Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/1bXQyvsRNbmrrr44-2jNb7ldHj0.roa
File:                     1bXQyvsRNbmrrr44-2jNb7ldHj0.roa (raw, json)
Hash identifier:          JTjNv+ceMoDmo+YhOd+ava87RJxuWwj/bcI+ShCgIhU=
Subject key identifier:   D5:B5:D0:CA:FB:11:35:B9:AB:AE:BE:38:FB:68:CD:6F:B9:5D:1E:3D
Certificate issuer:       /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial:       019275E1E7A8A91A6B47D728D4A9E8917567
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/1bXQyvsRNbmrrr44-2jNb7ldHj0.roa
Signing time:             Thu 10 Oct 2024 10:03:11 +0000
ROA not before:           Thu 10 Oct 2024 10:03:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34758
IP address blocks:        31.6.80.0/20 maxlen: 20
                          31.6.80.0/24 maxlen: 24
                          31.6.81.0/24 maxlen: 24
                          31.6.82.0/24 maxlen: 24
                          31.6.83.0/24 maxlen: 24
                          31.6.84.0/24 maxlen: 24
                          31.6.85.0/24 maxlen: 24
                          31.6.86.0/24 maxlen: 24
                          31.6.87.0/24 maxlen: 24
                          31.6.88.0/24 maxlen: 24
                          31.6.89.0/24 maxlen: 24
                          31.6.90.0/24 maxlen: 24
                          31.6.91.0/24 maxlen: 24
                          31.6.92.0/24 maxlen: 24
                          31.6.93.0/24 maxlen: 24
                          31.6.94.0/24 maxlen: 24
                          31.6.95.0/24 maxlen: 24
                          45.13.88.0/22 maxlen: 22
                          45.13.88.0/24 maxlen: 24
                          45.13.89.0/24 maxlen: 24
                          45.13.90.0/24 maxlen: 24
                          45.13.91.0/24 maxlen: 24
                          45.93.36.0/22 maxlen: 22
                          45.93.36.0/24 maxlen: 24
                          45.93.37.0/24 maxlen: 24
                          45.93.38.0/24 maxlen: 24
                          45.93.39.0/24 maxlen: 24
                          82.163.32.0/22 maxlen: 24
                          92.246.96.0/21 maxlen: 21
                          92.246.96.0/24 maxlen: 24
                          92.246.97.0/24 maxlen: 24
                          92.246.98.0/24 maxlen: 24
                          92.246.99.0/24 maxlen: 24
                          92.246.100.0/24 maxlen: 24
                          92.246.101.0/24 maxlen: 24
                          92.246.102.0/24 maxlen: 24
                          92.246.103.0/24 maxlen: 24
                          92.246.112.0/20 maxlen: 20
                          92.246.112.0/24 maxlen: 24
                          92.246.113.0/24 maxlen: 24
                          92.246.114.0/24 maxlen: 24
                          92.246.115.0/24 maxlen: 24
                          92.246.116.0/24 maxlen: 24
                          92.246.117.0/24 maxlen: 24
                          92.246.118.0/24 maxlen: 24
                          92.246.119.0/24 maxlen: 24
                          92.246.120.0/24 maxlen: 24
                          92.246.121.0/24 maxlen: 24
                          92.246.122.0/24 maxlen: 24
                          92.246.123.0/24 maxlen: 24
                          92.246.124.0/24 maxlen: 24
                          92.246.125.0/24 maxlen: 24
                          92.246.126.0/24 maxlen: 24
                          92.246.127.0/24 maxlen: 24
                          93.93.16.0/21 maxlen: 21
                          93.93.16.0/24 maxlen: 24
                          93.93.17.0/24 maxlen: 24
                          93.93.18.0/24 maxlen: 24
                          93.93.19.0/24 maxlen: 24
                          93.93.20.0/24 maxlen: 24
                          93.93.21.0/24 maxlen: 24
                          93.93.22.0/24 maxlen: 24
                          93.93.23.0/24 maxlen: 24
                          109.234.136.0/21 maxlen: 21
                          109.234.136.0/24 maxlen: 24
                          109.234.137.0/24 maxlen: 24
                          109.234.138.0/24 maxlen: 24
                          109.234.139.0/24 maxlen: 24
                          109.234.140.0/24 maxlen: 24
                          109.234.141.0/24 maxlen: 24
                          109.234.142.0/24 maxlen: 24
                          109.234.143.0/24 maxlen: 24
                          146.255.160.0/21 maxlen: 21
                          146.255.160.0/24 maxlen: 24
                          146.255.161.0/24 maxlen: 24
                          146.255.162.0/24 maxlen: 24
                          146.255.163.0/24 maxlen: 24
                          146.255.164.0/24 maxlen: 24
                          146.255.165.0/24 maxlen: 24
                          146.255.166.0/24 maxlen: 24
                          146.255.167.0/24 maxlen: 24
                          159.255.156.0/22 maxlen: 22
                          159.255.156.0/24 maxlen: 24
                          159.255.157.0/24 maxlen: 24
                          159.255.158.0/24 maxlen: 24
                          159.255.159.0/24 maxlen: 24
                          185.23.84.0/22 maxlen: 22
                          185.23.84.0/24 maxlen: 24
                          185.23.85.0/24 maxlen: 24
                          185.23.86.0/24 maxlen: 24
                          185.23.87.0/24 maxlen: 24
                          185.103.80.0/22 maxlen: 22
                          185.103.80.0/24 maxlen: 24
                          185.103.81.0/24 maxlen: 24
                          185.103.82.0/24 maxlen: 24
                          185.103.83.0/24 maxlen: 24
                          185.126.140.0/22 maxlen: 22
                          185.126.140.0/24 maxlen: 24
                          185.126.141.0/24 maxlen: 24
                          185.126.142.0/24 maxlen: 24
                          185.126.143.0/24 maxlen: 24
                          185.158.28.0/22 maxlen: 22
                          185.158.28.0/24 maxlen: 24
                          185.158.29.0/24 maxlen: 24
                          185.158.30.0/24 maxlen: 24
                          185.158.31.0/24 maxlen: 24
                          185.171.36.0/22 maxlen: 22
                          185.171.36.0/24 maxlen: 24
                          185.171.37.0/24 maxlen: 24
                          185.171.38.0/24 maxlen: 24
                          185.171.39.0/24 maxlen: 24
                          193.238.136.0/22 maxlen: 22
                          193.238.136.0/24 maxlen: 24
                          193.238.137.0/24 maxlen: 24
                          193.238.138.0/24 maxlen: 24
                          193.238.139.0/24 maxlen: 24
                          195.225.224.0/22 maxlen: 22
                          195.225.224.0/24 maxlen: 24
                          195.225.225.0/24 maxlen: 24
                          195.225.226.0/24 maxlen: 24
                          195.225.227.0/24 maxlen: 24
                          217.72.32.0/21 maxlen: 21
                          217.72.32.0/24 maxlen: 24
                          217.72.33.0/24 maxlen: 24
                          217.72.34.0/24 maxlen: 24
                          217.72.35.0/24 maxlen: 24
                          217.72.36.0/24 maxlen: 24
                          217.72.37.0/24 maxlen: 24
                          217.72.38.0/24 maxlen: 24
                          217.72.39.0/24 maxlen: 24
                          2a04:2080::/29 maxlen: 48
                          2a06:c2c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:75:e1:e7:a8:a9:1a:6b:47:d7:28:d4:a9:e8:91:75:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
        Validity
            Not Before: Oct 10 10:03:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d5b5d0cafb1135b9abaebe38fb68cd6fb95d1e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d0:6e:67:10:ec:67:e9:25:44:97:b5:f8:3c:
                    fc:00:46:fc:74:b0:2d:d3:72:07:44:b4:77:35:8f:
                    47:00:af:16:dc:a5:64:07:e9:ca:3c:69:2a:92:ba:
                    25:4e:ac:11:13:d7:5d:da:38:18:8b:76:fe:0b:35:
                    eb:3c:4a:cf:a3:5d:6f:56:fa:c2:e5:75:cd:8b:cb:
                    39:60:a7:d8:c5:ab:e7:bd:4e:6a:18:ec:df:6b:36:
                    48:a4:02:a7:ea:55:c4:bc:3a:b4:1a:1f:b3:8a:dd:
                    3b:f4:8d:bb:bc:e4:a3:64:20:25:0d:72:ab:f0:a6:
                    83:2b:30:66:e6:18:66:1d:25:20:5d:69:47:f8:a5:
                    f8:6b:e0:52:e5:ff:0c:ce:0e:e1:11:44:b9:0a:19:
                    c9:71:0a:d2:84:74:6d:53:87:a1:2d:ae:fa:b3:ff:
                    ff:63:47:79:55:21:bf:68:a7:1c:4f:03:92:d1:d4:
                    8a:f1:76:88:0e:7c:75:18:a9:79:3f:64:01:22:d1:
                    ec:b9:8e:41:0c:75:6c:ff:20:ce:57:69:f9:49:30:
                    94:95:0a:ed:ec:a9:e7:3d:d3:cb:4a:20:e4:3c:60:
                    0f:bd:d5:20:23:f9:ed:be:2f:71:86:a1:a5:f3:40:
                    54:d9:a9:5e:cf:e4:72:ed:b3:1e:91:ab:28:e7:e9:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B5:D0:CA:FB:11:35:B9:AB:AE:BE:38:FB:68:CD:6F:B9:5D:1E:3D
            X509v3 Authority Key Identifier:
                keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/1bXQyvsRNbmrrr44-2jNb7ldHj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.6.80.0/20
                  45.13.88.0/22
                  45.93.36.0/22
                  82.163.32.0/22
                  92.246.96.0/21
                  92.246.112.0/20
                  93.93.16.0/21
                  109.234.136.0/21
                  146.255.160.0/21
                  159.255.156.0/22
                  185.23.84.0/22
                  185.103.80.0/22
                  185.126.140.0/22
                  185.158.28.0/22
                  185.171.36.0/22
                  193.238.136.0/22
                  195.225.224.0/22
                  217.72.32.0/21
                IPv6:
                  2a04:2080::/29
                  2a06:c2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:81:57:f7:48:88:23:f4:3b:99:93:8c:db:17:fc:ed:3c:9c:
         56:a2:c1:ea:d8:5d:65:45:29:4e:91:43:1e:4e:7f:48:7e:42:
         f2:93:29:07:b5:8b:3a:12:37:fe:df:30:59:01:52:35:46:f2:
         1f:ad:e1:ea:09:c5:0f:47:b5:fb:f9:3c:72:6f:60:ca:35:68:
         65:21:2f:d8:00:fc:b5:f0:2f:2b:2b:e7:7d:4f:96:40:e8:43:
         53:3f:2f:74:a5:38:cb:b3:46:be:f4:b7:da:0e:70:85:f2:cd:
         cc:b8:3d:22:5a:54:87:3b:5e:de:1c:f6:71:ed:e1:9f:e1:79:
         26:e4:aa:3c:05:c9:41:71:b3:1f:1a:c8:2a:fb:fe:fd:8c:4a:
         d4:ba:b0:83:30:02:95:e2:1b:03:f1:43:e8:7d:92:7d:51:21:
         c4:3a:3d:a4:78:5b:3f:de:f2:bf:5b:5a:c1:34:96:b4:80:9d:
         15:4b:61:6a:a7:a9:2e:cf:b8:ed:de:83:21:7d:5d:87:99:1d:
         d9:01:5a:80:92:3a:6b:94:7a:a3:92:fc:b5:c3:46:45:97:d9:
         08:7a:39:28:0f:7a:c1:75:55:50:d3:1e:db:7e:e5:42:18:59:
         8d:90:e7:b9:bd:4d:c6:63:37:27:90:04:d2:7b:17:0e:b1:3e:
         a7:6f:c4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:38 2024 by rpki-client on console.sobornost.net