Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/6nkC9KGtZ3rkUtnTPxGS9-EtUiQ.roa
File:                     6nkC9KGtZ3rkUtnTPxGS9-EtUiQ.roa (raw, json)
Hash identifier:          uBiRRR/VTu9ucqwtNEYT9sozMyriZcA1bkDD0m/zgsg=
Subject key identifier:   EA:79:02:F4:A1:AD:67:7A:E4:52:D9:D3:3F:11:92:F7:E1:2D:52:24
Certificate issuer:       /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial:       0193F3D81654ABD1F20B448347AF75DA30EF
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/6nkC9KGtZ3rkUtnTPxGS9-EtUiQ.roa
Signing time:             Mon 23 Dec 2024 14:07:25 +0000
ROA not before:           Mon 23 Dec 2024 14:07:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9021
IP address blocks:        90.158.0.0/16 maxlen: 16
                          90.158.0.0/18 maxlen: 18
                          90.158.0.0/22 maxlen: 22
                          90.158.0.0/23 maxlen: 23
                          90.158.3.0/24 maxlen: 24
                          90.158.8.0/24 maxlen: 24
                          90.158.15.0/24 maxlen: 24
                          90.158.16.0/24 maxlen: 24
                          90.158.18.0/24 maxlen: 24
                          90.158.19.0/24 maxlen: 24
                          90.158.24.0/24 maxlen: 24
                          90.158.26.0/24 maxlen: 24
                          90.158.27.0/24 maxlen: 24
                          90.158.28.0/24 maxlen: 24
                          90.158.29.0/24 maxlen: 24
                          90.158.30.0/24 maxlen: 24
                          90.158.31.0/24 maxlen: 24
                          90.158.32.0/24 maxlen: 24
                          90.158.33.0/24 maxlen: 24
                          90.158.36.0/24 maxlen: 24
                          90.158.37.0/24 maxlen: 24
                          90.158.39.0/24 maxlen: 24
                          90.158.41.0/24 maxlen: 24
                          90.158.43.0/24 maxlen: 24
                          90.158.44.0/24 maxlen: 24
                          90.158.45.0/24 maxlen: 24
                          90.158.46.0/24 maxlen: 24
                          90.158.47.0/24 maxlen: 24
                          90.158.48.0/20 maxlen: 20
                          90.158.48.0/24 maxlen: 24
                          90.158.50.0/23 maxlen: 23
                          90.158.51.0/24 maxlen: 24
                          90.158.52.0/23 maxlen: 23
                          90.158.52.0/24 maxlen: 24
                          90.158.53.0/24 maxlen: 24
                          90.158.54.0/23 maxlen: 23
                          90.158.55.0/24 maxlen: 24
                          90.158.56.0/24 maxlen: 24
                          90.158.60.0/24 maxlen: 24
                          90.158.62.0/24 maxlen: 24
                          90.158.64.0/21 maxlen: 21
                          90.158.64.0/24 maxlen: 24
                          90.158.65.0/24 maxlen: 24
                          90.158.66.0/24 maxlen: 24
                          90.158.67.0/24 maxlen: 24
                          90.158.68.0/24 maxlen: 24
                          90.158.72.0/22 maxlen: 22
                          90.158.72.0/24 maxlen: 24
                          90.158.73.0/24 maxlen: 24
                          90.158.74.0/24 maxlen: 24
                          90.158.75.0/24 maxlen: 24
                          90.158.96.0/22 maxlen: 22
                          90.158.100.0/24 maxlen: 24
                          90.158.101.0/24 maxlen: 24
                          90.158.102.0/23 maxlen: 23
                          90.158.104.0/24 maxlen: 24
                          90.158.105.0/24 maxlen: 24
                          90.158.106.0/24 maxlen: 24
                          90.158.109.0/24 maxlen: 24
                          90.158.110.0/24 maxlen: 24
                          90.158.111.0/24 maxlen: 24
                          90.158.112.0/20 maxlen: 20
                          90.158.114.0/24 maxlen: 24
                          90.158.116.0/24 maxlen: 24
                          90.158.117.0/24 maxlen: 24
                          90.158.119.0/24 maxlen: 24
                          90.158.120.0/24 maxlen: 24
                          90.158.121.0/24 maxlen: 24
                          90.158.122.0/24 maxlen: 24
                          90.158.123.0/24 maxlen: 24
                          90.158.126.0/24 maxlen: 24
                          90.158.127.0/24 maxlen: 24
                          90.158.128.0/17 maxlen: 17
                          90.158.128.0/21 maxlen: 21
                          90.158.136.0/21 maxlen: 21
                          90.158.137.0/24 maxlen: 24
                          90.158.138.0/24 maxlen: 24
                          90.158.139.0/24 maxlen: 24
                          90.158.160.0/24 maxlen: 24
                          90.158.161.0/24 maxlen: 24
                          90.158.200.0/23 maxlen: 23
                          90.158.224.0/22 maxlen: 22
                          90.158.240.0/21 maxlen: 21
                          90.158.244.0/22 maxlen: 22
                          90.158.248.0/21 maxlen: 21
                          90.158.249.0/24 maxlen: 24
                          90.158.251.0/24 maxlen: 24
                          90.158.252.0/22 maxlen: 22
                          90.159.0.0/16 maxlen: 16
                          90.159.0.0/22 maxlen: 22
                          90.159.0.0/24 maxlen: 24
                          90.159.1.0/24 maxlen: 24
                          90.159.2.0/24 maxlen: 24
                          90.159.3.0/24 maxlen: 24
                          90.159.4.0/23 maxlen: 23
                          90.159.10.0/24 maxlen: 24
                          90.159.15.0/24 maxlen: 24
                          90.159.20.0/24 maxlen: 24
                          90.159.26.0/24 maxlen: 24
                          90.159.27.0/24 maxlen: 24
                          90.159.29.0/24 maxlen: 24
                          90.159.31.0/24 maxlen: 24
                          90.159.33.0/24 maxlen: 24
                          90.159.34.0/24 maxlen: 24
                          90.159.36.0/24 maxlen: 24
                          90.159.37.0/24 maxlen: 24
                          90.159.38.0/24 maxlen: 24
                          90.159.44.0/22 maxlen: 22
                          90.159.50.0/24 maxlen: 24
                          90.159.51.0/24 maxlen: 24
                          90.159.58.0/24 maxlen: 24
                          90.159.59.0/24 maxlen: 24
                          90.159.60.0/24 maxlen: 24
                          90.159.61.0/24 maxlen: 24
                          90.159.64.0/18 maxlen: 18
                          90.159.64.0/24 maxlen: 24
                          90.159.68.0/24 maxlen: 24
                          90.159.128.0/20 maxlen: 20
                          90.159.136.0/21 maxlen: 21
                          90.159.136.0/24 maxlen: 24
                          90.159.240.0/20 maxlen: 20
                          90.159.246.0/24 maxlen: 24
                          212.98.0.0/19 maxlen: 19
                          212.98.0.0/20 maxlen: 20
                          212.98.1.0/24 maxlen: 24
                          212.98.2.0/24 maxlen: 24
                          212.98.8.0/21 maxlen: 21
                          212.98.9.0/24 maxlen: 24
                          212.98.16.0/21 maxlen: 21
                          212.98.16.0/24 maxlen: 24
                          212.98.28.0/22 maxlen: 22
                          213.143.224.0/20 maxlen: 20
                          213.143.226.0/23 maxlen: 23
                          213.143.226.0/24 maxlen: 24
                          213.143.227.0/24 maxlen: 24
                          213.143.228.0/24 maxlen: 24
                          213.143.229.0/24 maxlen: 24
                          213.143.230.0/24 maxlen: 24
                          213.143.233.0/24 maxlen: 24
                          213.143.234.0/24 maxlen: 24
                          213.143.235.0/24 maxlen: 24
                          213.143.236.0/22 maxlen: 22
                          213.143.238.0/24 maxlen: 24
                          213.143.239.0/24 maxlen: 24
                          213.143.240.0/20 maxlen: 20
                          213.143.240.0/22 maxlen: 22
                          213.143.240.0/24 maxlen: 24
                          213.143.241.0/24 maxlen: 24
                          213.143.243.0/24 maxlen: 24
                          213.143.244.0/22 maxlen: 22
                          213.143.250.0/24 maxlen: 24
                          213.143.251.0/24 maxlen: 24
                          213.143.252.0/24 maxlen: 24
                          213.143.253.0/24 maxlen: 24
                          213.143.254.0/24 maxlen: 24
                          213.143.255.0/24 maxlen: 24
                          213.161.128.0/19 maxlen: 19
                          213.161.128.0/21 maxlen: 21
                          213.161.135.0/24 maxlen: 24
                          213.161.136.0/21 maxlen: 21
                          213.161.136.0/22 maxlen: 22
                          213.161.144.0/23 maxlen: 23
                          213.161.144.0/24 maxlen: 24
                          213.161.145.0/24 maxlen: 24
                          213.161.146.0/24 maxlen: 24
                          213.161.148.0/23 maxlen: 23
                          213.161.148.0/24 maxlen: 24
                          213.161.149.0/24 maxlen: 24
                          213.161.150.0/24 maxlen: 24
                          213.161.151.0/24 maxlen: 24
                          213.161.152.0/21 maxlen: 21
                          213.161.152.0/24 maxlen: 24
                          2a00:1f90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f3:d8:16:54:ab:d1:f2:0b:44:83:47:af:75:da:30:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
        Validity
            Not Before: Dec 23 14:07:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ea7902f4a1ad677ae452d9d33f1192f7e12d5224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:66:e5:bb:94:86:37:c1:8d:89:86:e1:f1:
                    4a:70:e2:84:ac:84:3a:f7:ed:62:e9:9c:94:34:96:
                    4d:e6:d0:01:1d:b1:52:f6:cb:a1:9c:40:b5:2c:d4:
                    93:a1:60:a8:af:8b:af:31:d1:b1:4c:47:5e:45:0f:
                    8e:ea:7a:5c:8c:3c:e2:8a:08:11:e2:c6:a6:e3:d4:
                    97:cb:e2:2f:e4:ba:ce:f0:9d:03:89:a6:4b:16:37:
                    13:a8:0d:f9:2b:64:4d:f3:f2:03:48:34:26:3b:2a:
                    cd:e3:0a:c3:75:f1:23:07:f1:db:0c:15:b2:1a:6a:
                    3c:b6:79:f5:6c:8b:0d:45:f4:0c:63:1b:0b:02:60:
                    32:d8:a8:8b:2e:7b:e7:6f:7b:02:68:39:3f:c9:9a:
                    86:c3:08:1e:26:0a:7d:10:e5:f6:ec:19:aa:4a:20:
                    f6:9e:59:ea:8c:56:6d:59:c8:d8:5e:3b:96:ae:4c:
                    13:70:e3:2e:2c:0c:ad:50:4d:44:e0:ee:83:82:4d:
                    ed:2d:82:41:1a:6d:52:07:dd:71:d6:4d:6a:98:66:
                    a7:c0:99:3c:49:4f:34:bb:d0:e3:08:21:bd:ee:87:
                    fd:e9:3a:13:29:3e:ee:06:ae:fb:2d:7b:3b:68:ba:
                    cf:59:94:4d:94:f6:12:a0:27:9d:6b:e2:ea:f4:2f:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:79:02:F4:A1:AD:67:7A:E4:52:D9:D3:3F:11:92:F7:E1:2D:52:24
            X509v3 Authority Key Identifier:
                keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/6nkC9KGtZ3rkUtnTPxGS9-EtUiQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  90.158.0.0/15
                  212.98.0.0/19
                  213.143.224.0/19
                  213.161.128.0/19
                IPv6:
                  2a00:1f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:79:71:c5:eb:e6:53:0b:18:ca:96:d3:d1:79:2e:88:75:
         d9:58:6f:ad:f2:0d:b6:66:53:50:ed:e6:37:48:1a:f0:2c:b0:
         da:2e:98:51:6f:29:d4:33:25:04:93:d7:2b:01:59:7f:3f:86:
         6b:07:1e:07:9d:a2:17:f1:77:24:70:ad:69:9e:9a:c6:1f:6f:
         dd:42:ff:4d:0e:c3:39:2c:9e:67:f5:02:ce:25:6e:c7:63:76:
         b1:43:7e:c3:4d:8e:a4:a3:78:c2:bb:0f:1f:d1:02:37:70:cd:
         2b:7e:ba:b4:1b:64:b3:0a:4c:1c:67:02:86:ca:96:23:cb:93:
         fc:01:9b:5f:8f:3a:fe:d4:cf:09:98:22:25:23:ab:1a:49:2b:
         33:45:01:47:84:98:9f:c5:15:c0:00:2c:d3:3a:59:01:4b:9e:
         a4:19:2c:eb:08:9c:be:7c:3e:ed:af:b7:ad:dd:d7:ab:48:99:
         44:be:f1:5a:e3:0d:93:07:19:de:33:4b:13:7b:66:96:0d:84:
         a4:20:04:05:0c:c7:2a:63:49:cd:aa:d3:d3:b8:0c:60:03:83:
         76:15:fd:7f:f4:18:04:bc:fc:83:87:f1:0f:cd:34:9d:36:f8:
         41:22:22:0b:a1:81:b7:71:f5:4a:c7:24:d4:c6:a5:e1:20:e3:
         da:05:5a:26
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZPz2BZUq9HyC0SDR6912jDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx
ZjlkZDMwHhcNMjQxMjIzMTQwNzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTc5MDJmNGExYWQ2NzdhZTQ1MmQ5ZDMzZjExOTJmN2UxMmQ1MjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDZm5buUhjfBjYmG4fFKcOKErIQ6
9+1i6ZyUNJZN5tABHbFS9suhnEC1LNSToWCor4uvMdGxTEdeRQ+O6npcjDziiggR
4sam49SXy+Iv5LrO8J0DiaZLFjcTqA35K2RN8/IDSDQmOyrN4wrDdfEjB/HbDBWy
Gmo8tnn1bIsNRfQMYxsLAmAy2KiLLnvnb3sCaDk/yZqGwwgeJgp9EOX27BmqSiD2
nlnqjFZtWcjYXjuWrkwTcOMuLAytUE1E4O6Dgk3tLYJBGm1SB91x1k1qmGanwJk8
SU80u9DjCCG97of96ToTKT7uBq77LXs7aLrPWZRNlPYSoCeda+Lq9C9wawIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOp5AvShrWd65FLZ0z8RkvfhLVIkMB8GA1UdIwQY
MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt
MzJhYTY3MzFjMjkxLzEvNm5rQzlLR3RaM3JrVXRuVFB4R1M5LUV0VWlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx
LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAdBAIAATAXAwMBWp4DBAXU
YgADBAXVj+ADBAXVoYAwDQQCAAIwBwMFACoAH5AwDQYJKoZIhvcNAQELBQADggEB
ABmieXHF6+ZTCxjKltPReS6IddlYb63yDbZmU1Dt5jdIGvAssNoumFFvKdQzJQST
1ysBWX8/hmsHHgedohfxdyRwrWmemsYfb91C/00Owzksnmf1As4lbsdjdrFDfsNN
jqSjeMK7Dx/RAjdwzSt+urQbZLMKTBxnAobKliPLk/wBm1+POv7UzwmYIiUjqxpJ
KzNFAUeEmJ/FFcAALNM6WQFLnqQZLOsInL58Pu2vt63d16tImUS+8VrjDZMHGd4z
SxN7ZpYNhKQgBAUMxypjSc2q09O4DGADg3YV/X/0GAS8/IOH8Q/NNJ02+EEiIguh
gbdx9UrHJNTGpeEg49oFWiY=
-----END CERTIFICATE-----
Generated at Tue Dec 24 21:25:27 2024 by rpki-client on console.sobornost.net