Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa
File:                     vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (raw, json)
Hash identifier:          GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=
Subject key identifier:   BE:4C:90:F6:C4:53:EA:05:70:BF:EF:EB:E4:7C:6C:FE:F9:A4:35:72
Certificate issuer:       /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial:       0194214437F346A3ABC299CEC2A9CC2EA6F7
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa
Signing time:             Wed 01 Jan 2025 09:48:26 +0000
ROA not before:           Wed 01 Jan 2025 09:48:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61323
IP address blocks:        31.193.0.0/20 maxlen: 20
                          37.220.88.0/21 maxlen: 21
                          45.67.172.0/22 maxlen: 22
                          45.84.20.0/22 maxlen: 24
                          45.131.136.0/22 maxlen: 22
                          45.145.100.0/22 maxlen: 22
                          45.157.40.0/22 maxlen: 22
                          46.37.160.0/19 maxlen: 19
                          78.24.88.0/24 maxlen: 24
                          78.24.89.0/24 maxlen: 24
                          78.24.90.0/23 maxlen: 23
                          78.109.160.0/20 maxlen: 20
                          78.137.112.0/20 maxlen: 20
                          80.66.200.0/22 maxlen: 22
                          80.244.176.0/20 maxlen: 20
                          81.201.128.0/20 maxlen: 20
                          94.229.160.0/20 maxlen: 20
                          109.108.128.0/19 maxlen: 19
                          159.253.208.0/21 maxlen: 21
                          176.124.52.0/22 maxlen: 24
                          178.238.128.0/20 maxlen: 20
                          185.55.76.0/23 maxlen: 24
                          185.55.76.0/24 maxlen: 24
                          185.55.77.0/24 maxlen: 24
                          185.55.78.0/23 maxlen: 23
                          185.156.64.0/24 maxlen: 24
                          185.156.65.0/24 maxlen: 24
                          185.156.66.0/23 maxlen: 23
                          185.160.180.0/22 maxlen: 22
                          185.160.252.0/22 maxlen: 24
                          185.162.224.0/22 maxlen: 22
                          185.166.128.0/22 maxlen: 22
                          185.181.196.0/22 maxlen: 22
                          185.182.88.0/22 maxlen: 22
                          185.197.60.0/22 maxlen: 22
                          185.207.108.0/22 maxlen: 22
                          185.210.196.0/22 maxlen: 22
                          185.213.116.0/22 maxlen: 22
                          185.216.76.0/22 maxlen: 22
                          185.217.40.0/22 maxlen: 22
                          185.220.60.0/22 maxlen: 22
                          185.221.204.0/22 maxlen: 22
                          185.226.220.0/22 maxlen: 22
                          185.234.36.0/22 maxlen: 22
                          185.241.248.0/22 maxlen: 24
                          192.166.44.0/24 maxlen: 24
                          192.166.45.0/24 maxlen: 24
                          192.166.46.0/23 maxlen: 23
                          193.39.252.0/22 maxlen: 22
                          194.39.164.0/22 maxlen: 22
                          195.69.102.0/24 maxlen: 24
                          2a02:21a8::/48 maxlen: 48
                          2a02:21a8:1::/48 maxlen: 48
                          2a02:22d0::/32 maxlen: 32
                          2a02:22d0:c::/48 maxlen: 48
                          2a09:b200:6::/48 maxlen: 48
                          2a09:b600:5::/48 maxlen: 48
                          2a09:ba00:4::/48 maxlen: 48
                          2a0c:3dc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:37:f3:46:a3:ab:c2:99:ce:c2:a9:cc:2e:a6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
        Validity
            Not Before: Jan  1 09:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=be4c90f6c453ea0570bfefebe47c6cfef9a43572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:6e:54:b3:8b:6d:4b:89:f1:0c:04:39:13:
                    ad:c4:8c:04:ab:5c:a6:08:0b:25:d8:9a:7d:7d:a4:
                    4c:45:96:1d:79:54:3a:46:95:af:52:03:5d:75:58:
                    1e:b9:c5:a5:8b:ea:50:eb:b1:da:ba:56:54:d8:0e:
                    08:3f:c3:12:3b:43:ab:3f:13:9f:e1:2a:f5:5f:78:
                    d7:55:73:3c:41:ae:69:c7:c6:75:06:3c:a7:cb:89:
                    df:2d:72:e7:c0:5e:3d:e8:88:79:2b:5a:70:d0:a7:
                    ce:5d:75:6c:01:b9:c9:c6:6c:29:9e:44:61:b1:5e:
                    18:9c:ea:e3:e7:3f:fa:34:3d:bf:e8:71:8a:49:f1:
                    90:cf:dd:e6:1a:48:07:0d:ed:f4:f6:8c:9c:ed:a0:
                    e6:ac:a6:61:84:2f:1e:ee:76:80:df:28:59:ac:78:
                    71:8c:f8:d5:36:a2:70:de:85:84:20:75:40:8f:14:
                    5d:57:2c:b1:7e:9e:7c:09:52:97:59:a2:fd:3c:dc:
                    44:2a:2c:44:d2:53:61:0f:bb:e3:70:73:98:58:15:
                    94:e3:2c:64:58:5d:b6:38:a7:2e:7c:34:ce:a5:dc:
                    23:f3:1a:84:35:68:76:97:e5:ea:cb:bd:a2:af:b0:
                    1c:7f:7f:1d:35:f0:70:be:f1:fb:da:24:a1:a5:21:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4C:90:F6:C4:53:EA:05:70:BF:EF:EB:E4:7C:6C:FE:F9:A4:35:72
            X509v3 Authority Key Identifier:
                keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.193.0.0/20
                  37.220.88.0/21
                  45.67.172.0/22
                  45.84.20.0/22
                  45.131.136.0/22
                  45.145.100.0/22
                  45.157.40.0/22
                  46.37.160.0/19
                  78.24.88.0/22
                  78.109.160.0/20
                  78.137.112.0/20
                  80.66.200.0/22
                  80.244.176.0/20
                  81.201.128.0/20
                  94.229.160.0/20
                  109.108.128.0/19
                  159.253.208.0/21
                  176.124.52.0/22
                  178.238.128.0/20
                  185.55.76.0/22
                  185.156.64.0/22
                  185.160.180.0/22
                  185.160.252.0/22
                  185.162.224.0/22
                  185.166.128.0/22
                  185.181.196.0/22
                  185.182.88.0/22
                  185.197.60.0/22
                  185.207.108.0/22
                  185.210.196.0/22
                  185.213.116.0/22
                  185.216.76.0/22
                  185.217.40.0/22
                  185.220.60.0/22
                  185.221.204.0/22
                  185.226.220.0/22
                  185.234.36.0/22
                  185.241.248.0/22
                  192.166.44.0/22
                  193.39.252.0/22
                  194.39.164.0/22
                  195.69.102.0/24
                IPv6:
                  2a02:21a8::/47
                  2a02:22d0::/32
                  2a09:b200:6::/48
                  2a09:b600:5::/48
                  2a09:ba00:4::/48
                  2a0c:3dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         64:62:77:7c:46:6f:fd:53:8e:d2:b1:30:a9:4d:0f:ec:b3:41:
         92:e8:82:75:3e:9b:44:ae:cd:2a:6e:70:67:dd:3c:30:8e:50:
         10:eb:6c:43:ef:97:02:1f:ab:3b:84:11:89:5f:31:fe:61:3c:
         6b:d1:dc:90:71:bb:ae:d1:3f:65:f7:af:2e:f8:b3:bd:74:1e:
         03:bd:81:ce:b0:68:95:a5:0b:c4:49:d6:58:0c:44:ae:cc:79:
         ad:69:a8:ac:2f:cc:0c:1e:c8:e4:38:e6:1f:59:ea:35:a7:66:
         58:ac:f0:ca:35:4b:c3:a3:f7:87:ed:78:97:14:a5:60:63:3a:
         a8:bc:12:b5:56:b7:dd:1b:69:ab:25:bc:a7:16:13:22:87:07:
         96:3f:3f:7a:be:30:78:6c:f4:80:46:7f:1d:b6:f6:ba:4d:6d:
         ef:76:67:24:23:28:12:9d:55:75:66:da:0c:8f:31:5b:11:85:
         67:2a:b1:b8:53:1e:7f:8d:39:4f:63:be:bb:24:5d:45:41:c7:
         2f:df:ff:b0:5e:15:1c:26:94:7f:7b:99:a0:c0:3c:2c:87:54:
         33:cd:84:88:53:e5:70:1e:c9:51:0e:0e:2b:a6:d6:21:6f:f8:
         60:c4:64:0c:08:20:73:93:1f:bb:5c:43:dd:55:46:08:09:6b:
         91:5b:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net