Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/t8qlVMW_ks9wmW3XoOLLvSU0V80.roa
File:                     t8qlVMW_ks9wmW3XoOLLvSU0V80.roa (raw, json)
Hash identifier:          QW65n6JVQG3F04FqT4DN9YcBcRRkc75Y0QxjJc5v2ls=
Subject key identifier:   B7:CA:A5:54:C5:BF:92:CF:70:99:6D:D7:A0:E2:CB:BD:25:34:57:CD
Certificate issuer:       /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial:       0190C55C8A08907D53D8507ADC503ECC0EA7
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/t8qlVMW_ks9wmW3XoOLLvSU0V80.roa
Signing time:             Thu 18 Jul 2024 10:21:34 +0000
ROA not before:           Thu 18 Jul 2024 10:21:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48728
IP address blocks:        31.11.48.0/21 maxlen: 21
                          37.186.32.0/19 maxlen: 19
                          37.186.32.0/24 maxlen: 24
                          37.186.33.0/24 maxlen: 24
                          37.186.34.0/24 maxlen: 24
                          37.186.35.0/24 maxlen: 24
                          37.186.36.0/24 maxlen: 24
                          37.186.37.0/24 maxlen: 24
                          37.186.38.0/24 maxlen: 24
                          37.186.39.0/24 maxlen: 24
                          37.186.40.0/24 maxlen: 24
                          37.186.41.0/24 maxlen: 24
                          37.186.42.0/24 maxlen: 24
                          37.186.43.0/24 maxlen: 24
                          37.186.44.0/24 maxlen: 24
                          37.186.45.0/24 maxlen: 24
                          37.186.46.0/24 maxlen: 24
                          37.186.47.0/24 maxlen: 24
                          37.186.48.0/24 maxlen: 24
                          37.186.49.0/24 maxlen: 24
                          37.186.50.0/24 maxlen: 24
                          37.186.51.0/24 maxlen: 24
                          37.186.52.0/24 maxlen: 24
                          37.186.53.0/24 maxlen: 24
                          37.186.54.0/24 maxlen: 24
                          37.186.55.0/24 maxlen: 24
                          37.186.56.0/24 maxlen: 24
                          37.186.57.0/24 maxlen: 24
                          37.186.58.0/24 maxlen: 24
                          37.186.59.0/24 maxlen: 24
                          37.186.60.0/24 maxlen: 24
                          37.186.61.0/24 maxlen: 24
                          37.186.62.0/24 maxlen: 24
                          37.186.63.0/24 maxlen: 24
                          80.76.160.0/20 maxlen: 20
                          80.76.160.0/21 maxlen: 21
                          80.76.160.0/24 maxlen: 24
                          80.76.161.0/24 maxlen: 24
                          80.76.162.0/24 maxlen: 24
                          80.76.163.0/24 maxlen: 24
                          80.76.164.0/24 maxlen: 24
                          80.76.165.0/24 maxlen: 24
                          80.76.168.0/21 maxlen: 21
                          80.76.170.0/24 maxlen: 24
                          80.76.171.0/24 maxlen: 24
                          80.76.172.0/24 maxlen: 24
                          80.76.173.0/24 maxlen: 24
                          80.76.174.0/24 maxlen: 24
                          80.76.175.0/24 maxlen: 24
                          103.17.0.0/22 maxlen: 22
                          103.17.0.0/24 maxlen: 24
                          103.17.1.0/24 maxlen: 24
                          103.17.2.0/24 maxlen: 24
                          103.17.3.0/24 maxlen: 24
                          103.23.124.0/22 maxlen: 22
                          103.23.124.0/24 maxlen: 24
                          103.23.125.0/24 maxlen: 24
                          103.23.126.0/24 maxlen: 24
                          103.23.127.0/24 maxlen: 24
                          103.199.88.0/22 maxlen: 22
                          103.199.88.0/24 maxlen: 24
                          103.199.89.0/24 maxlen: 24
                          103.199.90.0/24 maxlen: 24
                          103.199.91.0/24 maxlen: 24
                          103.225.72.0/22 maxlen: 22
                          103.225.72.0/24 maxlen: 24
                          103.225.73.0/24 maxlen: 24
                          103.225.74.0/24 maxlen: 24
                          103.225.75.0/24 maxlen: 24
                          185.247.88.0/22 maxlen: 22
                          212.70.96.0/19 maxlen: 19
                          212.70.96.0/24 maxlen: 24
                          212.70.97.0/24 maxlen: 24
                          212.70.98.0/24 maxlen: 24
                          212.70.99.0/24 maxlen: 24
                          212.70.102.0/24 maxlen: 24
                          212.70.104.0/24 maxlen: 24
                          212.70.106.0/24 maxlen: 24
                          212.70.107.0/24 maxlen: 24
                          212.70.108.0/24 maxlen: 24
                          212.70.109.0/24 maxlen: 24
                          212.70.110.0/24 maxlen: 24
                          212.70.111.0/24 maxlen: 24
                          212.70.112.0/24 maxlen: 24
                          212.70.113.0/24 maxlen: 24
                          212.70.114.0/24 maxlen: 24
                          212.70.115.0/24 maxlen: 24
                          212.70.116.0/24 maxlen: 24
                          212.70.117.0/24 maxlen: 24
                          212.70.118.0/24 maxlen: 24
                          212.70.119.0/24 maxlen: 24
                          212.70.122.0/24 maxlen: 24
                          212.70.125.0/24 maxlen: 24
                          212.70.126.0/24 maxlen: 24
                          212.70.127.0/24 maxlen: 24
                          2a04:7f80::/29 maxlen: 29
                          2a04:7f80::/48 maxlen: 48
                          2a04:7f80:0:a::/64 maxlen: 64
                          2a04:7f80:2::/48 maxlen: 48
                          2a04:7f80:3::/48 maxlen: 48
                          2a04:7f80:4::/48 maxlen: 48
                          2a04:7f80:5::/48 maxlen: 48
                          2a04:7f80:10::/48 maxlen: 48
                          2a04:7f80:11::/48 maxlen: 48
                          2a04:7f80:12::/48 maxlen: 48
                          2a04:7f80:13::/48 maxlen: 48
                          2a04:7f80:14::/48 maxlen: 48
                          2a04:7f80:15::/48 maxlen: 48
                          2a04:7f80:16::/48 maxlen: 48
                          2a04:7f80:17::/48 maxlen: 48
                          2a04:7f80:19::/48 maxlen: 48
                          2a04:7f80:1a::/48 maxlen: 48
                          2a04:7f80:1b::/48 maxlen: 48
                          2a04:7f80:1c::/48 maxlen: 48
                          2a04:7f80:1d::/48 maxlen: 48
                          2a04:7f80:1e::/48 maxlen: 48
                          2a04:7f80:1f::/48 maxlen: 48
                          2a04:7f80:20::/44 maxlen: 44
                          2a04:7f80:40::/45 maxlen: 45
                          2a04:7f80:48::/45 maxlen: 45
                          2a04:7f80:50::/48 maxlen: 48
                          2a04:7f80:51::/48 maxlen: 48
                          2a04:7f80:52::/48 maxlen: 48
                          2a04:7f80:53::/48 maxlen: 48
                          2a04:7f80:54::/48 maxlen: 48
                          2a04:7f80:55::/48 maxlen: 48
                          2a04:7f80:56::/48 maxlen: 48
                          2a04:7f80:57::/48 maxlen: 48
                          2a04:7f80:58::/48 maxlen: 48
                          2a04:7f80:5a::/48 maxlen: 48
                          2a04:7f80:5b::/48 maxlen: 48
                          2a04:7f80:5c::/48 maxlen: 48
                          2a04:7f80:5d::/48 maxlen: 48
                          2a04:7f80:5e::/48 maxlen: 48
                          2a04:7f80:5f::/48 maxlen: 48
                          2a04:7f80:84::/48 maxlen: 48
                          2a04:7f80:85::/48 maxlen: 48
                          2a04:7f80:90::/45 maxlen: 45
                          2a04:7f80:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c5:5c:8a:08:90:7d:53:d8:50:7a:dc:50:3e:cc:0e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
        Validity
            Not Before: Jul 18 10:21:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b7caa554c5bf92cf70996dd7a0e2cbbd253457cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:41:33:37:4e:e0:40:1f:23:35:1b:4d:86:
                    2e:92:05:d5:61:46:11:6f:cd:2e:4c:7b:a2:d6:60:
                    6d:30:9a:e7:b4:39:c4:5d:77:53:59:55:7e:28:1a:
                    0c:96:6e:ad:b9:dc:c3:fa:b1:4a:1a:b9:34:69:67:
                    b1:cf:90:e9:f0:df:2d:7f:55:85:5b:0d:87:7e:bd:
                    5c:ed:32:12:5b:df:8c:6a:f3:ae:fd:fe:e1:f9:68:
                    45:f2:3c:da:94:99:2c:07:66:c9:4a:26:5b:7d:e9:
                    c8:4b:62:8d:be:45:6b:d4:37:03:ed:20:de:56:dc:
                    31:dd:a6:7f:0d:58:c9:1b:59:51:b9:0e:f7:06:70:
                    59:4b:7f:92:1e:c5:0e:63:55:22:9e:89:d9:c3:d4:
                    04:ef:92:f9:6f:21:bf:16:b4:ab:11:6b:25:63:b3:
                    38:64:6b:fb:3d:05:52:26:49:ad:e7:f2:4a:d3:8b:
                    42:c1:26:4f:dc:ce:c6:8d:fa:71:07:4a:d2:30:f3:
                    61:23:ae:48:c4:55:b5:d8:93:18:e8:90:7e:3d:76:
                    30:73:43:72:7b:24:39:19:a5:24:34:03:62:3a:49:
                    aa:f1:85:6b:5d:56:ad:25:46:b2:b3:cf:09:ae:1e:
                    f0:8c:22:26:9a:78:58:ba:bc:e7:46:e3:d3:4f:e4:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CA:A5:54:C5:BF:92:CF:70:99:6D:D7:A0:E2:CB:BD:25:34:57:CD
            X509v3 Authority Key Identifier:
                keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/t8qlVMW_ks9wmW3XoOLLvSU0V80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.11.48.0/21
                  37.186.32.0/19
                  80.76.160.0/20
                  103.17.0.0/22
                  103.23.124.0/22
                  103.199.88.0/22
                  103.225.72.0/22
                  185.247.88.0/22
                  212.70.96.0/19
                IPv6:
                  2a04:7f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:38:3a:2c:be:51:f8:8b:16:ea:99:db:68:56:89:8d:62:
         42:dc:88:dd:ec:1e:39:91:c7:11:7c:de:83:29:75:4d:a6:00:
         93:08:1c:ee:05:de:03:38:e3:f8:23:66:f3:bc:d7:f8:74:34:
         c1:92:3a:68:ec:ff:38:37:af:34:b3:94:e7:99:85:00:19:8a:
         9c:0f:3a:41:5a:25:c6:a4:60:c1:62:e2:fd:f9:dc:32:76:a7:
         ea:c1:84:32:7f:9f:02:ad:32:c5:08:6a:da:8d:a3:38:2b:19:
         d7:f6:0e:fd:59:eb:6e:24:f2:89:5c:78:57:53:3c:43:b0:32:
         48:2b:79:95:5a:a3:87:b6:d3:cc:33:7e:4f:b7:fb:ed:f8:cb:
         74:14:d6:f4:38:a8:11:bf:8b:a9:e2:32:9e:b1:f7:68:97:ac:
         07:10:3e:cd:2a:32:93:49:f7:44:38:6a:4d:8f:18:6a:2c:23:
         0f:d4:08:9d:92:62:4f:1c:c3:3a:0c:60:95:24:f8:4e:b9:e7:
         86:f4:13:c7:56:4f:3a:85:fa:ca:6f:dd:e0:34:dd:88:54:37:
         d6:29:ea:bc:c3:80:b4:52:25:17:66:d9:f0:25:2c:be:9e:35:
         6f:e4:cd:0b:94:65:3c:8d:7f:35:ad:10:4d:14:5f:5e:da:3c:
         91:fb:f8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 00:59:46 2024 by rpki-client on console.sobornost.net