Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7u0HmkkrHMWRuxnIqpwakH5wuQ.roa
File:                     G7u0HmkkrHMWRuxnIqpwakH5wuQ.roa (raw, json)
Hash identifier:          AAaZ05kHLovPyHI8gxb4evI+3ZDi4XzWpmIahUsvd1o=
Subject key identifier:   1B:BB:B4:1E:69:24:AC:73:16:46:EC:67:22:AA:70:6A:41:F9:C2:E4
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       0193E3BB8EC3449BE2DB3EF6C8FB660F7492
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7u0HmkkrHMWRuxnIqpwakH5wuQ.roa
Signing time:             Fri 20 Dec 2024 11:02:20 +0000
ROA not before:           Fri 20 Dec 2024 11:02:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200845
IP address blocks:        2.59.192.0/22 maxlen: 22
                          2.59.192.0/23 maxlen: 23
                          2.59.192.0/24 maxlen: 24
                          2.59.193.0/24 maxlen: 24
                          2.59.194.0/23 maxlen: 23
                          2.59.194.0/24 maxlen: 24
                          2.59.195.0/24 maxlen: 24
                          31.15.0.0/22 maxlen: 22
                          31.15.0.0/23 maxlen: 23
                          31.15.0.0/24 maxlen: 24
                          31.15.1.0/24 maxlen: 24
                          31.15.2.0/23 maxlen: 23
                          31.15.2.0/24 maxlen: 24
                          31.15.3.0/24 maxlen: 25
                          31.15.4.0/24 maxlen: 24
                          31.15.5.0/24 maxlen: 24
                          31.15.6.0/24 maxlen: 24
                          31.15.7.0/24 maxlen: 24
                          45.81.104.0/22 maxlen: 22
                          45.81.104.0/23 maxlen: 23
                          45.81.104.0/24 maxlen: 24
                          45.81.105.0/24 maxlen: 24
                          45.81.106.0/23 maxlen: 23
                          45.81.106.0/24 maxlen: 24
                          45.81.107.0/24 maxlen: 24
                          45.81.124.0/22 maxlen: 22
                          45.81.124.0/23 maxlen: 23
                          45.81.124.0/24 maxlen: 24
                          45.81.125.0/24 maxlen: 24
                          45.81.126.0/23 maxlen: 23
                          45.81.126.0/24 maxlen: 24
                          45.81.127.0/24 maxlen: 24
                          45.133.60.0/22 maxlen: 22
                          45.133.60.0/23 maxlen: 23
                          45.133.60.0/24 maxlen: 24
                          45.133.61.0/24 maxlen: 24
                          45.133.62.0/23 maxlen: 23
                          45.133.62.0/24 maxlen: 24
                          45.133.63.0/24 maxlen: 24
                          45.137.12.0/23 maxlen: 23
                          45.137.12.0/24 maxlen: 24
                          45.137.13.0/24 maxlen: 24
                          45.145.132.0/22 maxlen: 22
                          45.145.132.0/23 maxlen: 23
                          45.145.132.0/24 maxlen: 24
                          45.145.133.0/24 maxlen: 24
                          45.145.134.0/23 maxlen: 23
                          45.145.134.0/24 maxlen: 24
                          45.145.135.0/24 maxlen: 24
                          45.150.84.0/22 maxlen: 22
                          45.150.84.0/23 maxlen: 23
                          45.150.84.0/24 maxlen: 24
                          45.150.85.0/24 maxlen: 24
                          45.150.86.0/23 maxlen: 23
                          45.150.86.0/24 maxlen: 24
                          45.150.87.0/24 maxlen: 24
                          45.152.140.0/22 maxlen: 22
                          45.152.140.0/23 maxlen: 23
                          45.152.140.0/24 maxlen: 24
                          45.152.141.0/24 maxlen: 24
                          45.152.142.0/23 maxlen: 23
                          45.152.142.0/24 maxlen: 24
                          45.152.143.0/24 maxlen: 24
                          45.155.56.0/22 maxlen: 22
                          45.155.56.0/23 maxlen: 23
                          45.155.56.0/24 maxlen: 24
                          45.155.57.0/24 maxlen: 24
                          45.155.58.0/23 maxlen: 23
                          45.155.58.0/24 maxlen: 24
                          45.155.59.0/24 maxlen: 24
                          89.190.152.0/22 maxlen: 22
                          89.190.152.0/24 maxlen: 24
                          89.190.153.0/24 maxlen: 24
                          89.190.154.0/24 maxlen: 24
                          89.190.155.0/24 maxlen: 24
                          92.118.180.0/22 maxlen: 22
                          92.118.180.0/23 maxlen: 23
                          92.118.180.0/24 maxlen: 24
                          92.118.181.0/24 maxlen: 24
                          92.118.182.0/23 maxlen: 23
                          92.118.182.0/24 maxlen: 24
                          92.118.183.0/24 maxlen: 24
                          178.19.40.0/24 maxlen: 24
                          178.19.41.0/24 maxlen: 24
                          178.19.42.0/24 maxlen: 24
                          185.28.51.0/24 maxlen: 24
                          185.225.244.0/22 maxlen: 22
                          185.225.244.0/24 maxlen: 24
                          185.225.245.0/24 maxlen: 24
                          185.225.246.0/24 maxlen: 24
                          185.225.247.0/24 maxlen: 24
                          185.229.216.0/22 maxlen: 22
                          185.229.216.0/23 maxlen: 23
                          185.229.217.0/24 maxlen: 24
                          185.229.218.0/23 maxlen: 23
                          185.229.219.0/24 maxlen: 24
                          185.231.186.0/24 maxlen: 24
                          185.231.187.0/24 maxlen: 24
                          185.244.228.0/23 maxlen: 23
                          185.244.228.0/24 maxlen: 24
                          185.244.229.0/24 maxlen: 24
                          185.244.230.0/24 maxlen: 24
                          185.244.231.0/24 maxlen: 24
                          185.246.12.0/23 maxlen: 23
                          185.246.12.0/24 maxlen: 24
                          185.246.13.0/24 maxlen: 24
                          185.246.14.0/24 maxlen: 24
                          185.246.15.0/24 maxlen: 24
                          194.31.104.0/22 maxlen: 22
                          194.31.104.0/23 maxlen: 23
                          194.31.104.0/24 maxlen: 24
                          194.31.105.0/24 maxlen: 24
                          194.31.106.0/23 maxlen: 23
                          194.31.106.0/24 maxlen: 24
                          194.31.107.0/24 maxlen: 24
                          194.32.112.0/22 maxlen: 22
                          194.32.112.0/24 maxlen: 24
                          194.32.113.0/24 maxlen: 24
                          194.32.114.0/24 maxlen: 24
                          194.32.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:e3:bb:8e:c3:44:9b:e2:db:3e:f6:c8:fb:66:0f:74:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Dec 20 11:02:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1bbbb41e6924ac731646ec6722aa706a41f9c2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:3b:df:84:d2:8b:1f:df:2a:c8:0a:8e:04:
                    fa:7b:75:db:a5:3e:b5:6d:40:2b:df:44:12:15:f0:
                    f5:fe:2c:76:8f:28:86:b2:2c:45:53:11:7b:13:42:
                    19:70:d5:39:ef:56:11:eb:8e:9e:eb:ff:69:95:99:
                    76:36:a5:cc:af:94:24:05:43:ef:3e:49:a1:22:7c:
                    c2:eb:97:c0:52:8c:a4:08:44:30:d3:71:0c:9f:03:
                    de:7c:75:b3:fa:12:72:7e:94:69:52:04:d9:cf:5a:
                    ac:35:a9:ee:e7:9f:c3:b8:a2:a0:6e:a7:82:80:9e:
                    e1:79:68:96:13:f9:55:fc:73:a3:33:08:f1:f2:b8:
                    0f:1f:19:b6:73:14:e6:ed:04:f1:70:89:d2:40:7a:
                    14:39:55:dd:81:af:a4:de:5c:be:bc:60:6a:74:a1:
                    9f:b8:1a:8a:9c:d2:be:87:01:88:85:4b:37:9a:5d:
                    ec:b9:da:1a:c9:53:a3:a1:ff:73:3e:90:2d:cf:c9:
                    30:c8:29:3f:d5:93:be:53:df:7e:e4:48:3a:be:87:
                    1f:69:bc:56:41:41:17:a1:d6:fd:55:c8:2a:27:0b:
                    28:2c:08:30:62:44:63:85:d0:d2:d4:33:28:af:d6:
                    aa:6b:15:46:52:c3:0e:44:70:b2:b3:45:9a:cb:d3:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:B4:1E:69:24:AC:73:16:46:EC:67:22:AA:70:6A:41:F9:C2:E4
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/G7u0HmkkrHMWRuxnIqpwakH5wuQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.192.0/22
                  31.15.0.0/21
                  45.81.104.0/22
                  45.81.124.0/22
                  45.133.60.0/22
                  45.137.12.0/23
                  45.145.132.0/22
                  45.150.84.0/22
                  45.152.140.0/22
                  45.155.56.0/22
                  89.190.152.0/22
                  92.118.180.0/22
                  178.19.40.0-178.19.42.255
                  185.28.51.0/24
                  185.225.244.0/22
                  185.229.216.0/22
                  185.231.186.0/23
                  185.244.228.0/22
                  185.246.12.0/22
                  194.31.104.0/22
                  194.32.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:c7:2e:ff:de:54:46:8a:1f:3a:24:69:e1:8a:9f:cb:23:14:
         93:17:bd:56:af:85:0e:3e:59:28:fc:88:d6:93:68:75:3b:cf:
         23:68:3f:67:0d:78:83:d9:37:f0:04:3e:6b:60:fa:32:8c:ad:
         08:3c:5a:b0:92:fb:61:53:3b:d1:39:9d:10:c0:ed:ff:22:10:
         ac:d0:a6:79:11:57:af:a2:b8:8a:7a:ce:a9:3d:7f:02:b6:d2:
         d4:d1:37:9f:31:bb:a3:51:bc:27:7b:56:8d:34:7c:5b:08:43:
         e8:82:e9:8c:c7:7c:44:70:ef:2f:2e:44:3e:23:70:9a:8a:e4:
         16:50:19:5f:2c:7b:b4:b2:d3:21:79:2e:27:96:4b:14:f5:1b:
         b7:36:4c:ab:49:c0:0b:17:69:03:83:cf:12:ba:a1:f6:40:9e:
         ec:15:ea:e3:b9:81:56:7b:4d:91:5b:f1:da:43:d9:8a:95:0f:
         94:06:45:82:da:da:c1:e7:5f:9f:ca:4c:c1:37:08:89:78:53:
         7d:45:11:f7:03:95:13:16:2b:73:8a:d9:3c:9f:cf:91:08:12:
         44:9e:0e:de:06:8a:c5:26:66:28:75:a4:88:67:65:d5:46:93:
         fc:69:5f:3e:4a:51:d5:af:fc:5f:57:52:5d:b2:62:d5:a0:38:
         74:94:2b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:41 2024 by rpki-client on console.sobornost.net