Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/HwFikFGPf20TfO0li6KCLpXNms8.roa
File:                     HwFikFGPf20TfO0li6KCLpXNms8.roa (raw, json)
Hash identifier:          2hqYzDeEmlKupz0bra9SwG3yUhI9Cc7JpMv9pWaoEao=
Subject key identifier:   1F:01:62:90:51:8F:7F:6D:13:7C:ED:25:8B:A2:82:2E:95:CD:9A:CF
Certificate issuer:       /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial:       0193783C7B62EEF0533A50F8BAE52AC03473
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/HwFikFGPf20TfO0li6KCLpXNms8.roa
Signing time:             Fri 29 Nov 2024 14:04:09 +0000
ROA not before:           Fri 29 Nov 2024 14:04:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8400
IP address blocks:        5.154.225.0/24 maxlen: 24
                          31.14.33.0/24 maxlen: 24
                          37.153.174.0/24 maxlen: 24
                          37.153.175.0/24 maxlen: 24
                          46.17.120.0/21 maxlen: 21
                          46.235.96.0/21 maxlen: 21
                          62.101.128.0/20 maxlen: 20
                          62.240.24.0/21 maxlen: 21
                          77.46.128.0/17 maxlen: 17
                          79.101.0.0/16 maxlen: 16
                          79.101.0.0/21 maxlen: 21
                          79.101.21.0/24 maxlen: 24
                          87.250.32.0/19 maxlen: 19
                          89.34.2.0/24 maxlen: 24
                          89.39.144.0/23 maxlen: 23
                          89.42.12.0/24 maxlen: 24
                          89.46.126.0/23 maxlen: 23
                          89.47.40.0/23 maxlen: 23
                          91.150.64.0/18 maxlen: 18
                          91.150.64.0/23 maxlen: 23
                          91.150.66.0/24 maxlen: 24
                          91.150.91.0/24 maxlen: 24
                          92.60.224.0/24 maxlen: 24
                          92.60.225.0/24 maxlen: 24
                          92.60.226.0/24 maxlen: 24
                          92.60.227.0/24 maxlen: 24
                          92.60.228.0/24 maxlen: 24
                          92.60.229.0/24 maxlen: 24
                          92.60.230.0/24 maxlen: 24
                          92.60.231.0/24 maxlen: 24
                          92.60.232.0/24 maxlen: 24
                          92.60.233.0/24 maxlen: 24
                          92.60.234.0/23 maxlen: 23
                          92.60.236.0/24 maxlen: 24
                          92.60.237.0/24 maxlen: 24
                          92.60.238.0/24 maxlen: 24
                          92.60.239.0/24 maxlen: 24
                          92.244.128.0/19 maxlen: 19
                          93.86.0.0/15 maxlen: 15
                          93.86.0.0/16 maxlen: 16
                          93.87.0.0/16 maxlen: 16
                          93.87.38.0/24 maxlen: 24
                          93.87.39.0/24 maxlen: 24
                          93.87.50.0/24 maxlen: 24
                          93.87.58.0/24 maxlen: 24
                          93.113.250.0/23 maxlen: 23
                          94.228.224.0/22 maxlen: 22
                          94.228.229.0/24 maxlen: 24
                          94.228.230.0/24 maxlen: 24
                          94.228.231.0/24 maxlen: 24
                          94.228.232.0/23 maxlen: 23
                          94.228.234.0/24 maxlen: 24
                          94.228.235.0/24 maxlen: 24
                          94.228.236.0/24 maxlen: 24
                          94.228.237.0/24 maxlen: 24
                          94.228.238.0/23 maxlen: 23
                          109.72.48.0/20 maxlen: 20
                          109.92.0.0/15 maxlen: 15
                          109.94.228.0/22 maxlen: 22
                          109.94.232.0/21 maxlen: 21
                          109.122.64.0/18 maxlen: 24
                          109.122.77.0/24 maxlen: 24
                          109.198.0.0/19 maxlen: 19
                          176.67.192.0/21 maxlen: 21
                          176.67.200.0/23 maxlen: 23
                          176.67.202.0/23 maxlen: 23
                          176.67.204.0/24 maxlen: 24
                          176.67.205.0/24 maxlen: 24
                          176.67.206.0/23 maxlen: 23
                          176.67.208.0/23 maxlen: 23
                          176.67.210.0/24 maxlen: 24
                          176.67.211.0/24 maxlen: 24
                          176.67.212.0/23 maxlen: 23
                          176.67.214.0/24 maxlen: 24
                          176.67.215.0/24 maxlen: 24
                          176.67.216.0/24 maxlen: 24
                          176.67.217.0/24 maxlen: 24
                          176.67.218.0/24 maxlen: 24
                          176.67.219.0/24 maxlen: 24
                          176.67.220.0/24 maxlen: 24
                          176.67.221.0/24 maxlen: 24
                          176.67.222.0/24 maxlen: 24
                          176.67.223.0/24 maxlen: 24
                          178.17.16.0/21 maxlen: 21
                          178.17.24.0/22 maxlen: 22
                          178.17.28.0/23 maxlen: 23
                          178.17.30.0/24 maxlen: 24
                          178.17.31.0/24 maxlen: 24
                          178.79.0.0/18 maxlen: 18
                          178.79.16.0/23 maxlen: 23
                          178.220.0.0/15 maxlen: 15
                          178.222.0.0/16 maxlen: 16
                          178.223.0.0/17 maxlen: 17
                          178.223.128.0/18 maxlen: 18
                          178.223.192.0/19 maxlen: 19
                          178.237.208.0/20 maxlen: 20
                          178.250.136.0/21 maxlen: 21
                          185.10.140.0/22 maxlen: 22
                          185.26.172.0/22 maxlen: 22
                          185.27.128.0/24 maxlen: 24
                          185.27.129.0/24 maxlen: 24
                          185.27.130.0/23 maxlen: 23
                          185.34.92.0/22 maxlen: 22
                          185.36.255.0/24 maxlen: 24
                          185.71.88.0/22 maxlen: 22
                          185.103.136.0/22 maxlen: 22
                          185.112.20.0/22 maxlen: 22
                          185.157.104.0/22 maxlen: 22
                          185.179.136.0/22 maxlen: 22
                          185.190.152.0/22 maxlen: 22
                          188.215.30.0/24 maxlen: 24
                          188.240.88.0/24 maxlen: 24
                          188.240.200.0/24 maxlen: 24
                          188.240.201.0/24 maxlen: 24
                          195.178.32.0/19 maxlen: 19
                          212.62.59.0/24 maxlen: 24
                          212.200.0.0/16 maxlen: 16
                          212.200.0.0/17 maxlen: 17
                          212.200.0.0/21 maxlen: 21
                          212.200.8.0/22 maxlen: 22
                          212.200.12.0/23 maxlen: 23
                          212.200.45.0/24 maxlen: 24
                          212.200.50.0/24 maxlen: 24
                          212.200.51.0/24 maxlen: 24
                          212.200.52.0/24 maxlen: 24
                          212.200.123.0/24 maxlen: 24
                          212.200.128.0/17 maxlen: 17
                          212.200.128.0/18 maxlen: 18
                          212.200.132.0/24 maxlen: 24
                          212.200.192.0/19 maxlen: 19
                          212.200.224.0/24 maxlen: 24
                          212.200.225.0/24 maxlen: 24
                          212.200.226.0/23 maxlen: 23
                          212.200.228.0/22 maxlen: 22
                          212.200.232.0/21 maxlen: 21
                          212.200.240.0/20 maxlen: 20
                          213.196.96.0/20 maxlen: 20
                          2a00:e90::/32 maxlen: 32
                          2a00:8720::/32 maxlen: 32
                          2a01:b800::/32 maxlen: 32
                          2a02:61a0::/32 maxlen: 32
                          2a03:fc40::/32 maxlen: 32
                          2a04:1dc0::/29 maxlen: 29
                          2a06:5b00::/29 maxlen: 29
                          2a06:63c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:78:3c:7b:62:ee:f0:53:3a:50:f8:ba:e5:2a:c0:34:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
        Validity
            Not Before: Nov 29 14:04:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f016290518f7f6d137ced258ba2822e95cd9acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:f7:e9:1a:83:88:8c:15:46:01:3a:26:14:
                    06:b2:89:43:41:b9:73:f8:6d:af:28:5d:63:45:22:
                    9c:5b:58:b8:df:c8:01:4a:4a:a9:8c:02:5a:2b:dc:
                    82:46:fd:f9:cb:65:4b:61:6e:6a:48:c5:25:19:47:
                    e9:53:b9:e5:33:d1:59:ce:28:7a:83:0b:68:8e:44:
                    ad:41:2e:a9:a6:20:4a:5e:c1:d7:58:1e:a5:c4:c4:
                    fc:79:63:d3:a0:b2:c8:8a:0a:65:41:da:a0:75:e6:
                    f3:9b:a8:ca:1a:37:9a:70:c5:03:0c:25:48:8a:9e:
                    30:5c:5a:3b:6e:cc:f7:22:43:8e:3f:fc:1d:f8:4b:
                    59:7a:ef:40:24:07:f0:f2:8d:82:2d:cd:f0:26:17:
                    f6:f5:3c:1b:29:0e:e9:ab:03:46:a8:f6:f2:06:40:
                    51:ee:d4:12:20:01:7a:49:2d:e0:d2:9b:3e:e8:33:
                    52:2f:0a:a8:48:ab:89:08:7b:d8:ff:22:6f:22:8f:
                    25:69:5e:d4:67:d1:28:27:02:f5:6b:94:a0:69:71:
                    d2:2f:30:4e:6e:22:7f:3e:38:7e:03:8b:36:55:e8:
                    60:db:f8:ef:03:aa:5b:45:7f:3f:47:cb:45:9b:62:
                    a8:d3:50:54:ec:9f:a8:f8:82:3f:49:7a:39:a5:cd:
                    51:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:01:62:90:51:8F:7F:6D:13:7C:ED:25:8B:A2:82:2E:95:CD:9A:CF
            X509v3 Authority Key Identifier:
                keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/HwFikFGPf20TfO0li6KCLpXNms8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.154.225.0/24
                  31.14.33.0/24
                  37.153.174.0/23
                  46.17.120.0/21
                  46.235.96.0/21
                  62.101.128.0/20
                  62.240.24.0/21
                  77.46.128.0/17
                  79.101.0.0/16
                  87.250.32.0/19
                  89.34.2.0/24
                  89.39.144.0/23
                  89.42.12.0/24
                  89.46.126.0/23
                  89.47.40.0/23
                  91.150.64.0/18
                  92.60.224.0/20
                  92.244.128.0/19
                  93.86.0.0/15
                  93.113.250.0/23
                  94.228.224.0/22
                  94.228.229.0-94.228.239.255
                  109.72.48.0/20
                  109.92.0.0/15
                  109.94.228.0-109.94.239.255
                  109.122.64.0/18
                  109.198.0.0/19
                  176.67.192.0/19
                  178.17.16.0/20
                  178.79.0.0/18
                  178.220.0.0-178.223.223.255
                  178.237.208.0/20
                  178.250.136.0/21
                  185.10.140.0/22
                  185.26.172.0/22
                  185.27.128.0/22
                  185.34.92.0/22
                  185.36.255.0/24
                  185.71.88.0/22
                  185.103.136.0/22
                  185.112.20.0/22
                  185.157.104.0/22
                  185.179.136.0/22
                  185.190.152.0/22
                  188.215.30.0/24
                  188.240.88.0/24
                  188.240.200.0/23
                  195.178.32.0/19
                  212.62.59.0/24
                  212.200.0.0/16
                  213.196.96.0/20
                IPv6:
                  2a00:e90::/32
                  2a00:8720::/32
                  2a01:b800::/32
                  2a02:61a0::/32
                  2a03:fc40::/32
                  2a04:1dc0::/29
                  2a06:5b00::/29
                  2a06:63c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:7c:82:24:0a:00:45:22:79:3b:7b:dd:7b:b9:59:b6:84:
         33:ec:7c:6a:e9:c4:5e:8c:02:44:91:9e:fc:30:fb:dd:ee:57:
         11:3b:26:a4:63:4e:16:6b:99:06:9a:40:bd:d9:be:1d:bc:b9:
         c5:a4:f6:ec:45:3a:f5:ff:91:9d:fe:f4:d2:dd:b5:7f:25:d5:
         bf:fb:6e:e8:03:03:32:b7:ee:50:30:ac:6d:13:3c:3d:a5:ec:
         90:99:3a:a1:a2:07:32:5b:05:d8:a6:62:99:33:b6:0f:d2:95:
         e4:47:79:7e:fc:0d:68:40:36:80:5c:87:c9:40:23:12:61:80:
         e8:03:32:08:c4:6a:ae:bf:32:e0:6c:cf:10:31:3c:66:83:53:
         ac:87:a4:34:19:4a:27:b4:20:4a:96:46:26:86:af:9c:9e:91:
         9f:5e:0e:f2:11:18:e4:26:b4:9e:ff:97:be:26:0b:52:33:ba:
         67:15:60:e3:74:5e:e0:2d:70:56:97:8d:4a:2f:7b:8e:98:da:
         e6:50:0f:f5:b4:c6:28:e6:7b:cb:ac:23:e7:83:cb:40:18:36:
         6f:9b:86:c5:ca:5e:71:7b:4d:8c:55:18:34:14:b0:68:3a:8c:
         43:40:63:45:6d:a4:7c:a9:75:cc:a6:75:0e:27:0f:da:90:95:
         fd:e1:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:08 2024 by rpki-client on console.sobornost.net