Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/wcnB-JJNXq_0bFPzZ6d2oZ9Vpto.roa
File:                     wcnB-JJNXq_0bFPzZ6d2oZ9Vpto.roa (raw, json)
Hash identifier:          23Nhz5S2T6oMIxU1BET30KjpLb1Pj+emx/UM9kj1sew=
Subject key identifier:   C1:C9:C1:F8:92:4D:5E:AF:F4:6C:53:F3:67:A7:76:A1:9F:55:A6:DA
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       019425FDC7B89F6EF37653188FBA6390452C
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/wcnB-JJNXq_0bFPzZ6d2oZ9Vpto.roa
Signing time:             Thu 02 Jan 2025 07:49:36 +0000
ROA not before:           Thu 02 Jan 2025 07:49:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39501
IP address blocks:        45.140.28.0/22 maxlen: 22
                          85.204.30.0/23 maxlen: 23
                          85.204.76.0/23 maxlen: 23
                          85.204.104.0/23 maxlen: 23
                          86.104.232.0/21 maxlen: 21
                          89.32.196.0/23 maxlen: 23
                          89.33.18.0/23 maxlen: 23
                          89.33.204.0/23 maxlen: 23
                          89.33.234.0/23 maxlen: 23
                          89.33.240.0/23 maxlen: 23
                          89.34.20.0/23 maxlen: 23
                          89.34.88.0/23 maxlen: 23
                          89.34.94.0/23 maxlen: 23
                          89.34.168.0/23 maxlen: 23
                          89.34.176.0/23 maxlen: 23
                          89.34.200.0/23 maxlen: 23
                          89.35.58.0/23 maxlen: 23
                          89.35.132.0/23 maxlen: 23
                          89.35.156.0/23 maxlen: 23
                          89.35.176.0/23 maxlen: 23
                          89.35.194.0/23 maxlen: 23
                          89.36.16.0/23 maxlen: 23
                          89.36.194.0/23 maxlen: 23
                          89.36.226.0/23 maxlen: 23
                          89.36.252.0/23 maxlen: 23
                          89.37.30.0/23 maxlen: 23
                          89.37.42.0/23 maxlen: 23
                          89.37.102.0/23 maxlen: 23
                          89.37.198.0/23 maxlen: 23
                          89.37.218.0/23 maxlen: 23
                          89.38.24.0/23 maxlen: 23
                          89.38.102.0/23 maxlen: 23
                          89.38.242.0/23 maxlen: 23
                          89.39.186.0/23 maxlen: 23
                          89.40.38.0/23 maxlen: 23
                          89.40.78.0/23 maxlen: 23
                          89.40.90.0/23 maxlen: 23
                          89.40.106.0/23 maxlen: 23
                          89.40.110.0/23 maxlen: 23
                          89.40.128.0/23 maxlen: 23
                          89.41.8.0/21 maxlen: 21
                          89.41.16.0/21 maxlen: 21
                          89.41.32.0/23 maxlen: 23
                          89.41.58.0/23 maxlen: 23
                          89.41.240.0/21 maxlen: 21
                          89.42.32.0/23 maxlen: 23
                          89.42.56.0/23 maxlen: 23
                          89.42.68.0/23 maxlen: 23
                          89.42.150.0/23 maxlen: 23
                          89.42.228.0/23 maxlen: 23
                          89.43.36.0/23 maxlen: 23
                          89.43.70.0/23 maxlen: 23
                          89.43.88.0/21 maxlen: 21
                          89.43.96.0/21 maxlen: 21
                          89.43.182.0/23 maxlen: 23
                          89.43.188.0/23 maxlen: 23
                          89.43.204.0/23 maxlen: 23
                          89.44.112.0/23 maxlen: 23
                          89.44.118.0/23 maxlen: 23
                          89.44.146.0/23 maxlen: 23
                          89.44.190.0/23 maxlen: 23
                          89.44.202.0/23 maxlen: 23
                          89.45.68.0/23 maxlen: 23
                          89.45.80.0/23 maxlen: 23
                          89.45.126.0/23 maxlen: 23
                          89.45.230.0/23 maxlen: 23
                          89.46.44.0/23 maxlen: 23
                          89.46.60.0/23 maxlen: 23
                          89.46.94.0/23 maxlen: 23
                          89.165.0.0/17 maxlen: 17
                          89.165.0.0/18 maxlen: 18
                          89.165.8.0/21 maxlen: 21
                          89.165.16.0/21 maxlen: 21
                          89.165.56.0/21 maxlen: 21
                          89.165.64.0/18 maxlen: 18
                          89.165.80.0/21 maxlen: 21
                          89.165.105.0/24 maxlen: 24
                          94.176.32.0/21 maxlen: 21
                          94.177.72.0/21 maxlen: 21
                          185.46.0.0/22 maxlen: 22
                          188.158.0.0/16 maxlen: 16
                          188.158.0.0/18 maxlen: 18
                          188.158.0.0/19 maxlen: 19
                          188.158.16.0/20 maxlen: 20
                          188.158.32.0/19 maxlen: 19
                          188.158.32.0/20 maxlen: 20
                          188.158.64.0/19 maxlen: 19
                          188.158.96.0/19 maxlen: 19
                          188.158.96.0/20 maxlen: 20
                          188.158.96.0/21 maxlen: 21
                          188.158.128.0/18 maxlen: 18
                          188.158.128.0/19 maxlen: 19
                          188.158.160.0/19 maxlen: 19
                          188.158.160.0/20 maxlen: 20
                          188.158.160.0/21 maxlen: 21
                          188.158.192.0/19 maxlen: 19
                          188.158.224.0/19 maxlen: 19
                          188.159.0.0/18 maxlen: 18
                          188.159.0.0/19 maxlen: 19
                          188.159.32.0/19 maxlen: 19
                          188.159.64.0/19 maxlen: 19
                          188.159.96.0/19 maxlen: 19
                          188.159.128.0/18 maxlen: 18
                          188.159.128.0/19 maxlen: 19
                          188.159.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:c7:b8:9f:6e:f3:76:53:18:8f:ba:63:90:45:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Jan  2 07:49:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c1c9c1f8924d5eaff46c53f367a776a19f55a6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:90:03:bf:b2:71:c4:ec:e6:da:a8:4c:a7:ec:
                    2f:83:b9:14:bb:29:a4:68:2e:1d:d9:18:ac:52:50:
                    6a:7d:5b:20:d1:91:83:8e:1b:b7:cb:bc:3f:38:59:
                    ba:20:ce:9e:1c:ff:80:d8:59:a7:7a:e9:e7:6b:68:
                    25:19:5c:49:87:a1:32:a1:20:63:d0:d4:99:a6:62:
                    ba:19:8d:56:98:62:0f:67:53:58:8f:4a:34:a6:81:
                    27:49:27:c0:3a:f0:a1:7f:44:e4:89:e0:7c:c8:65:
                    92:61:48:4e:8d:c2:b5:1f:05:78:72:c2:12:c5:d2:
                    a0:01:79:66:fd:81:67:71:82:e8:b0:5d:47:06:14:
                    65:df:0d:17:6c:fb:d1:af:ef:47:56:9a:ee:0f:b0:
                    4a:e5:53:82:4c:7b:48:4f:ea:29:18:d2:ba:c5:a9:
                    46:39:d3:35:37:b8:ab:8c:d5:ac:f1:d7:db:8d:92:
                    3e:4a:65:90:24:8c:58:bd:7c:f7:d4:8d:27:f2:08:
                    82:d4:43:53:ef:b4:6f:0c:96:34:24:be:12:ae:35:
                    47:5b:51:95:34:af:ed:53:58:57:c6:76:65:a5:b5:
                    d3:e0:ac:76:e1:e6:3c:11:5d:f4:87:73:3c:07:44:
                    99:30:c7:6e:d4:f0:b8:9e:a9:3a:27:f5:86:55:0d:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C9:C1:F8:92:4D:5E:AF:F4:6C:53:F3:67:A7:76:A1:9F:55:A6:DA
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/wcnB-JJNXq_0bFPzZ6d2oZ9Vpto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.28.0/22
                  85.204.30.0/23
                  85.204.76.0/23
                  85.204.104.0/23
                  86.104.232.0/21
                  89.32.196.0/23
                  89.33.18.0/23
                  89.33.204.0/23
                  89.33.234.0/23
                  89.33.240.0/23
                  89.34.20.0/23
                  89.34.88.0/23
                  89.34.94.0/23
                  89.34.168.0/23
                  89.34.176.0/23
                  89.34.200.0/23
                  89.35.58.0/23
                  89.35.132.0/23
                  89.35.156.0/23
                  89.35.176.0/23
                  89.35.194.0/23
                  89.36.16.0/23
                  89.36.194.0/23
                  89.36.226.0/23
                  89.36.252.0/23
                  89.37.30.0/23
                  89.37.42.0/23
                  89.37.102.0/23
                  89.37.198.0/23
                  89.37.218.0/23
                  89.38.24.0/23
                  89.38.102.0/23
                  89.38.242.0/23
                  89.39.186.0/23
                  89.40.38.0/23
                  89.40.78.0/23
                  89.40.90.0/23
                  89.40.106.0/23
                  89.40.110.0/23
                  89.40.128.0/23
                  89.41.8.0-89.41.23.255
                  89.41.32.0/23
                  89.41.58.0/23
                  89.41.240.0/21
                  89.42.32.0/23
                  89.42.56.0/23
                  89.42.68.0/23
                  89.42.150.0/23
                  89.42.228.0/23
                  89.43.36.0/23
                  89.43.70.0/23
                  89.43.88.0-89.43.103.255
                  89.43.182.0/23
                  89.43.188.0/23
                  89.43.204.0/23
                  89.44.112.0/23
                  89.44.118.0/23
                  89.44.146.0/23
                  89.44.190.0/23
                  89.44.202.0/23
                  89.45.68.0/23
                  89.45.80.0/23
                  89.45.126.0/23
                  89.45.230.0/23
                  89.46.44.0/23
                  89.46.60.0/23
                  89.46.94.0/23
                  89.165.0.0/17
                  94.176.32.0/21
                  94.177.72.0/21
                  185.46.0.0/22
                  188.158.0.0-188.159.223.255

    Signature Algorithm: sha256WithRSAEncryption
         1a:7d:da:14:0e:d9:0b:b4:58:90:9c:f5:ef:0c:23:3d:1f:d0:
         63:4a:86:bc:d0:e5:9c:15:88:06:3b:06:45:cb:ad:5f:3a:06:
         30:b4:67:49:82:ef:c2:7c:5f:51:0a:0d:a8:4e:8f:ad:6d:0e:
         cf:33:8b:77:6f:bc:60:a9:d0:2f:e9:64:8f:41:98:eb:8d:96:
         f9:b2:b7:17:69:96:2e:a3:d0:5b:d3:f7:4d:3e:b7:20:74:63:
         3a:9d:0f:af:85:34:2d:a2:1e:d4:d8:47:41:5a:b8:1e:1e:5c:
         d0:83:0c:b1:fe:12:25:c7:af:c4:7f:d8:b8:2e:83:28:64:9a:
         49:8a:5e:5a:c2:85:fb:74:be:6e:89:3d:47:5c:30:e9:64:5a:
         6b:4e:f1:0e:d2:48:e2:96:73:95:83:15:df:08:0e:b0:8e:a9:
         22:e8:05:bc:fe:76:f5:21:3c:13:05:31:81:a8:2f:19:8b:d0:
         76:37:8e:25:8c:e9:16:61:4b:90:05:77:4f:96:8d:00:3e:61:
         35:61:60:c2:f7:53:88:13:55:3b:b9:c0:fc:59:0c:33:54:5c:
         f5:f2:1b:e0:ad:43:5b:90:36:37:90:8d:76:ec:a7:a3:6e:fa:
         84:a9:d5:9a:2a:2d:46:25:29:7d:ee:7c:d6:bb:1f:26:b9:a6:
         7c:01:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:09 2025 by rpki-client on console.sobornost.net