Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UFcvX441ruOKMpDOojZ-ZzDSQEI.roa
File:                     UFcvX441ruOKMpDOojZ-ZzDSQEI.roa (raw, json)
Hash identifier:          UR2qPXPAN9U/x8+Elrn7fn6fSyueaODopkhd10RrS84=
Subject key identifier:   50:57:2F:5F:8E:35:AE:E3:8A:32:90:CE:A2:36:7E:67:30:D2:40:42
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       01942143F72BE878420A18BCA881770723AA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UFcvX441ruOKMpDOojZ-ZzDSQEI.roa
Signing time:             Wed 01 Jan 2025 09:48:09 +0000
ROA not before:           Wed 01 Jan 2025 09:48:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34567
IP address blocks:        2a0d:6a40::/29 maxlen: 29
                          2a0d:6b40::/29 maxlen: 29
                          2a0d:6ec0::/29 maxlen: 29
                          2a0d:7140::/29 maxlen: 29
                          2a0d:8cc0::/29 maxlen: 29
                          2a0d:9740::/29 maxlen: 29
                          2a0d:97c0::/29 maxlen: 29
                          2a0d:a3c0::/29 maxlen: 29
                          2a0d:ad40::/29 maxlen: 29
                          2a0d:b2c0::/29 maxlen: 29
                          2a0d:b540::/29 maxlen: 29
                          2a0d:b840::/29 maxlen: 29
                          2a0d:c1c0::/29 maxlen: 29
                          2a0d:cc40::/29 maxlen: 29
                          2a0d:ce40::/29 maxlen: 29
                          2a0d:d3c0::/29 maxlen: 29
                          2a0d:e1c0::/29 maxlen: 29
                          2a0d:e240::/29 maxlen: 29
                          2a0d:e340::/29 maxlen: 29
                          2a0d:f140::/29 maxlen: 29
                          2a0d:f5c0::/29 maxlen: 29
                          2a0d:fbc0::/29 maxlen: 29
                          2a0e:8c0::/29 maxlen: 29
                          2a0e:19c0::/29 maxlen: 29
                          2a0e:adc0::/29 maxlen: 29
                          2a0e:af40::/29 maxlen: 29
                          2a0e:e9c0::/29 maxlen: 29
                          2a0f:2200::/29 maxlen: 29
                          2a0f:9a40::/29 maxlen: 29
                          2a0f:cb80::/29 maxlen: 29
                          2a0f:e180::/29 maxlen: 29
                          2a11:ec0::/29 maxlen: 29
                          2a11:17c0::/29 maxlen: 29
                          2a11:1c80::/29 maxlen: 29
                          2a11:25c0::/29 maxlen: 29
                          2a11:2d00::/29 maxlen: 29
                          2a11:4480::/29 maxlen: 29
                          2a11:4f00::/29 maxlen: 29
                          2a11:6040::/29 maxlen: 29
                          2a11:62c0::/29 maxlen: 29
                          2a11:64c0::/29 maxlen: 29
                          2a11:6b80::/29 maxlen: 29
                          2a11:77c0::/29 maxlen: 29
                          2a11:81c0::/29 maxlen: 29
                          2a11:86c0::/29 maxlen: 29
                          2a11:8980::/29 maxlen: 29
                          2a11:8bc0::/29 maxlen: 29
                          2a11:9040::/29 maxlen: 29
                          2a11:9580::/29 maxlen: 29
                          2a11:9640::/29 maxlen: 29
                          2a11:9900::/29 maxlen: 29
                          2a11:9f00::/29 maxlen: 29
                          2a11:a040::/29 maxlen: 29
                          2a11:a140::/29 maxlen: 29
                          2a11:a240::/29 maxlen: 29
                          2a11:a2c0::/29 maxlen: 29
                          2a11:b0c0::/29 maxlen: 29
                          2a11:b4c0::/29 maxlen: 29
                          2a11:b700::/29 maxlen: 29
                          2a11:bb00::/29 maxlen: 29
                          2a11:bdc0::/29 maxlen: 29
                          2a11:be40::/29 maxlen: 29
                          2a11:bf80::/29 maxlen: 29
                          2a11:c240::/29 maxlen: 29
                          2a11:c2c0::/29 maxlen: 29
                          2a11:c580::/29 maxlen: 29
                          2a11:c680::/29 maxlen: 29
                          2a11:cec0::/29 maxlen: 29
                          2a11:d340::/29 maxlen: 29
                          2a11:d880::/29 maxlen: 29
                          2a11:dac0::/29 maxlen: 29
                          2a11:df00::/29 maxlen: 29
                          2a11:e2c0::/29 maxlen: 29
                          2a11:e640::/29 maxlen: 29
                          2a11:e6c0::/29 maxlen: 29
                          2a11:eac0::/29 maxlen: 29
                          2a11:fa40::/29 maxlen: 29
                          2a11:fc40::/29 maxlen: 29
                          2a12:580::/29 maxlen: 29
                          2a12:640::/29 maxlen: 29
                          2a12:900::/29 maxlen: 29
                          2a12:d40::/29 maxlen: 29
                          2a12:dc0::/29 maxlen: 29
                          2a12:e40::/29 maxlen: 29
                          2a12:e80::/29 maxlen: 29
                          2a12:11c0::/29 maxlen: 29
                          2a12:12c0::/29 maxlen: 29
                          2a12:1a80::/29 maxlen: 29
                          2a12:2800::/29 maxlen: 29
                          2a12:2b80::/29 maxlen: 29
                          2a12:57c0::/29 maxlen: 29
                          2a12:6480::/29 maxlen: 29
                          2a12:8380::/29 maxlen: 29
                          2a12:8480::/29 maxlen: 29
                          2a12:8780::/29 maxlen: 29
                          2a12:9200::/29 maxlen: 29
                          2a12:a500::/29 maxlen: 29
                          2a12:aa00::/29 maxlen: 29
                          2a12:af00::/29 maxlen: 29
                          2a12:b400::/29 maxlen: 29
                          2a12:b700::/29 maxlen: 29
                          2a12:bb00::/29 maxlen: 29
                          2a12:bc00::/29 maxlen: 29
                          2a12:bc80::/29 maxlen: 29
                          2a12:c980::/29 maxlen: 29
                          2a12:ce00::/29 maxlen: 29
                          2a12:cf80::/29 maxlen: 29
                          2a12:d200::/29 maxlen: 29
                          2a12:d380::/29 maxlen: 29
                          2a12:d800::/29 maxlen: 29
                          2a12:f980::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:f7:2b:e8:78:42:0a:18:bc:a8:81:77:07:23:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Jan  1 09:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=50572f5f8e35aee38a3290cea2367e6730d24042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:ab:49:4e:f9:cd:5a:f0:d0:76:d1:ab:9b:
                    33:de:6e:37:d9:51:04:36:72:a2:c0:23:4a:11:13:
                    bc:e5:76:97:2c:c8:f5:4b:f2:28:21:85:27:a6:47:
                    ce:3b:7e:f1:09:83:4b:eb:ee:a1:87:c5:50:10:8b:
                    93:0b:7e:76:01:1a:6e:cf:d1:4a:af:b8:ba:2d:c2:
                    a8:69:e7:83:22:97:da:eb:68:e2:bd:3b:3e:b6:4f:
                    59:38:75:81:6e:78:60:11:55:37:3d:51:01:c7:2e:
                    24:68:35:91:41:3c:c1:9a:db:ec:3b:1c:57:95:f0:
                    5d:91:e4:4f:d9:f7:17:70:f6:35:de:40:7b:ad:c0:
                    3a:78:61:1e:9b:75:46:3f:5a:e1:2f:55:2c:76:d5:
                    68:11:0e:b8:54:1e:85:6f:83:c4:a0:8c:bb:7e:38:
                    ee:cb:d7:a0:b4:ed:09:57:2f:5e:06:5e:f7:39:80:
                    1b:4a:a0:d5:8c:5c:b4:7e:9a:d6:53:e3:08:f2:ab:
                    c9:3a:a9:61:5f:9c:c7:a8:51:9f:aa:51:c4:9b:6c:
                    ed:ce:b4:7b:28:8f:35:74:80:fb:c7:48:fb:6c:ad:
                    95:0c:f8:e9:f1:4c:91:c1:7d:67:fb:20:5b:38:15:
                    73:53:be:d0:e4:bc:98:13:82:d0:d8:5a:70:05:46:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:57:2F:5F:8E:35:AE:E3:8A:32:90:CE:A2:36:7E:67:30:D2:40:42
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UFcvX441ruOKMpDOojZ-ZzDSQEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:6a40::/29
                  2a0d:6b40::/29
                  2a0d:6ec0::/29
                  2a0d:7140::/29
                  2a0d:8cc0::/29
                  2a0d:9740::/29
                  2a0d:97c0::/29
                  2a0d:a3c0::/29
                  2a0d:ad40::/29
                  2a0d:b2c0::/29
                  2a0d:b540::/29
                  2a0d:b840::/29
                  2a0d:c1c0::/29
                  2a0d:cc40::/29
                  2a0d:ce40::/29
                  2a0d:d3c0::/29
                  2a0d:e1c0::/29
                  2a0d:e240::/29
                  2a0d:e340::/29
                  2a0d:f140::/29
                  2a0d:f5c0::/29
                  2a0d:fbc0::/29
                  2a0e:8c0::/29
                  2a0e:19c0::/29
                  2a0e:adc0::/29
                  2a0e:af40::/29
                  2a0e:e9c0::/29
                  2a0f:2200::/29
                  2a0f:9a40::/29
                  2a0f:cb80::/29
                  2a0f:e180::/29
                  2a11:ec0::/29
                  2a11:17c0::/29
                  2a11:1c80::/29
                  2a11:25c0::/29
                  2a11:2d00::/29
                  2a11:4480::/29
                  2a11:4f00::/29
                  2a11:6040::/29
                  2a11:62c0::/29
                  2a11:64c0::/29
                  2a11:6b80::/29
                  2a11:77c0::/29
                  2a11:81c0::/29
                  2a11:86c0::/29
                  2a11:8980::/29
                  2a11:8bc0::/29
                  2a11:9040::/29
                  2a11:9580::/29
                  2a11:9640::/29
                  2a11:9900::/29
                  2a11:9f00::/29
                  2a11:a040::/29
                  2a11:a140::/29
                  2a11:a240::/29
                  2a11:a2c0::/29
                  2a11:b0c0::/29
                  2a11:b4c0::/29
                  2a11:b700::/29
                  2a11:bb00::/29
                  2a11:bdc0::/29
                  2a11:be40::/29
                  2a11:bf80::/29
                  2a11:c240::/29
                  2a11:c2c0::/29
                  2a11:c580::/29
                  2a11:c680::/29
                  2a11:cec0::/29
                  2a11:d340::/29
                  2a11:d880::/29
                  2a11:dac0::/29
                  2a11:df00::/29
                  2a11:e2c0::/29
                  2a11:e640::/29
                  2a11:e6c0::/29
                  2a11:eac0::/29
                  2a11:fa40::/29
                  2a11:fc40::/29
                  2a12:580::/29
                  2a12:640::/29
                  2a12:900::/29
                  2a12:d40::/29
                  2a12:dc0::/29
                  2a12:e40::/29
                  2a12:e80::/29
                  2a12:11c0::/29
                  2a12:12c0::/29
                  2a12:1a80::/29
                  2a12:2800::/29
                  2a12:2b80::/29
                  2a12:57c0::/29
                  2a12:6480::/29
                  2a12:8380::/29
                  2a12:8480::/29
                  2a12:8780::/29
                  2a12:9200::/29
                  2a12:a500::/29
                  2a12:aa00::/29
                  2a12:af00::/29
                  2a12:b400::/29
                  2a12:b700::/29
                  2a12:bb00::/29
                  2a12:bc00::/29
                  2a12:bc80::/29
                  2a12:c980::/29
                  2a12:ce00::/29
                  2a12:cf80::/29
                  2a12:d200::/29
                  2a12:d380::/29
                  2a12:d800::/29
                  2a12:f980::/29

    Signature Algorithm: sha256WithRSAEncryption
         3f:0e:e4:3f:63:c8:5d:25:83:3a:99:0f:ba:11:e7:a3:ad:d7:
         70:d7:e4:e9:33:27:f3:95:b1:74:13:4e:87:05:5a:89:74:6a:
         f2:85:f7:df:61:c8:48:eb:cc:97:db:ca:6f:4b:9e:9a:f1:44:
         a6:04:28:e5:ad:0e:e2:b5:af:7e:9f:73:7a:58:a6:7f:00:83:
         b6:57:1e:3a:22:14:26:3e:b1:68:57:51:53:70:56:b1:ee:2b:
         dc:5c:66:96:de:be:12:ba:c6:f9:b0:53:b5:45:3f:24:c4:76:
         04:ce:ca:46:2d:4a:91:ff:64:f6:19:fe:3e:04:0c:13:15:0a:
         7a:e7:75:6a:6c:46:89:ba:d4:bf:d9:69:aa:6e:80:71:2a:69:
         bf:ba:70:d6:7a:2f:e0:13:63:20:e2:10:ac:35:6b:62:9b:8b:
         1b:82:15:86:b6:4e:1f:7c:a1:5b:ed:a5:23:59:8d:ae:a6:41:
         bd:49:e4:0d:ec:83:9c:1b:11:cb:86:7a:f8:e3:d4:9d:bd:b6:
         16:7a:b0:35:ae:53:38:43:cd:f9:5f:40:14:be:24:ff:68:b6:
         8b:d2:9d:1b:fe:66:3b:61:31:c1:a0:e4:b6:f0:cc:7d:59:70:
         7e:f0:29:94:b5:24:cb:e2:a2:4a:11:ee:80:68:b4:9e:e2:5c:
         9c:fd:e4:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jan 22 17:22:22 2025 by rpki-client on console.sobornost.net