxlen: 16
                          85.157.0.0/16 maxlen: 16
                          85.217.0.0/17 maxlen: 17
                          88.112.0.0/14 maxlen: 14
                          91.152.0.0/13 maxlen: 13
                          94.22.0.0/16 maxlen: 16
                          109.232.80.0/21 maxlen: 21
                          139.97.0.0/16 maxlen: 16
                          178.251.56.0/21 maxlen: 21
                          192.77.120.0/22 maxlen: 22
                          192.102.32.0/24 maxlen: 24
                          192.102.36.0/24 maxlen: 24
                          192.102.37.0/24 maxlen: 24
                          192.102.38.0/24 maxlen: 24
                          192.102.39.0/24 maxlen: 24
                          192.102.40.0/24 maxlen: 24
                          192.102.41.0/24 maxlen: 24
                          192.102.42.0/24 maxlen: 24
                          192.102.49.0/24 maxlen: 24
                          192.102.50.0/24 maxlen: 24
                          192.126.1.0/24 maxlen: 24
                          192.126.23.0/24 maxlen: 24
                          192.126.24.0/24 maxlen: 24
                          192.126.35.0/24 maxlen: 24
                          192.126.44.0/24 maxlen: 24
                          192.126.46.0/24 maxlen: 24
                          192.163.32.0/19 maxlen: 19
                          192.163.64.0/18 maxlen: 18
                          192.163.128.0/19 maxlen: 19
                          193.64.0.0/15 maxlen: 15
                          193.65.129.0/24 maxlen: 24
                          193.66.0.0/16 maxlen: 16
                          193.94.0.0/16 maxlen: 16
                          193.142.51.0/24 maxlen: 24
                          193.184.0.0/15 maxlen: 15
                          193.199.0.0/16 maxlen: 16
                          193.229.0.0/16 maxlen: 16
                          194.86.0.0/16 maxlen: 16
                          194.86.35.0/24 maxlen: 24
                          194.136.0.0/16 maxlen: 16
                          194.157.0.0/16 maxlen: 16
                          194.188.0.0/16 maxlen: 16
                          194.211.0.0/16 maxlen: 16
                          194.240.0.0/15 maxlen: 15
                          195.16.192.0/19 maxlen: 19
                          195.74.0.0/19 maxlen: 19
                          195.170.128.0/19 maxlen: 19
                          195.197.0.0/16 maxlen: 16
                          195.218.64.0/19 maxlen: 19
                          195.236.0.0/15 maxlen: 15
                          195.238.192.0/19 maxlen: 19
                          195.255.0.0/16 maxlen: 16
                          212.38.224.0/19 maxlen: 19
                          212.50.192.0/19 maxlen: 19
                          212.54.0.0/19 maxlen: 19
                          212.63.0.0/19 maxlen: 19
                          212.226.0.0/16 maxlen: 16
                          212.246.0.0/16 maxlen: 16
                          213.130.224.0/19 maxlen: 19
                          213.161.32.0/19 maxlen: 19
                          213.169.0.0/19 maxlen: 19
                          213.192.128.0/18 maxlen: 18
                          213.250.64.0/18 maxlen: 18
                          217.24.96.0/20 maxlen: 20
                          217.25.96.0/20 maxlen: 20
                          217.77.192.0/20 maxlen: 20
                          217.152.0.0/16 maxlen: 16
                          2001:670::/29 maxlen: 32
                          2001:998::/29 maxlen: 32
                          2001:9f0::/29 maxlen: 32
                          2001:1658::/29 maxlen: 32
                          2a00:1dd0::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:fc:c2:ae:a6:8c:f9:38:72:8a:d1:bb:0a:a7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
        Validity
            Not Before: Jan  2 17:53:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c3adc63adcf05123c3c659c14bb36b14f0e426fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:d7:72:8f:db:91:89:9e:86:85:12:c9:9e:
                    70:51:ec:cd:1e:53:e9:1f:9d:09:b0:6c:71:87:4f:
                    5f:72:8c:06:a1:70:91:80:2a:5b:4c:32:e1:25:44:
                    ff:46:f8:b9:df:39:59:a6:3d:17:db:ff:38:d0:01:
                    f7:75:f1:5b:c5:67:12:11:86:6e:60:45:94:0f:ee:
                    fe:30:78:52:8b:0a:16:39:83:b5:71:57:bf:f1:72:
                    4d:ae:6d:c5:5c:6e:09:55:10:d5:6b:48:3e:64:87:
                    4e:fb:5d:6d:8d:8b:88:1d:b5:d7:b4:be:f4:df:7d:
                    c6:63:78:ee:9e:88:bc:df:13:62:6f:a7:be:2a:40:
                    ea:42:38:b4:2d:5a:87:1c:87:78:7b:1d:75:d6:16:
                    c9:6e:96:bf:3e:21:d9:8e:61:fe:be:e5:fc:c0:7b:
                    24:e9:7b:3f:95:ec:7a:3f:fc:98:8f:d3:d7:15:3c:
                    6d:4a:da:7d:6b:6e:71:a2:f9:95:cd:91:6b:98:0e:
                    d1:ff:f8:7d:fc:8c:74:1e:09:a7:aa:ae:34:e6:de:
                    3d:b0:47:a8:f6:61:c8:c9:db:6a:0b:00:71:b3:56:
                    7b:2b:bb:5b:c7:8b:0a:16:79:d1:32:10:8b:2a:bf:
                    4a:ff:65:e9:b4:9a:8f:51:f1:e6:c1:93:9c:8f:b9:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:C6:3A:DC:F0:51:23:C3:C6:59:C1:4B:B3:6B:14:F0:E4:26:FA
            X509v3 Authority Key Identifier:
                keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/w63GOtzwUSPDxlnBS7NrFPDkJvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.7.16.0/20
                  46.182.112.0/21
                  62.142.0.0/16
                  62.148.192.0/19
                  62.216.96.0/19
                  62.240.64.0/19
                  62.248.128.0/17
                  77.109.192.0/18
                  80.81.160.0/19
                  80.88.176.0/20
                  80.186.0.0/16
                  80.248.96.0/19
                  81.197.0.0/16
                  81.209.0.0/17
                  82.103.192.0/18
                  82.118.192.0/19
                  82.141.64.0/18
                  82.215.192.0/18
                  83.245.128.0/17
                  84.230.0.0/15
                  85.76.0.0/14
                  85.156.0.0/15
                  85.217.0.0/17
                  88.112.0.0/14
                  91.152.0.0/13
                  94.22.0.0/16
                  109.232.80.0/21
                  139.97.0.0/16
                  178.251.56.0/21
                  192.77.120.0/22
                  192.102.32.0/24
                  192.102.36.0-192.102.42.255
                  192.102.49.0-192.102.50.255
                  192.126.1.0/24
                  192.126.23.0-192.126.24.255
                  192.126.35.0/24
                  192.126.44.0/24
                  192.126.46.0/24
                  192.163.32.0-192.163.159.255
                  193.64.0.0-193.66.255.255
                  193.94.0.0/16
                  193.142.51.0/24
                  193.184.0.0/15
                  193.199.0.0/16
                  193.229.0.0/16
                  194.86.0.0/16
                  194.136.0.0/16
                  194.157.0.0/16
                  194.188.0.0/16
                  194.211.0.0/16
                  194.240.0.0/15
                  195.16.192.0/19
                  195.74.0.0/19
                  195.170.128.0/19
                  195.197.0.0/16
                  195.218.64.0/19
                  195.236.0.0/15
                  195.238.192.0/19
                  195.255.0.0/16
                  212.38.224.0/19
                  212.50.192.0/19
                  212.54.0.0/19
                  212.63.0.0/19
                  212.226.0.0/16
                  212.246.0.0/16
                  213.130.224.0/19
                  213.161.32.0/19
                  213.169.0.0/19
                  213.192.128.0/18
                  213.250.64.0/18
                  217.24.96.0/20
                  217.25.96.0/20
                  217.77.192.0/20
                  217.152.0.0/16
                IPv6:
                  2001:670::/29
                  2001:998::/29
                  2001:9f0::/29
                  2001:1658::/29
                  2a00:1dd0::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:0e:c6:2d:9d:ff:41:10:59:af:1e:c0:82:bc:f1:d8:52:a5:
         c5:72:4f:bc:3d:af:aa:8e:8b:24:40:e8:1f:81:27:80:f5:15:
         31:69:28:16:e4:e7:72:fb:e8:11:f3:f8:9d:e3:74:d2:7e:8b:
         5a:a4:da:d2:a3:fe:e3:0d:10:a6:1c:81:fe:7e:f2:8b:bc:ee:
         d0:55:43:36:66:88:8b:e8:a5:ef:95:44:44:9b:05:15:24:02:
         56:02:c4:40:ff:87:34:c4:25:1d:b4:2b:74:d6:63:c2:c8:46:
         5c:e0:c8:6b:c1:06:16:1c:6c:a5:9b:12:87:e3:23:2a:f1:e3:
         f6:c6:79:c9:b1:35:7b:18:23:8a:38:19:14:55:c3:a5:34:b4:
         6d:06:e0:c4:a1:d8:ce:ca:e9:25:73:51:38:db:9e:16:76:08:
         ed:c4:a2:79:e5:99:b0:2d:3d:0f:3e:21:97:83:4f:6c:0d:70:
         8c:c7:54:d4:8e:07:65:04:f6:2a:e5:c5:88:89:2f:c7:22:7e:
         63:9d:a6:69:bc:63:be:14:fe:3f:e1:b1:cc:53:3e:6e:fa:65:
         b4:17:d1:a1:0c:eb:22:ff:f1:ef:e1:a4:e6:9d:f1:a6:23:a5:
         86:79:4c:2a:89:f8:0b:17:1f:12:4d:a9:08:19:67:b7:bb:d5:
         a7:af:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:20 2025 by rpki-client on console.sobornost.net