Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/2OdmaYEvc7fjlifhcWBDwti_ipU.roa
File:                     2OdmaYEvc7fjlifhcWBDwti_ipU.roa (raw, json)
Hash identifier:          YLzPGMXWOPD8j80ycMKQQZ0g+/IWPzu/Lbj5oQEUX+M=
Subject key identifier:   D8:E7:66:69:81:2F:73:B7:E3:96:27:E1:71:60:43:C2:D8:BF:8A:95
Certificate issuer:       /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial:       0193F77DED114803F64E42C36B70C4E463A2
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/2OdmaYEvc7fjlifhcWBDwti_ipU.roa
Signing time:             Tue 24 Dec 2024 07:07:25 +0000
ROA not before:           Tue 24 Dec 2024 07:07:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216071
IP address blocks:        46.149.72.0/24 maxlen: 24
                          46.149.73.0/24 maxlen: 24
                          46.149.74.0/24 maxlen: 24
                          46.149.75.0/24 maxlen: 24
                          46.149.76.0/24 maxlen: 24
                          46.149.77.0/24 maxlen: 24
                          46.149.78.0/24 maxlen: 24
                          46.149.79.0/24 maxlen: 24
                          46.151.24.0/24 maxlen: 24
                          46.151.25.0/24 maxlen: 24
                          46.151.26.0/24 maxlen: 24
                          46.151.27.0/24 maxlen: 24
                          46.151.28.0/24 maxlen: 24
                          46.151.29.0/24 maxlen: 24
                          46.151.30.0/24 maxlen: 24
                          46.151.31.0/24 maxlen: 24
                          62.84.96.0/24 maxlen: 24
                          62.84.97.0/24 maxlen: 24
                          62.84.98.0/24 maxlen: 24
                          62.84.99.0/24 maxlen: 24
                          62.84.100.0/24 maxlen: 24
                          62.84.101.0/24 maxlen: 24
                          62.84.102.0/24 maxlen: 24
                          62.84.103.0/24 maxlen: 24
                          77.238.224.0/24 maxlen: 24
                          77.238.225.0/24 maxlen: 24
                          77.238.226.0/24 maxlen: 24
                          77.238.227.0/24 maxlen: 24
                          77.238.228.0/24 maxlen: 24
                          77.238.229.0/24 maxlen: 24
                          77.238.230.0/24 maxlen: 24
                          77.238.231.0/24 maxlen: 24
                          77.238.232.0/24 maxlen: 24
                          77.238.233.0/24 maxlen: 24
                          77.238.234.0/24 maxlen: 24
                          77.238.235.0/24 maxlen: 24
                          77.238.236.0/24 maxlen: 24
                          77.238.237.0/24 maxlen: 24
                          77.238.238.0/24 maxlen: 24
                          77.238.239.0/24 maxlen: 24
                          77.238.240.0/24 maxlen: 24
                          77.238.241.0/24 maxlen: 24
                          77.238.242.0/24 maxlen: 24
                          77.238.243.0/24 maxlen: 24
                          77.238.244.0/24 maxlen: 24
                          77.238.245.0/24 maxlen: 24
                          77.238.246.0/24 maxlen: 24
                          77.238.247.0/24 maxlen: 24
                          77.238.248.0/24 maxlen: 24
                          77.238.249.0/24 maxlen: 24
                          77.238.250.0/24 maxlen: 24
                          77.238.251.0/24 maxlen: 24
                          77.238.252.0/24 maxlen: 24
                          77.238.253.0/24 maxlen: 24
                          77.238.254.0/24 maxlen: 24
                          77.238.255.0/24 maxlen: 24
                          80.85.244.0/24 maxlen: 24
                          80.85.245.0/24 maxlen: 24
                          80.85.246.0/24 maxlen: 24
                          80.85.247.0/24 maxlen: 24
                          88.210.3.0/24 maxlen: 24
                          88.210.6.0/24 maxlen: 24
                          88.210.9.0/24 maxlen: 24
                          88.210.10.0/24 maxlen: 24
                          88.210.11.0/24 maxlen: 24
                          88.210.12.0/24 maxlen: 24
                          88.210.13.0/24 maxlen: 24
                          88.210.14.0/24 maxlen: 24
                          91.84.96.0/24 maxlen: 24
                          91.84.97.0/24 maxlen: 24
                          91.84.98.0/24 maxlen: 24
                          91.84.99.0/24 maxlen: 24
                          91.84.100.0/24 maxlen: 24
                          91.84.101.0/24 maxlen: 24
                          91.84.102.0/24 maxlen: 24
                          91.84.103.0/24 maxlen: 24
                          91.84.104.0/24 maxlen: 24
                          91.84.105.0/24 maxlen: 24
                          91.84.106.0/24 maxlen: 24
                          91.84.107.0/24 maxlen: 24
                          91.84.108.0/24 maxlen: 24
                          91.84.109.0/24 maxlen: 24
                          91.84.110.0/24 maxlen: 24
                          91.84.111.0/24 maxlen: 24
                          91.84.112.0/24 maxlen: 24
                          91.84.113.0/24 maxlen: 24
                          91.84.114.0/24 maxlen: 24
                          91.84.115.0/24 maxlen: 24
                          91.84.116.0/24 maxlen: 24
                          91.84.117.0/24 maxlen: 24
                          91.84.118.0/24 maxlen: 24
                          91.84.119.0/24 maxlen: 24
                          91.84.120.0/24 maxlen: 24
                          91.84.121.0/24 maxlen: 24
                          91.84.122.0/24 maxlen: 24
                          91.84.123.0/24 maxlen: 24
                          91.84.124.0/24 maxlen: 24
                          91.84.125.0/24 maxlen: 24
                          91.84.126.0/24 maxlen: 24
                          91.84.127.0/24 maxlen: 24
                          91.201.112.0/24 maxlen: 24
                          91.201.113.0/24 maxlen: 24
                          91.201.114.0/24 maxlen: 24
                          91.201.115.0/24 maxlen: 24
                          91.246.41.0/24 maxlen: 24
                          93.183.124.0/24 maxlen: 24
                          93.183.125.0/24 maxlen: 24
                          93.183.126.0/24 maxlen: 24
                          93.183.127.0/24 maxlen: 24
                          94.103.80.0/24 maxlen: 24
                          94.103.81.0/24 maxlen: 24
                          94.103.82.0/24 maxlen: 24
                          94.103.94.0/24 maxlen: 24
                          94.103.95.0/24 maxlen: 24
                          109.234.33.0/24 maxlen: 24
                          109.234.34.0/24 maxlen: 24
                          109.234.35.0/24 maxlen: 24
                          109.234.36.0/24 maxlen: 24
                          109.234.37.0/24 maxlen: 24
                          109.234.38.0/24 maxlen: 24
                          109.234.39.0/24 maxlen: 24
                          185.21.12.0/24 maxlen: 24
                          185.21.13.0/24 maxlen: 24
                          185.21.14.0/24 maxlen: 24
                          185.21.15.0/24 maxlen: 24
                          185.121.232.0/24 maxlen: 24
                          185.121.233.0/24 maxlen: 24
                          185.121.234.0/24 maxlen: 24
                          185.121.235.0/24 maxlen: 24
                          185.157.212.0/24 maxlen: 24
                          185.157.213.0/24 maxlen: 24
                          185.157.214.0/24 maxlen: 24
                          185.157.215.0/24 maxlen: 24
                          185.245.104.0/24 maxlen: 24
                          185.245.105.0/24 maxlen: 24
                          185.245.106.0/24 maxlen: 24
                          185.245.107.0/24 maxlen: 24
                          193.33.194.0/24 maxlen: 24
                          193.33.195.0/24 maxlen: 24
                          193.178.169.0/24 maxlen: 24
                          193.178.172.0/24 maxlen: 24
                          193.178.174.0/24 maxlen: 24
                          194.164.32.0/24 maxlen: 24
                          194.164.33.0/24 maxlen: 24
                          194.164.34.0/24 maxlen: 24
                          194.164.35.0/24 maxlen: 24
                          195.2.86.0/24 maxlen: 24
                          195.2.92.0/24 maxlen: 24
                          195.2.93.0/24 maxlen: 24
                          195.26.224.0/24 maxlen: 24
                          195.26.225.0/24 maxlen: 24
                          195.26.226.0/24 maxlen: 24
                          195.26.227.0/24 maxlen: 24
                          195.200.16.0/24 maxlen: 24
                          195.200.17.0/24 maxlen: 24
                          195.200.18.0/24 maxlen: 24
                          195.200.19.0/24 maxlen: 24
                          195.200.26.0/24 maxlen: 24
                          195.200.28.0/24 maxlen: 24
                          195.200.29.0/24 maxlen: 24
                          195.200.30.0/24 maxlen: 24
                          195.200.31.0/24 maxlen: 24
                          212.34.128.0/24 maxlen: 24
                          212.34.129.0/24 maxlen: 24
                          212.34.130.0/24 maxlen: 24
                          212.34.131.0/24 maxlen: 24
                          212.34.132.0/24 maxlen: 24
                          212.34.133.0/24 maxlen: 24
                          212.34.134.0/24 maxlen: 24
                          212.34.135.0/24 maxlen: 24
                          212.34.136.0/24 maxlen: 24
                          212.34.137.0/24 maxlen: 24
                          212.34.138.0/24 maxlen: 24
                          212.34.139.0/24 maxlen: 24
                          212.34.140.0/24 maxlen: 24
                          212.34.141.0/24 maxlen: 24
                          212.34.142.0/24 maxlen: 24
                          212.34.143.0/24 maxlen: 24
                          212.34.144.0/24 maxlen: 24
                          212.34.145.0/24 maxlen: 24
                          212.34.146.0/24 maxlen: 24
                          212.34.147.0/24 maxlen: 24
                          212.34.148.0/24 maxlen: 24
                          212.34.149.0/24 maxlen: 24
                          212.34.150.0/24 maxlen: 24
                          212.34.151.0/24 maxlen: 24
                          212.34.152.0/24 maxlen: 24
                          212.34.153.0/24 maxlen: 24
                          212.34.154.0/24 maxlen: 24
                          212.34.155.0/24 maxlen: 24
                          212.118.36.0/24 maxlen: 24
                          212.118.37.0/24 maxlen: 24
                          212.118.38.0/24 maxlen: 24
                          212.118.39.0/24 maxlen: 24
                          212.118.40.0/24 maxlen: 24
                          212.118.41.0/24 maxlen: 24
                          212.118.42.0/24 maxlen: 24
                          212.118.43.0/24 maxlen: 24
                          212.118.52.0/24 maxlen: 24
                          212.118.53.0/24 maxlen: 24
                          212.118.54.0/24 maxlen: 24
                          212.118.55.0/24 maxlen: 24
                          2a06:7740::/48 maxlen: 48
                          2a0d:8480:1::/48 maxlen: 48
                          2a0d:8480:3::/48 maxlen: 48
                          2a14:1e00:1::/48 maxlen: 48
                          2a14:1e00:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f7:7d:ed:11:48:03:f6:4e:42:c3:6b:70:c4:e4:63:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
        Validity
            Not Before: Dec 24 07:07:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d8e76669812f73b7e39627e1716043c2d8bf8a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:87:03:5a:f3:cb:20:9f:78:50:b6:b3:a2:
                    c2:3e:26:02:db:07:f7:1e:63:9f:eb:65:d1:fd:34:
                    22:95:e7:bb:80:aa:43:cf:93:2e:63:86:52:9a:8c:
                    8d:04:68:17:52:bf:4b:d6:ec:04:23:67:91:e7:15:
                    75:98:0e:f3:69:09:48:f4:69:d6:dd:39:a8:bd:f5:
                    55:8a:40:ba:39:47:73:f7:ff:b9:cb:96:0d:45:97:
                    31:e2:5c:04:ae:76:a4:7a:3a:66:cf:37:f1:7e:88:
                    24:b0:a0:4a:f6:26:50:da:b5:e9:64:19:cd:dc:a0:
                    81:23:f5:dc:28:fe:39:c6:57:21:29:0b:c6:a6:89:
                    6a:2c:0d:07:43:cf:7d:b0:e4:02:ad:f1:92:16:f6:
                    f5:2c:15:2d:35:ca:eb:b5:b4:79:49:6c:3a:4d:08:
                    26:42:6a:0d:84:6d:7b:f4:92:47:0e:e8:85:a7:41:
                    85:72:72:3e:73:a3:83:58:8f:b9:c8:1e:b2:a8:a9:
                    8a:df:d5:b5:e5:b8:10:3d:7c:0d:2b:93:58:96:57:
                    8d:48:ce:01:ca:b8:73:49:20:8e:e2:77:7e:3f:1e:
                    a6:d5:c2:7b:9b:96:09:33:1e:8c:26:45:27:6f:a8:
                    c7:57:86:51:ef:db:e1:84:d8:26:50:8d:7c:7f:3e:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E7:66:69:81:2F:73:B7:E3:96:27:E1:71:60:43:C2:D8:BF:8A:95
            X509v3 Authority Key Identifier:
                keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/2OdmaYEvc7fjlifhcWBDwti_ipU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.149.72.0/21
                  46.151.24.0/21
                  62.84.96.0/21
                  77.238.224.0/19
                  80.85.244.0/22
                  88.210.3.0/24
                  88.210.6.0/24
                  88.210.9.0-88.210.14.255
                  91.84.96.0/19
                  91.201.112.0/22
                  91.246.41.0/24
                  93.183.124.0/22
                  94.103.80.0-94.103.82.255
                  94.103.94.0/23
                  109.234.33.0-109.234.39.255
                  185.21.12.0/22
                  185.121.232.0/22
                  185.157.212.0/22
                  185.245.104.0/22
                  193.33.194.0/23
                  193.178.169.0/24
                  193.178.172.0/24
                  193.178.174.0/24
                  194.164.32.0/22
                  195.2.86.0/24
                  195.2.92.0/23
                  195.26.224.0/22
                  195.200.16.0/22
                  195.200.26.0/24
                  195.200.28.0/22
                  212.34.128.0-212.34.155.255
                  212.118.36.0-212.118.43.255
                  212.118.52.0/22
                IPv6:
                  2a06:7740::/48
                  2a0d:8480:1::/48
                  2a0d:8480:3::/48
                  2a14:1e00:1::-2a14:1e00:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         6d:f8:79:1a:77:1e:ec:2d:6a:90:c2:f5:6d:35:2d:08:a2:64:
         90:45:d9:56:84:f3:4b:c9:65:a0:94:b5:06:ea:16:07:31:1e:
         f8:f6:d5:17:d8:20:82:80:5c:20:30:67:66:97:95:c5:83:18:
         eb:54:8c:b1:a9:33:7a:df:ab:13:26:2d:ba:35:2f:5f:a9:cd:
         e6:47:1b:e7:c2:0d:49:a8:fd:b6:d0:aa:27:22:5a:47:f0:3f:
         a1:6b:33:ed:56:cc:82:28:21:54:0a:2a:af:af:f4:09:80:68:
         e7:d4:0f:16:ff:4d:8f:d8:e7:1f:92:d5:12:a5:c3:95:7c:af:
         e0:d8:01:92:bb:f4:e0:31:ab:e8:56:e0:84:58:50:0b:71:2a:
         d6:0e:25:d3:e6:40:8a:e7:53:1d:38:34:65:92:de:d8:90:1e:
         af:c2:86:c1:e1:a8:95:df:11:3f:66:a6:ac:bb:c0:52:28:9b:
         9e:18:c1:06:c5:4c:66:8f:d0:b0:38:95:ed:21:0f:36:97:e3:
         c2:12:33:59:9f:2c:47:4b:11:0a:17:96:43:c0:64:1b:d6:20:
         02:cc:51:42:5e:8e:c2:f0:cb:ce:15:1c:d7:d7:ac:24:3f:55:
         d1:bd:96:2a:0b:8f:7d:f5:6f:94:d5:e1:c7:00:98:36:10:fc:
         85:eb:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:25 2024 by rpki-client on console.sobornost.net