Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JgaqQ-NS9koIHECsoGvT2qb3niA.roa
File:                     JgaqQ-NS9koIHECsoGvT2qb3niA.roa (raw, json)
Hash identifier:          ZZxAP2bgmrdB36CY8i0CeCCwo6afYqZrST1shdy9MXE=
Subject key identifier:   26:06:AA:43:E3:52:F6:4A:08:1C:40:AC:A0:6B:D3:DA:A6:F7:9E:20
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       019601813FCE5C14FE8703561C93337F58C6
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JgaqQ-NS9koIHECsoGvT2qb3niA.roa
Signing time:             Fri 04 Apr 2025 15:52:49 +0000
ROA not before:           Fri 04 Apr 2025 15:52:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58272
IP address blocks:        37.18.0.0/24 maxlen: 24
                          37.18.13.0/24 maxlen: 24
                          37.18.23.0/24 maxlen: 24
                          37.18.25.0/24 maxlen: 24
                          37.18.60.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          37.18.78.0/24 maxlen: 24
                          37.18.82.0/24 maxlen: 24
                          37.18.103.0/24 maxlen: 24
                          37.18.106.0/24 maxlen: 24
                          37.18.125.0/24 maxlen: 24
                          37.18.126.0/24 maxlen: 24
                          37.230.130.0/24 maxlen: 24
                          37.230.132.0/24 maxlen: 24
                          37.230.134.0/24 maxlen: 24
                          37.230.135.0/24 maxlen: 24
                          37.230.140.0/24 maxlen: 24
                          37.230.145.0/24 maxlen: 24
                          37.230.151.0/24 maxlen: 24
                          37.230.163.0/24 maxlen: 24
                          37.230.176.0/24 maxlen: 24
                          37.230.177.0/24 maxlen: 24
                          37.230.178.0/24 maxlen: 24
                          37.230.182.0/24 maxlen: 24
                          37.230.183.0/24 maxlen: 24
                          37.230.187.0/24 maxlen: 24
                          37.230.200.0/24 maxlen: 24
                          37.230.208.0/24 maxlen: 24
                          37.230.226.0/24 maxlen: 24
                          37.230.227.0/24 maxlen: 24
                          37.230.230.0/24 maxlen: 24
                          37.230.231.0/24 maxlen: 24
                          37.230.238.0/24 maxlen: 24
                          37.230.254.0/24 maxlen: 24
                          37.230.255.0/24 maxlen: 24
                          46.243.138.0/24 maxlen: 24
                          46.243.139.0/24 maxlen: 24
                          46.243.140.0/24 maxlen: 24
                          46.243.148.0/24 maxlen: 24
                          46.243.149.0/24 maxlen: 24
                          46.243.150.0/24 maxlen: 24
                          46.243.163.0/24 maxlen: 24
                          46.243.204.0/24 maxlen: 24
                          46.243.214.0/24 maxlen: 24
                          46.243.215.0/24 maxlen: 24
                          46.243.220.0/24 maxlen: 24
                          46.243.221.0/24 maxlen: 24
                          46.243.222.0/24 maxlen: 24
                          46.243.223.0/24 maxlen: 24
                          46.243.224.0/24 maxlen: 24
                          46.243.225.0/24 maxlen: 24
                          46.243.236.0/24 maxlen: 24
                          46.243.237.0/24 maxlen: 24
                          46.243.238.0/24 maxlen: 24
                          46.243.239.0/24 maxlen: 24
                          46.243.240.0/24 maxlen: 24
                          46.243.241.0/24 maxlen: 24
                          46.243.242.0/24 maxlen: 24
                          46.243.243.0/24 maxlen: 24
                          46.243.246.0/23 maxlen: 23
                          46.243.246.0/24 maxlen: 24
                          46.243.247.0/24 maxlen: 24
                          46.243.248.0/24 maxlen: 24
                          46.243.249.0/24 maxlen: 24
                          46.243.250.0/24 maxlen: 24
                          46.243.251.0/24 maxlen: 24
                          128.0.71.0/24 maxlen: 24
                          141.101.132.0/24 maxlen: 24
                          141.101.133.0/24 maxlen: 24
                          141.101.134.0/24 maxlen: 24
                          141.101.135.0/24 maxlen: 24
                          141.101.136.0/24 maxlen: 24
                          141.101.138.0/23 maxlen: 23
                          141.101.143.0/24 maxlen: 24
                          141.101.144.0/24 maxlen: 24
                          141.101.145.0/24 maxlen: 24
                          141.101.146.0/24 maxlen: 24
                          141.101.147.0/24 maxlen: 24
                          141.101.148.0/24 maxlen: 24
                          141.101.149.0/24 maxlen: 24
                          141.101.150.0/24 maxlen: 24
                          141.101.153.0/24 maxlen: 24
                          141.101.154.0/24 maxlen: 24
                          141.101.155.0/24 maxlen: 24
                          141.101.156.0/24 maxlen: 24
                          141.101.157.0/24 maxlen: 24
                          141.101.158.0/24 maxlen: 24
                          141.101.159.0/24 maxlen: 24
                          141.101.160.0/24 maxlen: 24
                          141.101.161.0/24 maxlen: 24
                          141.101.162.0/24 maxlen: 24
                          141.101.163.0/24 maxlen: 24
                          141.101.164.0/24 maxlen: 24
                          141.101.165.0/24 maxlen: 24
                          141.101.166.0/24 maxlen: 24
                          141.101.167.0/24 maxlen: 24
                          141.101.168.0/24 maxlen: 24
                          141.101.169.0/24 maxlen: 24
                          141.101.170.0/24 maxlen: 24
                          141.101.171.0/24 maxlen: 24
                          141.101.172.0/24 maxlen: 24
                          141.101.173.0/24 maxlen: 24
                          141.101.174.0/24 maxlen: 24
                          141.101.175.0/24 maxlen: 24
                          141.101.179.0/24 maxlen: 24
                          141.101.189.0/24 maxlen: 24
                          141.101.190.0/24 maxlen: 24
                          141.101.191.0/24 maxlen: 24
                          141.101.198.0/24 maxlen: 24
                          141.101.199.0/24 maxlen: 24
                          141.101.209.0/24 maxlen: 24
                          141.101.216.0/24 maxlen: 24
                          141.101.230.0/24 maxlen: 24
                          141.101.233.0/24 maxlen: 24
                          141.101.235.0/24 maxlen: 24
                          141.101.237.0/24 maxlen: 24
                          141.101.238.0/24 maxlen: 24
                          141.101.242.0/24 maxlen: 24
                          141.101.245.0/24 maxlen: 24
                          141.101.248.0/24 maxlen: 24
                          141.101.252.0/24 maxlen: 24
                          141.101.253.0/24 maxlen: 24
                          141.101.254.0/24 maxlen: 24
                          141.101.255.0/24 maxlen: 24
                          178.170.136.0/24 maxlen: 24
                          178.170.137.0/24 maxlen: 24
                          178.170.138.0/24 maxlen: 24
                          178.170.139.0/24 maxlen: 24
                          178.170.140.0/24 maxlen: 24
                          178.170.141.0/24 maxlen: 24
                          178.170.142.0/24 maxlen: 24
                          178.170.144.0/24 maxlen: 24
                          178.170.145.0/24 maxlen: 24
                          178.170.146.0/24 maxlen: 24
                          178.170.172.0/24 maxlen: 24
                          178.170.187.0/24 maxlen: 24
                          178.170.188.0/24 maxlen: 24
                          185.4.148.0/24 maxlen: 24
                          185.4.149.0/24 maxlen: 24
                          185.4.150.0/24 maxlen: 24
                          185.4.151.0/24 maxlen: 24
                          188.72.80.0/24 maxlen: 24
                          188.72.81.0/24 maxlen: 24
                          188.72.82.0/24 maxlen: 24
                          188.72.83.0/24 maxlen: 24
                          188.72.84.0/24 maxlen: 24
                          188.72.85.0/24 maxlen: 24
                          188.72.86.0/24 maxlen: 24
                          188.72.87.0/24 maxlen: 24
                          188.72.89.0/24 maxlen: 24
                          188.72.95.0/24 maxlen: 24
                          188.72.97.0/24 maxlen: 24
                          188.72.98.0/24 maxlen: 24
                          188.72.101.0/24 maxlen: 24
                          188.72.102.0/24 maxlen: 24
                          188.72.114.0/24 maxlen: 24
                          188.72.115.0/24 maxlen: 24
                          188.72.116.0/24 maxlen: 24
                          188.72.119.0/24 maxlen: 24
                          188.72.124.0/24 maxlen: 24
                          188.72.125.0/24 maxlen: 24
                          217.150.88.0/24 maxlen: 24
                          217.150.89.0/24 maxlen: 24
                          217.150.90.0/24 maxlen: 24
                          217.150.91.0/24 maxlen: 24
                          217.150.92.0/24 maxlen: 24
                          217.150.93.0/24 maxlen: 24
                          217.150.94.0/24 maxlen: 24
                          217.150.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:01:81:3f:ce:5c:14:fe:87:03:56:1c:93:33:7f:58:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Apr  4 15:52:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2606aa43e352f64a081c40aca06bd3daa6f79e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:74:41:00:8d:11:fd:1f:21:11:81:3e:7e:
                    88:1a:2d:21:a7:e7:49:72:b8:b0:0b:81:3a:38:fd:
                    b4:bd:c5:d8:4b:5a:7e:be:59:e5:d1:da:9e:6a:ed:
                    55:bf:02:a3:d0:51:b9:d6:cb:b8:39:6b:dc:b4:f7:
                    87:69:5d:a7:e6:72:68:c0:d1:2e:a2:82:02:41:db:
                    66:2b:0f:1a:1e:b0:f7:8a:e5:75:e6:15:21:da:b4:
                    57:a7:6f:d0:d2:d1:67:a0:9c:84:60:58:fe:44:7e:
                    1d:8d:47:57:38:33:77:2e:e1:b5:30:91:00:8b:0f:
                    ad:db:a8:d9:42:c5:39:f3:3b:5a:e5:43:ab:96:cb:
                    ba:12:cb:d5:42:b4:47:cb:43:3d:dc:95:54:70:ca:
                    3a:51:6e:f8:c2:be:60:2f:95:b7:22:a2:c3:fc:cf:
                    39:bf:47:2f:32:d1:50:ee:f8:89:68:86:01:da:22:
                    80:c8:79:90:8e:07:c5:19:8c:84:46:2d:64:4b:1b:
                    1e:d3:5a:ae:98:4c:af:06:c4:9a:c1:db:5c:11:8c:
                    2c:d3:0c:b1:c3:ae:a6:3b:a1:6c:c7:33:90:44:a1:
                    92:be:7d:bf:d1:81:c0:9e:d8:a5:43:4b:be:f7:42:
                    f4:88:16:94:a5:67:ea:00:11:0c:7d:c7:f5:a7:87:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:AA:43:E3:52:F6:4A:08:1C:40:AC:A0:6B:D3:DA:A6:F7:9E:20
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/JgaqQ-NS9koIHECsoGvT2qb3niA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.0.0/24
                  37.18.13.0/24
                  37.18.23.0/24
                  37.18.25.0/24
                  37.18.60.0/24
                  37.18.63.0/24
                  37.18.78.0/24
                  37.18.82.0/24
                  37.18.103.0/24
                  37.18.106.0/24
                  37.18.125.0-37.18.126.255
                  37.230.130.0/24
                  37.230.132.0/24
                  37.230.134.0/23
                  37.230.140.0/24
                  37.230.145.0/24
                  37.230.151.0/24
                  37.230.163.0/24
                  37.230.176.0-37.230.178.255
                  37.230.182.0/23
                  37.230.187.0/24
                  37.230.200.0/24
                  37.230.208.0/24
                  37.230.226.0/23
                  37.230.230.0/23
                  37.230.238.0/24
                  37.230.254.0/23
                  46.243.138.0-46.243.140.255
                  46.243.148.0-46.243.150.255
                  46.243.163.0/24
                  46.243.204.0/24
                  46.243.214.0/23
                  46.243.220.0-46.243.225.255
                  46.243.236.0-46.243.243.255
                  46.243.246.0-46.243.251.255
                  128.0.71.0/24
                  141.101.132.0-141.101.136.255
                  141.101.138.0/23
                  141.101.143.0-141.101.150.255
                  141.101.153.0-141.101.175.255
                  141.101.179.0/24
                  141.101.189.0-141.101.191.255
                  141.101.198.0/23
                  141.101.209.0/24
                  141.101.216.0/24
                  141.101.230.0/24
                  141.101.233.0/24
                  141.101.235.0/24
                  141.101.237.0-141.101.238.255
                  141.101.242.0/24
                  141.101.245.0/24
                  141.101.248.0/24
                  141.101.252.0/22
                  178.170.136.0-178.170.142.255
                  178.170.144.0-178.170.146.255
                  178.170.172.0/24
                  178.170.187.0-178.170.188.255
                  185.4.148.0/22
                  188.72.80.0/21
                  188.72.89.0/24
                  188.72.95.0/24
                  188.72.97.0-188.72.98.255
                  188.72.101.0-188.72.102.255
                  188.72.114.0-188.72.116.255
                  188.72.119.0/24
                  188.72.124.0/23
                  217.150.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:18:15:44:a5:f7:7e:4b:d1:10:b2:9c:24:a4:8c:84:24:3c:
         b1:a5:ab:45:29:4e:ff:7c:f8:21:7c:c0:e2:4b:62:67:76:c0:
         ae:17:aa:06:84:eb:a8:a3:5f:cf:0e:fd:ca:62:11:df:29:5d:
         74:ec:3f:44:78:f9:f6:78:14:cf:98:2e:84:12:e1:de:07:7c:
         40:a2:aa:a5:d3:17:66:ac:36:db:dd:ff:5b:1a:09:3d:2f:55:
         41:24:43:bc:df:26:37:76:92:ec:7a:0a:f8:48:8b:13:fd:5a:
         07:43:84:15:94:dc:59:19:3f:d4:d0:3c:22:8b:57:82:dc:56:
         8c:91:0f:6c:09:2a:61:ff:3e:94:99:43:95:7e:e8:4b:0a:c1:
         82:21:34:d0:42:db:da:7f:7d:88:a0:56:15:77:e1:19:ff:3e:
         11:49:54:71:6c:f7:78:84:a9:ab:a6:63:cb:f9:8e:d7:3a:a9:
         a9:b5:e4:c4:a3:ed:9f:51:a0:98:12:49:7f:2a:55:e6:81:ec:
         8e:9d:1b:c0:3c:89:1d:55:2e:6e:75:eb:ee:f0:0b:7c:ea:31:
         a5:8c:c1:1b:e5:c6:79:80:3f:06:cb:12:cf:a3:f2:e4:78:5a:
         ad:90:54:27:10:0e:d2:91:0f:4c:d1:03:28:20:a6:f2:34:14:
         02:62:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net