Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/k-udsIECVPoVZ4hVJjV1FMS17aY.roa
File:                     k-udsIECVPoVZ4hVJjV1FMS17aY.roa (raw, json)
Hash identifier:          76+LdtT2pK7jJlV8hOCIZByBXKgKYoLXUsN/z5PhjRk=
Subject key identifier:   93:EB:9D:B0:81:02:54:FA:15:67:88:55:26:35:75:14:C4:B5:ED:A6
Certificate issuer:       /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial:       019420685A7214D4C25C4F1DF203C5278220
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/k-udsIECVPoVZ4hVJjV1FMS17aY.roa
Signing time:             Wed 01 Jan 2025 05:48:17 +0000
ROA not before:           Wed 01 Jan 2025 05:48:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41201
IP address blocks:        87.199.0.0/16 maxlen: 32
                          87.199.0.0/24 maxlen: 24
                          87.199.1.0/24 maxlen: 24
                          87.199.2.0/24 maxlen: 24
                          87.199.3.0/24 maxlen: 24
                          87.199.4.0/24 maxlen: 24
                          87.199.5.0/24 maxlen: 24
                          87.199.6.0/24 maxlen: 24
                          87.199.7.0/24 maxlen: 24
                          87.199.8.0/24 maxlen: 24
                          87.199.9.0/24 maxlen: 24
                          87.199.10.0/24 maxlen: 24
                          87.199.11.0/24 maxlen: 24
                          87.199.12.0/24 maxlen: 24
                          87.199.13.0/24 maxlen: 24
                          87.199.14.0/24 maxlen: 24
                          87.199.15.0/24 maxlen: 24
                          87.199.16.0/24 maxlen: 24
                          87.199.17.0/24 maxlen: 24
                          87.199.18.0/24 maxlen: 24
                          87.199.19.0/24 maxlen: 24
                          87.199.20.0/24 maxlen: 24
                          87.199.21.0/24 maxlen: 24
                          87.199.22.0/24 maxlen: 24
                          87.199.23.0/24 maxlen: 24
                          87.199.24.0/24 maxlen: 24
                          87.199.25.0/24 maxlen: 24
                          87.199.26.0/24 maxlen: 24
                          87.199.27.0/24 maxlen: 24
                          87.199.28.0/24 maxlen: 24
                          87.199.29.0/24 maxlen: 24
                          87.199.30.0/24 maxlen: 24
                          87.199.31.0/24 maxlen: 24
                          87.199.32.0/24 maxlen: 24
                          87.199.33.0/24 maxlen: 24
                          87.199.34.0/24 maxlen: 24
                          87.199.35.0/24 maxlen: 24
                          87.199.36.0/24 maxlen: 24
                          87.199.37.0/24 maxlen: 24
                          87.199.38.0/24 maxlen: 24
                          87.199.39.0/24 maxlen: 24
                          87.199.40.0/24 maxlen: 24
                          87.199.41.0/24 maxlen: 24
                          87.199.42.0/24 maxlen: 24
                          87.199.43.0/24 maxlen: 24
                          87.199.44.0/24 maxlen: 24
                          87.199.45.0/24 maxlen: 24
                          87.199.46.0/24 maxlen: 24
                          87.199.47.0/24 maxlen: 24
                          87.199.48.0/24 maxlen: 24
                          87.199.49.0/24 maxlen: 24
                          87.199.50.0/24 maxlen: 24
                          87.199.51.0/24 maxlen: 24
                          87.199.52.0/24 maxlen: 24
                          87.199.53.0/24 maxlen: 24
                          87.199.54.0/24 maxlen: 24
                          87.199.55.0/24 maxlen: 24
                          87.199.56.0/24 maxlen: 24
                          87.199.57.0/24 maxlen: 24
                          87.199.58.0/24 maxlen: 24
                          87.199.59.0/24 maxlen: 24
                          87.199.60.0/24 maxlen: 24
                          87.199.61.0/24 maxlen: 24
                          87.199.62.0/24 maxlen: 24
                          87.199.63.0/24 maxlen: 24
                          87.199.64.0/24 maxlen: 24
                          87.199.65.0/24 maxlen: 24
                          87.199.66.0/24 maxlen: 24
                          87.199.67.0/24 maxlen: 24
                          87.199.68.0/24 maxlen: 24
                          87.199.69.0/24 maxlen: 24
                          87.199.70.0/24 maxlen: 24
                          87.199.71.0/24 maxlen: 24
                          87.199.72.0/24 maxlen: 24
                          87.199.73.0/24 maxlen: 24
                          87.199.74.0/24 maxlen: 24
                          87.199.75.0/24 maxlen: 24
                          87.199.76.0/24 maxlen: 24
                          87.199.77.0/24 maxlen: 24
                          87.199.78.0/24 maxlen: 24
                          87.199.79.0/24 maxlen: 24
                          87.199.80.0/24 maxlen: 24
                          87.199.81.0/24 maxlen: 24
                          87.199.82.0/24 maxlen: 24
                          87.199.83.0/24 maxlen: 24
                          87.199.84.0/24 maxlen: 24
                          87.199.85.0/24 maxlen: 24
                          87.199.86.0/24 maxlen: 24
                          87.199.87.0/24 maxlen: 24
                          87.199.88.0/24 maxlen: 24
                          87.199.89.0/24 maxlen: 24
                          87.199.90.0/24 maxlen: 24
                          87.199.214.0/24 maxlen: 24
                          87.199.215.0/24 maxlen: 24
                          87.199.216.0/24 maxlen: 24
                          87.199.217.0/24 maxlen: 24
                          87.199.218.0/24 maxlen: 24
                          87.199.219.0/24 maxlen: 24
                          87.199.220.0/24 maxlen: 24
                          87.199.221.0/24 maxlen: 24
                          87.199.222.0/24 maxlen: 24
                          87.199.223.0/24 maxlen: 24
                          87.199.224.0/24 maxlen: 24
                          87.199.225.0/24 maxlen: 24
                          87.199.226.0/24 maxlen: 24
                          87.199.227.0/24 maxlen: 24
                          87.199.228.0/24 maxlen: 24
                          87.199.229.0/24 maxlen: 24
                          87.199.230.0/24 maxlen: 24
                          87.199.231.0/24 maxlen: 24
                          87.199.232.0/24 maxlen: 24
                          87.199.233.0/24 maxlen: 24
                          87.199.234.0/24 maxlen: 24
                          87.199.235.0/24 maxlen: 24
                          87.199.236.0/24 maxlen: 24
                          87.199.237.0/24 maxlen: 24
                          87.199.238.0/24 maxlen: 24
                          87.199.239.0/24 maxlen: 24
                          87.199.240.0/24 maxlen: 24
                          87.199.241.0/24 maxlen: 24
                          87.199.242.0/24 maxlen: 24
                          87.199.243.0/24 maxlen: 24
                          87.199.244.0/24 maxlen: 24
                          87.199.245.0/24 maxlen: 24
                          87.199.246.0/24 maxlen: 24
                          87.199.247.0/24 maxlen: 24
                          87.199.248.0/24 maxlen: 24
                          87.199.249.0/24 maxlen: 24
                          87.199.250.0/24 maxlen: 24
                          87.199.251.0/24 maxlen: 24
                          87.199.252.0/24 maxlen: 24
                          87.199.253.0/24 maxlen: 24
                          87.199.254.0/24 maxlen: 24
                          87.199.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:5a:72:14:d4:c2:5c:4f:1d:f2:03:c5:27:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
        Validity
            Not Before: Jan  1 05:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=93eb9db0810254fa1567885526357514c4b5eda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a4:48:50:2b:78:40:71:7b:79:5b:af:80:15:
                    20:39:02:c5:4a:54:47:9c:6d:c9:19:c5:bc:4f:5d:
                    0e:2e:a1:e5:5f:f9:75:ea:49:31:4b:06:d0:2c:4d:
                    c2:ef:22:c7:dd:da:44:a9:ff:7a:da:4a:a6:17:3e:
                    22:37:6f:ff:b2:10:8e:45:fc:72:ec:b7:63:e8:50:
                    66:19:8d:69:30:78:b9:87:30:9e:83:61:6e:75:e2:
                    96:86:45:e8:76:ed:03:96:f8:44:8a:ca:05:9d:5e:
                    9e:17:24:7a:9a:d2:18:c0:26:88:1e:ff:24:e3:c8:
                    33:ce:a3:f2:53:ef:40:66:75:99:0d:f3:05:72:b4:
                    db:ea:7f:db:ee:0f:1b:df:2a:91:18:a9:b0:5b:f0:
                    8d:ae:ff:46:b7:76:39:82:4e:c7:53:c6:51:ba:5d:
                    0a:28:b9:c8:07:5f:4e:9d:a7:87:e3:4e:21:05:55:
                    d7:a0:b1:96:d5:98:79:da:a0:72:d2:c2:9a:a5:3e:
                    8c:d4:28:f0:85:f6:0c:27:b4:27:bb:d4:17:db:db:
                    f4:0a:2e:15:ca:fc:71:a5:f3:b1:a4:a1:1c:41:5a:
                    9e:02:e8:65:32:22:50:51:bd:68:a8:8a:74:fe:2d:
                    04:5c:7f:3e:49:4f:60:6c:73:3f:25:a0:14:0e:3f:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EB:9D:B0:81:02:54:FA:15:67:88:55:26:35:75:14:C4:B5:ED:A6
            X509v3 Authority Key Identifier:
                keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/k-udsIECVPoVZ4hVJjV1FMS17aY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.199.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:ae:fe:f8:b8:69:81:a6:6d:36:bd:df:d6:8f:4d:c1:47:b5:
         c1:13:23:8e:c3:37:cf:cc:bb:d3:a1:f3:b8:7a:cf:9f:51:95:
         07:cb:0b:fa:38:02:28:44:ff:bf:1e:15:7d:c0:6d:6f:7f:4a:
         ae:65:4f:48:43:7b:4e:bc:67:14:26:26:4b:bc:ac:14:61:32:
         81:40:12:f4:0e:27:ad:37:28:aa:ab:b2:d2:16:42:04:5f:32:
         c8:55:58:b9:2a:37:dc:22:79:34:bf:98:03:38:4b:bb:60:ee:
         9a:a9:bc:4d:2c:0e:41:76:82:d5:ec:48:75:13:a4:69:09:4c:
         26:64:92:31:81:56:db:81:d7:67:2a:d8:e3:6d:e4:c7:67:28:
         cb:b5:3b:c1:4e:1e:69:bb:a1:1e:b6:ba:70:28:33:05:6f:8a:
         5f:d6:d1:73:cd:9e:d6:66:19:01:0b:0f:16:56:d5:53:4d:55:
         a3:ea:b4:46:d4:e2:a2:9d:2d:bc:95:81:4f:9a:6e:ff:7c:1d:
         07:ea:9a:b2:da:42:be:62:f3:78:e8:80:1f:bf:b4:3b:7a:b9:
         d7:84:10:2c:6d:4d:6f:10:7b:2f:1e:80:9a:87:30:56:15:75:
         ea:33:ac:82:80:ee:29:bc:17:11:e7:06:ad:6e:f1:cc:ca:ac:
         7b:21:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net