Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/Q4TQx4abfh7mlTHNx5C20MAc8no.roa
File:                     Q4TQx4abfh7mlTHNx5C20MAc8no.roa (raw, json)
Hash identifier:          ODv086KPtgMJOyXf62+GmDACB33nTUPTCL9iCjnZz88=
Subject key identifier:   43:84:D0:C7:86:9B:7E:1E:E6:95:31:CD:C7:90:B6:D0:C0:1C:F2:7A
Certificate issuer:       /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial:       019323FE5216EA5C3A0787A9FAA350B083C8
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/Q4TQx4abfh7mlTHNx5C20MAc8no.roa
Signing time:             Wed 13 Nov 2024 05:28:09 +0000
ROA not before:           Wed 13 Nov 2024 05:28:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216071
IP address blocks:        46.151.24.0/24 maxlen: 24
                          46.151.25.0/24 maxlen: 24
                          46.151.26.0/24 maxlen: 24
                          46.151.27.0/24 maxlen: 24
                          46.151.28.0/24 maxlen: 24
                          46.151.29.0/24 maxlen: 24
                          46.151.30.0/24 maxlen: 24
                          46.151.31.0/24 maxlen: 24
                          77.238.224.0/24 maxlen: 24
                          77.238.225.0/24 maxlen: 24
                          77.238.226.0/24 maxlen: 24
                          77.238.227.0/24 maxlen: 24
                          77.238.228.0/24 maxlen: 24
                          77.238.229.0/24 maxlen: 24
                          77.238.230.0/24 maxlen: 24
                          77.238.231.0/24 maxlen: 24
                          77.238.232.0/24 maxlen: 24
                          77.238.233.0/24 maxlen: 24
                          77.238.234.0/24 maxlen: 24
                          77.238.235.0/24 maxlen: 24
                          77.238.236.0/24 maxlen: 24
                          77.238.237.0/24 maxlen: 24
                          77.238.238.0/24 maxlen: 24
                          77.238.239.0/24 maxlen: 24
                          77.238.240.0/24 maxlen: 24
                          77.238.241.0/24 maxlen: 24
                          77.238.242.0/24 maxlen: 24
                          77.238.243.0/24 maxlen: 24
                          77.238.244.0/24 maxlen: 24
                          77.238.245.0/24 maxlen: 24
                          77.238.246.0/24 maxlen: 24
                          77.238.247.0/24 maxlen: 24
                          77.238.248.0/24 maxlen: 24
                          77.238.249.0/24 maxlen: 24
                          77.238.250.0/24 maxlen: 24
                          77.238.251.0/24 maxlen: 24
                          77.238.252.0/24 maxlen: 24
                          77.238.253.0/24 maxlen: 24
                          77.238.254.0/24 maxlen: 24
                          77.238.255.0/24 maxlen: 24
                          80.85.244.0/24 maxlen: 24
                          80.85.245.0/24 maxlen: 24
                          80.85.246.0/24 maxlen: 24
                          80.85.247.0/24 maxlen: 24
                          88.210.3.0/24 maxlen: 24
                          88.210.6.0/24 maxlen: 24
                          88.210.9.0/24 maxlen: 24
                          88.210.10.0/24 maxlen: 24
                          88.210.11.0/24 maxlen: 24
                          88.210.12.0/24 maxlen: 24
                          88.210.13.0/24 maxlen: 24
                          88.210.14.0/24 maxlen: 24
                          91.201.112.0/24 maxlen: 24
                          91.201.113.0/24 maxlen: 24
                          91.201.114.0/24 maxlen: 24
                          91.201.115.0/24 maxlen: 24
                          91.246.41.0/24 maxlen: 24
                          93.183.124.0/24 maxlen: 24
                          93.183.125.0/24 maxlen: 24
                          93.183.126.0/24 maxlen: 24
                          93.183.127.0/24 maxlen: 24
                          94.103.80.0/24 maxlen: 24
                          94.103.81.0/24 maxlen: 24
                          94.103.82.0/24 maxlen: 24
                          94.103.94.0/24 maxlen: 24
                          94.103.95.0/24 maxlen: 24
                          109.234.33.0/24 maxlen: 24
                          109.234.34.0/24 maxlen: 24
                          109.234.35.0/24 maxlen: 24
                          109.234.36.0/24 maxlen: 24
                          109.234.37.0/24 maxlen: 24
                          109.234.38.0/24 maxlen: 24
                          109.234.39.0/24 maxlen: 24
                          185.121.232.0/24 maxlen: 24
                          185.121.233.0/24 maxlen: 24
                          185.121.234.0/24 maxlen: 24
                          185.121.235.0/24 maxlen: 24
                          185.157.212.0/24 maxlen: 24
                          185.157.213.0/24 maxlen: 24
                          185.157.214.0/24 maxlen: 24
                          185.157.215.0/24 maxlen: 24
                          185.245.104.0/24 maxlen: 24
                          185.245.105.0/24 maxlen: 24
                          185.245.106.0/24 maxlen: 24
                          185.245.107.0/24 maxlen: 24
                          193.33.194.0/24 maxlen: 24
                          193.33.195.0/24 maxlen: 24
                          193.178.169.0/24 maxlen: 24
                          193.178.172.0/24 maxlen: 24
                          193.178.174.0/24 maxlen: 24
                          194.164.32.0/24 maxlen: 24
                          194.164.33.0/24 maxlen: 24
                          194.164.34.0/24 maxlen: 24
                          194.164.35.0/24 maxlen: 24
                          195.2.86.0/24 maxlen: 24
                          195.2.92.0/24 maxlen: 24
                          195.2.93.0/24 maxlen: 24
                          195.26.224.0/24 maxlen: 24
                          195.26.225.0/24 maxlen: 24
                          195.26.226.0/24 maxlen: 24
                          195.26.227.0/24 maxlen: 24
                          195.200.16.0/24 maxlen: 24
                          195.200.17.0/24 maxlen: 24
                          195.200.18.0/24 maxlen: 24
                          195.200.19.0/24 maxlen: 24
                          195.200.26.0/24 maxlen: 24
                          195.200.28.0/24 maxlen: 24
                          195.200.29.0/24 maxlen: 24
                          195.200.30.0/24 maxlen: 24
                          195.200.31.0/24 maxlen: 24
                          212.34.128.0/24 maxlen: 24
                          212.34.129.0/24 maxlen: 24
                          212.34.130.0/24 maxlen: 24
                          212.34.131.0/24 maxlen: 24
                          212.34.144.0/24 maxlen: 24
                          212.34.145.0/24 maxlen: 24
                          212.34.146.0/24 maxlen: 24
                          212.34.147.0/24 maxlen: 24
                          212.34.148.0/24 maxlen: 24
                          212.34.149.0/24 maxlen: 24
                          212.34.150.0/24 maxlen: 24
                          212.34.151.0/24 maxlen: 24
                          212.34.152.0/24 maxlen: 24
                          212.34.153.0/24 maxlen: 24
                          212.34.154.0/24 maxlen: 24
                          212.34.155.0/24 maxlen: 24
                          212.118.36.0/24 maxlen: 24
                          212.118.37.0/24 maxlen: 24
                          212.118.38.0/24 maxlen: 24
                          212.118.39.0/24 maxlen: 24
                          212.118.40.0/24 maxlen: 24
                          212.118.41.0/24 maxlen: 24
                          212.118.42.0/24 maxlen: 24
                          212.118.43.0/24 maxlen: 24
                          212.118.52.0/24 maxlen: 24
                          212.118.53.0/24 maxlen: 24
                          212.118.54.0/24 maxlen: 24
                          212.118.55.0/24 maxlen: 24
                          2a06:7740::/48 maxlen: 48
                          2a0d:8480:1::/48 maxlen: 48
                          2a0d:8480:3::/48 maxlen: 48
                          2a14:1e00:1::/48 maxlen: 48
                          2a14:1e00:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:23:fe:52:16:ea:5c:3a:07:87:a9:fa:a3:50:b0:83:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
        Validity
            Not Before: Nov 13 05:28:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4384d0c7869b7e1ee69531cdc790b6d0c01cf27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:4a:8a:78:c3:41:2f:c5:c5:de:0c:04:5a:
                    2e:43:75:66:7a:4e:57:06:ea:9a:5d:e0:ac:38:28:
                    0e:2c:be:18:82:83:da:6a:3a:1f:98:8b:f5:3c:77:
                    37:5d:f3:07:8c:42:24:24:65:c6:48:e2:d7:7f:d4:
                    48:8e:ca:fd:ee:ca:e8:07:4e:cc:4b:58:28:28:ec:
                    e3:80:a9:14:7b:0a:ee:32:69:18:d8:8b:7b:7e:1a:
                    30:66:6a:ad:38:12:33:17:41:85:3c:db:c4:4f:49:
                    3a:b2:c3:b7:27:96:8f:de:db:12:67:ca:cb:d6:dc:
                    89:c2:0e:04:c2:4d:26:26:74:29:1d:9f:04:f2:84:
                    08:0e:f8:1a:3e:61:02:98:0d:2e:10:19:9a:fd:c2:
                    9b:f3:d4:12:95:27:5c:25:db:4a:0e:f2:3a:d1:17:
                    6b:d7:56:69:7b:72:8d:f9:46:8f:43:5c:7b:b7:3d:
                    cf:97:9b:5a:83:77:1b:1e:76:53:fb:56:1d:81:71:
                    54:cd:91:ed:ab:4e:16:00:b5:d6:de:27:c6:b5:95:
                    87:10:29:02:70:ca:4b:46:91:78:5b:25:02:da:2e:
                    f3:ff:a3:1b:92:ba:d0:70:a8:4e:aa:bd:a7:3e:05:
                    40:04:4e:8d:09:ab:86:3b:8d:b8:0a:6d:14:c4:cd:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:84:D0:C7:86:9B:7E:1E:E6:95:31:CD:C7:90:B6:D0:C0:1C:F2:7A
            X509v3 Authority Key Identifier:
                keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/Q4TQx4abfh7mlTHNx5C20MAc8no.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.24.0/21
                  77.238.224.0/19
                  80.85.244.0/22
                  88.210.3.0/24
                  88.210.6.0/24
                  88.210.9.0-88.210.14.255
                  91.201.112.0/22
                  91.246.41.0/24
                  93.183.124.0/22
                  94.103.80.0-94.103.82.255
                  94.103.94.0/23
                  109.234.33.0-109.234.39.255
                  185.121.232.0/22
                  185.157.212.0/22
                  185.245.104.0/22
                  193.33.194.0/23
                  193.178.169.0/24
                  193.178.172.0/24
                  193.178.174.0/24
                  194.164.32.0/22
                  195.2.86.0/24
                  195.2.92.0/23
                  195.26.224.0/22
                  195.200.16.0/22
                  195.200.26.0/24
                  195.200.28.0/22
                  212.34.128.0/22
                  212.34.144.0-212.34.155.255
                  212.118.36.0-212.118.43.255
                  212.118.52.0/22
                IPv6:
                  2a06:7740::/48
                  2a0d:8480:1::/48
                  2a0d:8480:3::/48
                  2a14:1e00:1::-2a14:1e00:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:ff:09:d9:36:90:a7:58:10:09:b3:13:c2:31:f8:bf:1a:
         ba:21:e7:1e:bb:01:13:c3:cb:ea:ee:00:8f:82:88:60:69:ff:
         20:af:5f:49:30:1c:3e:c3:44:2c:20:3e:82:a8:f1:9d:27:d7:
         e9:6a:db:9c:a7:5a:78:46:15:c2:d1:ad:05:24:35:d4:b0:fb:
         e6:35:8a:3c:3a:ba:3e:20:17:c8:1e:92:22:2e:6f:12:de:cb:
         d2:ac:6c:42:30:c8:6e:ce:5b:86:d3:8a:e1:08:e4:de:a6:c2:
         e8:7a:1e:78:d1:fb:f4:3a:25:81:44:99:ba:de:6d:fb:2c:84:
         b8:e2:88:91:de:9b:14:6e:d8:3b:1d:37:bc:62:1b:f6:34:85:
         cc:a8:f1:68:02:a0:f3:7d:a8:8a:04:ab:a7:5d:4f:f3:d0:4e:
         65:33:fa:ea:37:a9:96:69:3a:e4:e0:df:bb:f9:b0:26:78:ce:
         d4:c3:9b:ca:e4:40:7d:05:97:6c:ba:10:5f:01:9a:bf:87:e8:
         66:f5:92:55:11:2f:c5:a2:a0:0e:32:67:82:f8:59:af:63:8f:
         20:9f:03:0b:dd:d1:1b:a7:35:bd:8a:8a:33:63:ad:2e:08:dd:
         f5:7d:eb:80:96:8e:52:77:44:b3:0c:69:8a:80:f7:11:0d:9b:
         c6:43:cd:0e
-----BEGIN CERTIFICATE-----
MIIGEjCCBPqgAwIBAgISAZMj/lIW6lw6B4ep+qNQsIPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDY0MTQ4NmJkYzk4ZDRhN2RlMDkyOGE0MmQ3ZDY4ZTYw
MTVmMzAwHhcNMjQxMTEzMDUyODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mzg0ZDBjNzg2OWI3ZTFlZTY5NTMxY2RjNzkwYjZkMGMwMWNmMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubZKinjDQS/Fxd4MBFouQ3Vmek5X
BuqaXeCsOCgOLL4YgoPaajofmIv1PHc3XfMHjEIkJGXGSOLXf9RIjsr97sroB07M
S1goKOzjgKkUewruMmkY2It7fhowZmqtOBIzF0GFPNvET0k6ssO3J5aP3tsSZ8rL
1tyJwg4Ewk0mJnQpHZ8E8oQIDvgaPmECmA0uEBma/cKb89QSlSdcJdtKDvI60Rdr
11Zpe3KN+UaPQ1x7tz3Pl5tag3cbHnZT+1YdgXFUzZHtq04WALXW3ifGtZWHECkC
cMpLRpF4WyUC2i7z/6MbkrrQcKhOqr2nPgVABE6NCauGO424Cm0UxM3KGwIDAQAB
o4IDHjCCAxowHQYDVR0OBBYEFEOE0MeGm34e5pUxzceQttDAHPJ6MB8GA1UdIwQY
MBaAFFbWQUhr3JjUp94JKKQtfWjmAV8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2Et
ZTNlMDRiZDRmMjQyLzEvUTRUUXg0YWJmaDdtbFRITng1QzIwTUFjOG5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2EtZTNlMDRiZDRmMjQy
LzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMgYIKwYBBQUHAQcBAf8EggEhMIIBHTCB4wQCAAEwgdwD
BAMulxgDBAVN7uADBAJQVfQDBABY0gMDBABY0gYwDAMEAFjSCQMEAFjSDgMEAlvJ
cAMEAFv2KQMEAl23fDAMAwQEXmdQAwQAXmdSAwQBXmdeMAwDBABt6iEDBANt6iAD
BAK5eegDBAK5ndQDBAK59WgDBAHBIcIDBADBsqkDBADBsqwDBADBsq4DBALCpCAD
BADDAlYDBAHDAlwDBALDGuADBALDyBADBADDyBoDBALDyBwDBALUIoAwDAMEBNQi
kAMEAtQimDAMAwQC1HYkAwQC1HYoAwQC1HY0MDUEAgACMC8DBwAqBndAAAADBwAq
DYSAAAEDBwAqDYSAAAMwEgMHACoUHgAAAQMHACoUHgAAAjANBgkqhkiG9w0BAQsF
AAOCAQEADoT/Cdk2kKdYEAmzE8Ix+L8auiHnHrsBE8PL6u4Aj4KIYGn/IK9fSTAc
PsNELCA+gqjxnSfX6WrbnKdaeEYVwtGtBSQ11LD75jWKPDq6PiAXyB6SIi5vEt7L
0qxsQjDIbs5bhtOK4Qjk3qbC6HoeeNH79DolgUSZut5t+yyEuOKIkd6bFG7YOx03
vGIb9jSFzKjxaAKg832oigSrp11P89BOZTP66jeplmk65ODfu/mwJnjO1MObyuRA
fQWXbLoQXwGav4foZvWSVREvxaKgDjJngvhZr2OPIJ8DC93RG6c1vYqKM2OtLgjd
9X3rgJaOUndEswxpioD3EQ2bxkPNDg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:22:26 2024 by rpki-client on console.sobornost.net