Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HpCNBERpK2FwBvCmQ11wvBqHsbM.roa
File:                     HpCNBERpK2FwBvCmQ11wvBqHsbM.roa (raw, json)
Hash identifier:          lTZ7cPHpdYyfHrCLmL1SJLbfBg69dIQ+TNERgHVsy/M=
Subject key identifier:   1E:90:8D:04:44:69:2B:61:70:06:F0:A6:43:5D:70:BC:1A:87:B1:B3
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       0195DCDDACF57C5C146B2E00BE0063AB7167
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HpCNBERpK2FwBvCmQ11wvBqHsbM.roa
Signing time:             Fri 28 Mar 2025 13:07:50 +0000
ROA not before:           Fri 28 Mar 2025 13:07:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58272
IP address blocks:        37.18.0.0/24 maxlen: 24
                          37.18.13.0/24 maxlen: 24
                          37.18.23.0/24 maxlen: 24
                          37.18.25.0/24 maxlen: 24
                          37.18.60.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          37.18.78.0/24 maxlen: 24
                          37.18.82.0/24 maxlen: 24
                          37.18.103.0/24 maxlen: 24
                          37.18.106.0/24 maxlen: 24
                          37.18.125.0/24 maxlen: 24
                          37.18.126.0/24 maxlen: 24
                          37.230.130.0/24 maxlen: 24
                          37.230.132.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          37.230.135.0/24 maxlen: 24
                          37.230.140.0/24 maxlen: 24
                          37.230.145.0/24 maxlen: 24
                          37.230.151.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.177.0/24 maxlen: 24
                          37.230.178.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.187.0/24 maxlen: 24
                          37.230.200.0/24 maxlen: 24
                          37.230.208.0/24 maxlen: 24
                          37.230.226.0/24 maxlen: 24
                          37.230.227.0/24 maxlen: 24
                          37.230.229.0/24 maxlen: 24
                          37.230.230.0/24 maxlen: 24
                          37.230.231.0/24 maxlen: 24
                          37.230.238.0/24 maxlen: 24
                          37.230.254.0/24 maxlen: 24
                          37.230.255.0/24 maxlen: 24
                          46.243.137.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.140.0/24 maxlen: 24
                          46.243.148.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          46.243.150.0/24 maxlen: 24
                          46.243.163.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.215.0/24 maxlen: 24
                          46.243.220.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.224.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.239.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.246.0/23 maxlen: 23
                          46.243.246.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.134.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.136.0/24 maxlen: 24
                          141.101.138.0/23 maxlen: 23
                          141.101.143.0/24 maxlen: 24
                          141.101.144.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.146.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.157.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.163.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.169.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.172.0/24 maxlen: 24
                          141.101.173.0/24 maxlen: 24
                          141.101.174.0/24 maxlen: 24
                          141.101.175.0/24 maxlen: 24
                          141.101.179.0/24 maxlen: 24
                          141.101.189.0/24 maxlen: 24
                          141.101.190.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.198.0/24 maxlen: 24
                          141.101.199.0/24 maxlen: 24
                          141.101.209.0/24 maxlen: 24
                          141.101.216.0/24 maxlen: 24
                          141.101.230.0/24 maxlen: 24
                          141.101.233.0/24 maxlen: 24
                          141.101.235.0/24 maxlen: 24
                          141.101.237.0/24 maxlen: 24
                          141.101.238.0/24 maxlen: 24
                          141.101.242.0/24 maxlen: 24
                          141.101.245.0/24 maxlen: 24
                          141.101.248.0/24 maxlen: 24
                          141.101.252.0/24 maxlen: 24
                          141.101.253.0/24 maxlen: 24
                          141.101.254.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          178.170.136.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          178.170.138.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          178.170.141.0/24 maxlen: 24
                          178.170.142.0/24 maxlen: 24
                          178.170.144.0/24 maxlen: 24
                          178.170.145.0/24 maxlen: 24
                          178.170.146.0/24 maxlen: 24
                          178.170.172.0/24 maxlen: 24
                          178.170.187.0/24 maxlen: 24
                          178.170.188.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.82.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          188.72.87.0/24 maxlen: 24
                          188.72.89.0/24 maxlen: 24
                          188.72.95.0/24 maxlen: 24
                          188.72.97.0/24 maxlen: 24
                          188.72.98.0/24 maxlen: 24
                          188.72.101.0/24 maxlen: 24
                          188.72.102.0/24 maxlen: 24
                          188.72.114.0/24 maxlen: 24
                          188.72.115.0/24 maxlen: 24
                          188.72.116.0/24 maxlen: 24
                          188.72.119.0/24 maxlen: 24
                          188.72.124.0/24 maxlen: 24
                          188.72.125.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:dc:dd:ac:f5:7c:5c:14:6b:2e:00:be:00:63:ab:71:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Mar 28 13:07:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1e908d0444692b617006f0a6435d70bc1a87b1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3e:b9:f1:4a:b1:eb:41:9e:60:a5:40:8c:f0:
                    7f:39:5f:65:62:1a:63:e3:ef:ad:3f:ca:14:fc:1d:
                    25:53:31:24:4e:aa:c2:61:86:26:40:b2:1d:21:bc:
                    4c:47:87:99:45:db:e1:d4:9b:c7:be:a8:f4:6e:4f:
                    4e:b8:9d:0b:dd:ac:a5:30:6e:95:d4:1a:a3:d8:0a:
                    28:ac:40:d0:d6:b2:70:33:e9:3a:50:ce:f7:9c:2f:
                    39:54:cd:30:e9:8a:e7:0b:7d:be:37:7c:fe:11:ed:
                    d5:f9:ff:5d:08:8e:40:f8:6a:ca:7a:dd:3e:55:56:
                    2f:32:14:e9:77:9a:96:bc:28:f6:4b:2e:cf:de:80:
                    76:99:72:b5:f4:68:b3:49:11:87:87:8a:63:b6:89:
                    6b:4d:54:76:09:80:6d:a9:b1:95:0c:09:f1:d1:01:
                    23:b1:df:11:fc:49:53:3f:39:33:55:72:69:e3:64:
                    57:b7:c9:f6:9a:3a:62:49:96:26:89:f7:ab:bc:71:
                    64:c0:b0:85:98:f6:e6:4e:46:38:f8:c9:ef:0d:d7:
                    48:a8:16:57:74:82:b3:2b:17:0f:76:81:7b:fb:4d:
                    4b:d1:85:0f:dc:03:2a:6d:62:c6:4f:e4:ae:9e:74:
                    b2:1f:ae:59:e8:4e:4e:73:5b:e5:36:eb:20:b3:4d:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:90:8D:04:44:69:2B:61:70:06:F0:A6:43:5D:70:BC:1A:87:B1:B3
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HpCNBERpK2FwBvCmQ11wvBqHsbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.13.0/24
                  37.18.23.0/24
                  37.18.25.0/24
                  37.18.60.0/24
                  37.18.63.0/24
                  37.18.78.0/24
                  37.18.82.0/24
                  37.18.103.0/24
                  37.18.106.0/24
                  37.18.125.0-37.18.126.255
                  37.230.130.0/24
                  37.230.132.0/24
                  37.230.134.0/23
                  37.230.140.0/24
                  37.230.145.0/24
                  37.230.151.0/24
                  37.230.163.0/24
                  37.230.176.0-37.230.178.255
                  37.230.182.0/23
                  37.230.187.0/24
                  37.230.200.0/24
                  37.230.208.0/24
                  37.230.226.0/23
                  37.230.229.0-37.230.231.255
                  37.230.238.0/24
                  37.230.254.0/23
                  46.243.137.0-46.243.140.255
                  46.243.148.0-46.243.150.255
                  46.243.163.0/24
                  46.243.204.0/24
                  46.243.214.0/23
                  46.243.220.0-46.243.225.255
                  46.243.236.0-46.243.243.255
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0-141.101.136.255
                  141.101.138.0/23
                  141.101.143.0-141.101.150.255
                  141.101.153.0-141.101.175.255
                  141.101.179.0/24
                  141.101.189.0-141.101.191.255
                  141.101.198.0/23
                  141.101.209.0/24
                  141.101.216.0/24
                  141.101.230.0/24
                  141.101.233.0/24
                  141.101.235.0/24
                  141.101.237.0-141.101.238.255
                  141.101.242.0/24
                  141.101.245.0/24
                  141.101.248.0/24
                  141.101.252.0/22
                  178.170.136.0-178.170.142.255
                  178.170.144.0-178.170.146.255
                  178.170.172.0/24
                  178.170.187.0-178.170.188.255
                  185.4.148.0/22
                  188.72.80.0/21
                  188.72.89.0/24
                  188.72.95.0/24
                  188.72.97.0-188.72.98.255
                  188.72.101.0-188.72.102.255
                  188.72.114.0-188.72.116.255
                  188.72.119.0/24
                  188.72.124.0/23
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:f3:29:19:31:9e:2c:35:77:35:10:a7:9c:3d:1a:81:26:40:
         03:43:22:7a:81:d4:d7:69:06:3c:f9:fb:c8:97:eb:10:57:84:
         e2:d9:09:9c:8e:00:1f:90:52:44:eb:9a:e0:d9:0a:cc:76:09:
         6c:ac:79:b7:f1:89:51:4b:78:ef:6b:4a:b8:c9:5a:b9:b8:c1:
         03:01:ca:5c:f7:7f:3f:a2:28:87:da:7c:8a:5c:1f:dc:2a:60:
         94:5a:47:6e:8a:3d:ef:db:73:4d:8b:6c:6d:cf:83:f7:61:4d:
         10:fc:75:bb:de:cf:c4:34:5f:c4:94:fc:9e:ec:8e:f8:1f:7a:
         49:64:65:3b:b2:6d:79:c7:79:55:14:76:cc:c8:9a:4c:fa:dc:
         0e:6b:d5:36:bc:61:25:73:8d:31:29:da:5a:e6:96:d7:c3:e7:
         ab:01:7f:50:05:4f:0c:6e:8c:c9:3b:94:33:ef:41:ae:e1:94:
         25:0a:d8:cc:ca:2d:5e:31:dc:23:d4:86:d5:bf:fe:5f:d4:bc:
         3f:db:16:e5:e7:0a:ba:74:46:bb:b2:38:44:8a:b8:1b:f5:c7:
         fd:56:e2:d7:56:9b:ec:bc:3d:ad:55:25:40:c1:ae:25:85:a2:
         12:38:a5:c0:3f:6a:99:ed:2c:1c:60:31:37:b5:63:b2:4d:3a:
         87:a9:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 17:28:04 2025 by rpki-client on console.sobornost.net