Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/p_WYU-gJV_EDfaeM3mBXTZqs5zc.roa
File:                     p_WYU-gJV_EDfaeM3mBXTZqs5zc.roa (raw, json)
Hash identifier:          Urvpa8nfFUQPYi7fu4aFGJueLCI4R3cT+gZqbcuJjJM=
Subject key identifier:   A7:F5:98:53:E8:09:57:F1:03:7D:A7:8C:DE:60:57:4D:9A:AC:E7:37
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       0193E5BA6C0C182CDB3F84CAE22D0273ADDB
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/p_WYU-gJV_EDfaeM3mBXTZqs5zc.roa
Signing time:             Fri 20 Dec 2024 20:20:19 +0000
ROA not before:           Fri 20 Dec 2024 20:20:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203217
IP address blocks:        93.180.216.0/23 maxlen: 23
                          93.180.216.0/24 maxlen: 24
                          93.180.217.0/24 maxlen: 24
                          93.180.218.0/23 maxlen: 23
                          93.180.218.0/24 maxlen: 24
                          93.180.219.0/24 maxlen: 24
                          93.180.220.0/23 maxlen: 23
                          93.180.220.0/24 maxlen: 24
                          93.180.221.0/24 maxlen: 24
                          93.180.222.0/24 maxlen: 24
                          93.180.223.0/24 maxlen: 24
                          138.124.156.0/23 maxlen: 23
                          138.124.156.0/24 maxlen: 24
                          138.124.157.0/24 maxlen: 24
                          138.124.158.0/23 maxlen: 23
                          138.124.158.0/24 maxlen: 24
                          138.124.159.0/24 maxlen: 24
                          144.86.228.0/22 maxlen: 22
                          144.86.228.0/23 maxlen: 23
                          144.86.228.0/24 maxlen: 24
                          144.86.229.0/24 maxlen: 24
                          144.86.230.0/23 maxlen: 23
                          144.86.230.0/24 maxlen: 24
                          144.86.231.0/24 maxlen: 24
                          185.20.196.0/23 maxlen: 23
                          185.20.196.0/24 maxlen: 24
                          185.20.197.0/24 maxlen: 24
                          185.20.198.0/23 maxlen: 23
                          185.20.198.0/24 maxlen: 24
                          185.20.199.0/24 maxlen: 24
                          185.138.120.0/23 maxlen: 23
                          185.138.120.0/24 maxlen: 24
                          185.138.121.0/24 maxlen: 24
                          185.138.122.0/23 maxlen: 23
                          185.138.122.0/24 maxlen: 24
                          185.138.123.0/24 maxlen: 24
                          185.254.12.0/23 maxlen: 23
                          185.254.13.0/24 maxlen: 24
                          185.254.14.0/23 maxlen: 23
                          185.254.14.0/24 maxlen: 24
                          185.254.15.0/24 maxlen: 24
                          195.133.220.0/23 maxlen: 23
                          195.133.220.0/24 maxlen: 24
                          195.133.221.0/24 maxlen: 24
                          195.133.222.0/23 maxlen: 23
                          195.133.222.0/24 maxlen: 24
                          195.133.223.0/24 maxlen: 24
                          199.74.188.0/23 maxlen: 23
                          199.74.188.0/24 maxlen: 24
                          199.74.189.0/24 maxlen: 24
                          199.74.190.0/23 maxlen: 23
                          199.74.190.0/24 maxlen: 24
                          199.74.191.0/24 maxlen: 24
                          2a0b:1880::/48 maxlen: 48
                          2a0b:1880:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:e5:ba:6c:0c:18:2c:db:3f:84:ca:e2:2d:02:73:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Dec 20 20:20:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a7f59853e80957f1037da78cde60574d9aace737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:40:d9:72:37:a1:35:35:dd:6e:e7:19:5d:
                    93:ed:c7:d3:90:f1:01:81:55:d5:9c:8b:fa:54:90:
                    93:4a:73:c3:58:c9:d4:fe:15:ec:c6:04:95:cf:38:
                    27:47:04:16:6d:67:5c:8b:59:03:08:91:f0:52:25:
                    ff:e7:f7:68:d7:d7:6a:38:a2:2e:dd:2c:f2:f1:63:
                    ce:0e:1f:ad:4b:0f:47:cc:2c:09:41:3d:f1:22:ae:
                    8c:93:1b:b5:fa:5f:c3:10:71:b1:20:70:eb:23:99:
                    cc:eb:78:e4:4f:0b:44:b8:9e:2c:c3:87:df:11:d2:
                    f4:12:c6:f8:30:76:d3:f9:cd:03:4a:d5:af:7a:d3:
                    e3:e9:ac:a8:e1:9d:05:6d:40:8f:fb:71:6f:a1:d9:
                    9b:63:71:94:ac:5e:34:27:ef:16:3c:f8:4d:21:22:
                    91:4e:c1:88:f2:d0:b3:29:22:aa:49:af:0e:0a:da:
                    dd:bd:15:d9:01:c3:69:e3:00:b6:18:c8:5a:71:5c:
                    51:0d:54:ec:f1:1e:6b:95:9e:ae:1a:27:01:27:89:
                    72:67:40:9c:92:78:9c:c1:fc:8a:bc:0c:81:f5:55:
                    e2:58:23:20:e1:c0:94:55:b4:a4:4e:9e:c6:e6:b6:
                    de:ce:ba:78:91:f2:6d:93:00:5a:26:2c:6a:09:dd:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:98:53:E8:09:57:F1:03:7D:A7:8C:DE:60:57:4D:9A:AC:E7:37
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/p_WYU-gJV_EDfaeM3mBXTZqs5zc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.180.216.0/21
                  138.124.156.0/22
                  144.86.228.0/22
                  185.20.196.0/22
                  185.138.120.0/22
                  185.254.12.0/22
                  195.133.220.0/22
                  199.74.188.0/22
                IPv6:
                  2a0b:1880::/47

    Signature Algorithm: sha256WithRSAEncryption
         26:ca:b8:06:8a:24:5a:e1:2c:54:17:8a:2f:cd:1f:7f:73:ae:
         fa:5c:69:8c:e5:e9:6a:5c:9c:24:72:b5:b6:68:48:d5:02:c9:
         61:51:5e:38:ae:04:c0:a7:2b:3e:75:a8:28:b2:21:5e:22:b8:
         93:b7:6c:f4:f7:e0:8f:e1:86:ee:0b:dc:14:03:e7:e4:e0:67:
         94:a7:d8:61:6b:5c:7f:bb:1c:7c:3e:ca:9f:8b:08:a0:18:54:
         fa:74:b6:6e:8b:f6:27:b2:3d:bc:ce:d8:7d:00:33:9a:1a:8d:
         63:cc:df:07:b0:53:56:e1:d6:ac:20:d6:fd:a7:78:fa:fd:48:
         1e:32:16:f5:03:a1:6d:ae:6d:b9:e1:c2:34:61:8e:75:44:b1:
         00:90:60:79:4a:c3:71:ff:d3:39:7b:d2:bb:0a:85:1e:ad:ce:
         0f:63:55:e5:1a:2d:e5:69:0f:a5:d0:5a:92:97:20:25:07:a4:
         b6:53:76:f2:42:81:d6:d9:81:30:ef:c8:95:da:90:b5:fa:ab:
         48:cf:f6:43:98:15:74:6a:95:a4:01:4b:4a:7d:e0:6b:cc:de:
         0c:69:72:90:6e:b8:ab:38:72:de:2d:a7:b1:f9:82:10:51:1d:
         7d:23:63:b1:b2:a1:85:74:ce:dd:e2:a6:ce:d9:b8:29:d5:f7:
         da:8a:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:25 2024 by rpki-client on console.sobornost.net