Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/WV1h96bfP3b-b_U1sElAqQaVWMw.roa
File:                     WV1h96bfP3b-b_U1sElAqQaVWMw.roa (raw, json)
Hash identifier:          zed6NPZL7hiw6s9pn8gI4vRY3NeeGGpVgVgnsGpbOwE=
Subject key identifier:   59:5D:61:F7:A6:DF:3F:76:FE:6F:F5:35:B0:49:40:A9:06:95:58:CC
Certificate issuer:       /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial:       01942747603210C952AD1595166903275831
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/WV1h96bfP3b-b_U1sElAqQaVWMw.roa
Signing time:             Thu 02 Jan 2025 13:49:36 +0000
ROA not before:           Thu 02 Jan 2025 13:49:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29684
IP address blocks:        46.235.88.0/21 maxlen: 24
                          46.235.88.0/23 maxlen: 23
                          46.235.90.0/23 maxlen: 23
                          46.235.91.0/24 maxlen: 24
                          46.235.92.0/23 maxlen: 23
                          46.235.94.0/23 maxlen: 23
                          46.235.94.0/24 maxlen: 24
                          62.204.48.0/24 maxlen: 24
                          77.75.224.0/24 maxlen: 24
                          79.110.229.0/24 maxlen: 24
                          88.85.224.0/19 maxlen: 24
                          88.85.224.0/21 maxlen: 21
                          88.85.224.0/23 maxlen: 23
                          88.85.226.0/23 maxlen: 23
                          88.85.228.0/23 maxlen: 23
                          88.85.228.0/24 maxlen: 24
                          88.85.230.0/23 maxlen: 23
                          88.85.231.0/24 maxlen: 24
                          88.85.232.0/21 maxlen: 21
                          88.85.232.0/24 maxlen: 24
                          88.85.235.0/24 maxlen: 24
                          88.85.236.0/24 maxlen: 24
                          88.85.237.0/24 maxlen: 24
                          88.85.238.0/23 maxlen: 23
                          88.85.238.0/24 maxlen: 24
                          88.85.239.0/24 maxlen: 24
                          88.85.240.0/21 maxlen: 21
                          88.85.240.0/23 maxlen: 23
                          88.85.242.0/24 maxlen: 24
                          88.85.244.0/24 maxlen: 24
                          88.85.245.0/24 maxlen: 24
                          88.85.246.0/23 maxlen: 23
                          88.85.247.0/24 maxlen: 24
                          88.85.248.0/21 maxlen: 21
                          88.85.248.0/23 maxlen: 23
                          88.85.250.0/23 maxlen: 23
                          88.85.250.0/24 maxlen: 24
                          88.85.252.0/23 maxlen: 23
                          88.85.254.0/24 maxlen: 24
                          88.85.255.0/24 maxlen: 24
                          146.19.71.0/24 maxlen: 24
                          176.97.216.0/24 maxlen: 24
                          176.98.32.0/22 maxlen: 22
                          176.98.32.0/24 maxlen: 24
                          176.98.33.0/24 maxlen: 24
                          176.98.34.0/23 maxlen: 23
                          176.98.34.0/24 maxlen: 24
                          176.98.35.0/24 maxlen: 24
                          176.241.184.0/21 maxlen: 24
                          176.241.184.0/23 maxlen: 23
                          176.241.186.0/23 maxlen: 23
                          176.241.188.0/24 maxlen: 24
                          176.241.189.0/24 maxlen: 24
                          176.241.190.0/24 maxlen: 24
                          176.241.191.0/24 maxlen: 24
                          178.20.144.0/21 maxlen: 24
                          178.20.144.0/23 maxlen: 23
                          178.20.146.0/23 maxlen: 23
                          178.20.148.0/23 maxlen: 23
                          178.20.150.0/23 maxlen: 23
                          185.10.112.0/22 maxlen: 24
                          185.10.112.0/24 maxlen: 24
                          185.10.113.0/24 maxlen: 24
                          185.10.114.0/23 maxlen: 23
                          185.10.114.0/24 maxlen: 24
                          185.10.115.0/24 maxlen: 24
                          185.224.252.0/22 maxlen: 24
                          185.224.252.0/23 maxlen: 23
                          185.224.252.0/24 maxlen: 24
                          185.224.253.0/24 maxlen: 24
                          185.224.254.0/23 maxlen: 23
                          185.224.254.0/24 maxlen: 24
                          185.224.255.0/24 maxlen: 24
                          193.105.25.0/24 maxlen: 24
                          193.242.127.0/24 maxlen: 24
                          194.104.226.0/24 maxlen: 24
                          212.12.160.0/19 maxlen: 24
                          212.12.160.0/20 maxlen: 20
                          212.12.160.0/23 maxlen: 23
                          212.12.160.0/24 maxlen: 24
                          212.12.161.0/24 maxlen: 24
                          212.12.162.0/23 maxlen: 23
                          212.12.162.0/24 maxlen: 24
                          212.12.163.0/24 maxlen: 24
                          212.12.164.0/23 maxlen: 23
                          212.12.164.0/24 maxlen: 24
                          212.12.166.0/23 maxlen: 23
                          212.12.166.0/24 maxlen: 24
                          212.12.167.0/24 maxlen: 24
                          212.12.168.0/23 maxlen: 23
                          212.12.168.0/24 maxlen: 24
                          212.12.169.0/24 maxlen: 24
                          212.12.170.0/23 maxlen: 23
                          212.12.170.0/24 maxlen: 24
                          212.12.171.0/24 maxlen: 24
                          212.12.172.0/23 maxlen: 23
                          212.12.174.0/23 maxlen: 23
                          212.12.175.0/24 maxlen: 24
                          212.12.176.0/20 maxlen: 20
                          212.12.176.0/23 maxlen: 23
                          212.12.178.0/23 maxlen: 23
                          212.12.180.0/23 maxlen: 23
                          212.12.182.0/23 maxlen: 23
                          212.12.182.0/24 maxlen: 24
                          212.12.183.0/24 maxlen: 24
                          212.12.184.0/23 maxlen: 23
                          212.12.185.0/24 maxlen: 24
                          212.12.186.0/23 maxlen: 23
                          212.12.187.0/24 maxlen: 24
                          212.12.188.0/23 maxlen: 23
                          212.12.189.0/24 maxlen: 24
                          212.12.190.0/23 maxlen: 23
                          2a00:1560::/32 maxlen: 32
                          2a00:1560:4::/47 maxlen: 47
                          2a00:1560:5::/48 maxlen: 48
                          2a00:1560:c::/48 maxlen: 48
                          2a00:1560:10::/48 maxlen: 48
                          2a00:1560:16::/48 maxlen: 48
                          2a00:1560:17::/48 maxlen: 48
                          2a00:1560:18::/48 maxlen: 48
                          2a00:1560:60::/48 maxlen: 48
                          2a00:1560:1111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:60:32:10:c9:52:ad:15:95:16:69:03:27:58:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
        Validity
            Not Before: Jan  2 13:49:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=595d61f7a6df3f76fe6ff535b04940a9069558cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:e8:65:7e:d9:73:78:ff:88:a2:89:e3:7e:
                    cd:45:3a:84:5b:ab:84:e7:29:d0:d7:b1:7c:fb:30:
                    c5:ce:82:33:60:15:52:f7:7d:d6:85:71:5d:66:7f:
                    1f:57:d1:e2:60:50:b5:8a:dc:78:cb:c4:b0:6c:c6:
                    f8:7b:d0:41:8b:98:07:1e:63:44:95:6b:3d:a9:08:
                    4a:d3:ee:e6:03:49:fa:90:0a:14:21:ac:cd:d3:d4:
                    0d:e2:fb:92:00:44:96:e8:c4:ae:4f:9b:36:c1:7a:
                    f5:0d:25:91:81:56:a1:10:14:da:5c:9d:07:89:4d:
                    e9:09:57:96:52:8f:27:ac:9a:c0:b7:3d:4e:2c:87:
                    0f:24:cb:81:09:cd:f5:45:89:9e:0e:e9:a7:90:45:
                    e2:6c:e8:27:f8:20:7d:02:be:eb:6d:3c:1c:a8:75:
                    06:35:4b:95:86:f0:6b:6e:ed:4f:04:ed:32:bb:f8:
                    e8:39:04:e7:b0:81:e0:95:2f:f9:25:83:02:2c:f5:
                    13:32:a5:f2:e0:b8:d3:4b:7b:a1:07:a1:b9:82:9f:
                    bf:18:a6:19:9c:c2:23:1c:84:65:9a:6c:6d:f5:35:
                    85:6e:c1:73:d8:18:8b:da:1c:6e:e5:2d:81:df:b7:
                    b2:9e:a8:49:cf:59:41:6a:e4:df:59:5d:0b:57:81:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5D:61:F7:A6:DF:3F:76:FE:6F:F5:35:B0:49:40:A9:06:95:58:CC
            X509v3 Authority Key Identifier:
                keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/WV1h96bfP3b-b_U1sElAqQaVWMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.88.0/21
                  62.204.48.0/24
                  77.75.224.0/24
                  79.110.229.0/24
                  88.85.224.0/19
                  146.19.71.0/24
                  176.97.216.0/24
                  176.98.32.0/22
                  176.241.184.0/21
                  178.20.144.0/21
                  185.10.112.0/22
                  185.224.252.0/22
                  193.105.25.0/24
                  193.242.127.0/24
                  194.104.226.0/24
                  212.12.160.0/19
                IPv6:
                  2a00:1560::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:26:7b:75:52:0d:20:ba:01:78:da:b1:67:77:c1:1f:4b:0b:
         8a:0b:37:19:7c:e6:5f:cc:57:0b:c2:cc:94:81:d5:b7:3e:fa:
         49:ff:34:c0:f6:ff:8a:24:22:ad:08:5f:e9:6d:30:2f:41:85:
         9e:ec:10:9f:7c:39:1b:e9:63:de:15:85:33:c3:a2:00:f0:61:
         ce:0b:2b:ed:28:c0:75:a9:61:1f:f6:64:f5:c1:41:76:68:e8:
         aa:10:dc:81:0c:ae:e2:36:c5:a3:91:0b:65:18:3c:24:1f:a8:
         48:90:de:54:50:4a:2f:e9:cb:fb:ba:aa:8e:5e:46:2d:d3:e0:
         43:f4:94:2a:54:2d:c4:db:eb:1e:51:07:af:97:43:ce:f1:35:
         1e:8f:a1:3e:f8:c8:0c:87:fa:9d:f1:1f:d0:f8:de:44:fc:c2:
         f8:17:59:f4:b3:fa:18:7a:16:84:f0:6c:d1:04:de:45:66:58:
         1a:22:c3:99:a1:40:3f:4b:16:25:55:14:e2:81:c8:68:a4:4e:
         81:34:1e:de:5e:9d:c5:de:aa:4c:fb:29:b9:5d:84:9c:38:b3:
         7f:c8:1b:40:73:f5:cd:a4:72:19:d0:81:22:4e:f9:27:aa:52:
         43:04:1d:c6:b7:68:eb:21:10:99:24:db:1c:b0:a9:58:55:f2:
         78:0f:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:51 2025 by rpki-client on console.sobornost.net