Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          GZXaPdt+KBxfqLv/JOKTw0xF1qKh8BQwy10X9snaQxA=
Subject key identifier:   9F:2C:49:14:EB:98:13:E1:85:CF:AC:FC:31:7D:D4:B1:EF:41:61:33
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       59F240B6A1F44EEA2F7F1A5914184D7EF319E078
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa
Signing time:             Sun 13 Apr 2025 13:05:05 +0000
ROA not before:           Sun 13 Apr 2025 13:00:05 +0000
ROA not after:            Sun 12 Apr 2026 13:05:05 +0000
asID:                     174
IP address blocks:        96.62.32.0/24 maxlen: 24
                          96.62.33.0/24 maxlen: 24
                          96.62.34.0/24 maxlen: 24
                          96.62.35.0/24 maxlen: 24
                          96.62.36.0/24 maxlen: 24
                          96.62.38.0/24 maxlen: 24
                          96.62.39.0/24 maxlen: 24
                          96.62.40.0/24 maxlen: 24
                          96.62.41.0/24 maxlen: 24
                          96.62.42.0/24 maxlen: 24
                          96.62.43.0/24 maxlen: 24
                          96.62.44.0/24 maxlen: 24
                          96.62.46.0/24 maxlen: 24
                          96.62.64.0/24 maxlen: 24
                          96.62.65.0/24 maxlen: 24
                          96.62.66.0/24 maxlen: 24
                          96.62.67.0/24 maxlen: 24
                          96.62.68.0/24 maxlen: 24
                          96.62.70.0/24 maxlen: 24
                          96.62.102.0/24 maxlen: 24
                          96.62.104.0/24 maxlen: 24
                          96.62.106.0/24 maxlen: 24
                          96.62.107.0/24 maxlen: 24
                          96.62.108.0/24 maxlen: 24
                          96.62.109.0/24 maxlen: 24
                          96.62.110.0/24 maxlen: 24
                          96.62.112.0/24 maxlen: 24
                          96.62.113.0/24 maxlen: 24
                          96.62.116.0/24 maxlen: 24
                          96.62.117.0/24 maxlen: 24
                          96.62.118.0/24 maxlen: 24
                          96.62.119.0/24 maxlen: 24
                          96.62.120.0/24 maxlen: 24
                          96.62.121.0/24 maxlen: 24
                          96.62.122.0/24 maxlen: 24
                          96.62.123.0/24 maxlen: 24
                          96.62.124.0/24 maxlen: 24
                          96.62.125.0/24 maxlen: 24
                          96.62.126.0/24 maxlen: 24
                          96.62.132.0/24 maxlen: 24
                          96.62.133.0/24 maxlen: 24
                          96.62.134.0/24 maxlen: 24
                          96.62.136.0/24 maxlen: 24
                          96.62.137.0/24 maxlen: 24
                          96.62.138.0/24 maxlen: 24
                          96.62.139.0/24 maxlen: 24
                          96.62.141.0/24 maxlen: 24
                          96.62.142.0/24 maxlen: 24
                          96.62.143.0/24 maxlen: 24
                          96.62.146.0/24 maxlen: 24
                          96.62.147.0/24 maxlen: 24
                          96.62.160.0/24 maxlen: 24
                          96.62.161.0/24 maxlen: 24
                          96.62.162.0/24 maxlen: 24
                          96.62.163.0/24 maxlen: 24
                          96.62.164.0/24 maxlen: 24
                          96.62.165.0/24 maxlen: 24
                          96.62.166.0/24 maxlen: 24
                          96.62.167.0/24 maxlen: 24
                          96.62.168.0/24 maxlen: 24
                          96.62.169.0/24 maxlen: 24
                          96.62.170.0/24 maxlen: 24
                          96.62.171.0/24 maxlen: 24
                          96.62.172.0/24 maxlen: 24
                          96.62.173.0/24 maxlen: 24
                          96.62.174.0/24 maxlen: 24
                          96.62.175.0/24 maxlen: 24
                          96.62.177.0/24 maxlen: 24
                          96.62.178.0/24 maxlen: 24
                          96.62.179.0/24 maxlen: 24
                          96.62.188.0/24 maxlen: 24
                          96.62.189.0/24 maxlen: 24
                          96.62.196.0/24 maxlen: 24
                          96.62.198.0/24 maxlen: 24
                          96.62.199.0/24 maxlen: 24
                          96.62.212.0/24 maxlen: 24
                          96.62.213.0/24 maxlen: 24
                          96.62.215.0/24 maxlen: 24
                          96.62.225.0/24 maxlen: 24
                          96.62.226.0/24 maxlen: 24
                          96.62.230.0/24 maxlen: 24
                          96.62.236.0/24 maxlen: 24
                          96.62.237.0/24 maxlen: 24
                          96.62.238.0/24 maxlen: 24
                          96.62.239.0/24 maxlen: 24
                          96.62.240.0/24 maxlen: 24
                          96.62.241.0/24 maxlen: 24
                          96.62.245.0/24 maxlen: 24
                          96.62.246.0/24 maxlen: 24
                          96.62.252.0/24 maxlen: 24
                          140.150.224.0/22 maxlen: 24
                          140.233.160.0/22 maxlen: 22
                          140.233.180.0/22 maxlen: 22
                          147.79.16.0/22 maxlen: 22
                          147.79.24.0/22 maxlen: 22
                          150.241.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f2:40:b6:a1:f4:4e:ea:2f:7f:1a:59:14:18:4d:7e:f3:19:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Apr 13 13:00:05 2025 GMT
            Not After : Apr 12 13:05:05 2026 GMT
        Subject: CN=9F2C4914EB9813E185CFACFC317DD4B1EF416133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:54:6f:76:17:84:78:5a:e9:86:11:ed:c7:
                    ea:1a:d4:db:af:8c:00:c5:b2:70:41:f4:6f:6e:41:
                    63:10:5f:78:71:5d:19:30:69:86:25:59:cd:e1:16:
                    a3:37:47:5c:61:e1:e8:7e:e5:64:ce:78:3c:c6:8e:
                    38:5e:6d:c3:6f:3c:1d:4d:d4:5f:88:34:1b:f7:29:
                    25:a2:00:dc:ac:8c:cb:01:61:29:49:f5:d1:e9:56:
                    a8:6d:21:56:53:67:38:ef:5c:81:a4:4b:70:43:dd:
                    e0:75:9d:6d:49:a5:37:86:3c:d7:8f:cd:d6:62:55:
                    0a:b3:a8:af:ac:e0:bd:12:c8:6f:66:40:54:15:8d:
                    f1:0f:ea:d5:b1:b8:3d:6e:47:99:ef:75:49:a6:69:
                    dd:ba:13:9c:58:74:cd:1d:a2:e3:df:3d:f2:2d:36:
                    f7:e6:4d:93:25:2c:f3:e3:f3:88:63:2f:f4:7a:32:
                    f6:dd:93:de:e4:7c:72:47:8b:cd:dd:6e:cd:8f:85:
                    a7:87:a2:ab:4e:b4:2d:2d:46:40:9c:7f:80:49:72:
                    99:92:6d:70:63:b0:ce:cf:10:84:42:c0:a6:56:e7:
                    b8:28:04:f5:fd:19:6d:a2:e9:b0:a1:a0:c8:26:45:
                    75:6c:41:e1:07:39:10:b1:16:a6:1f:ef:25:75:64:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2C:49:14:EB:98:13:E1:85:CF:AC:FC:31:7D:D4:B1:EF:41:61:33
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.62.32.0-96.62.36.255
                  96.62.38.0-96.62.44.255
                  96.62.46.0/24
                  96.62.64.0-96.62.68.255
                  96.62.70.0/24
                  96.62.102.0/24
                  96.62.104.0/24
                  96.62.106.0-96.62.110.255
                  96.62.112.0/23
                  96.62.116.0-96.62.126.255
                  96.62.132.0-96.62.134.255
                  96.62.136.0/22
                  96.62.141.0-96.62.143.255
                  96.62.146.0/23
                  96.62.160.0/20
                  96.62.177.0-96.62.179.255
                  96.62.188.0/23
                  96.62.196.0/24
                  96.62.198.0/23
                  96.62.212.0/23
                  96.62.215.0/24
                  96.62.225.0-96.62.226.255
                  96.62.230.0/24
                  96.62.236.0-96.62.241.255
                  96.62.245.0-96.62.246.255
                  96.62.252.0/24
                  140.150.224.0/22
                  140.233.160.0/22
                  140.233.180.0/22
                  147.79.16.0/22
                  147.79.24.0/22
                  150.241.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:f8:dd:19:87:6e:6a:5f:c1:39:5c:0b:f2:ad:83:b7:9d:
         2a:92:c2:1c:21:59:35:1b:a9:a4:34:26:07:44:d2:8c:0a:c4:
         06:1a:ee:4f:b8:df:3a:a8:cb:2c:e1:d9:f2:a3:b9:23:b8:cc:
         e4:fc:5d:15:d5:c9:0b:f3:af:21:de:1c:98:4f:49:e4:30:da:
         7a:dc:a6:6d:91:29:23:61:b9:0f:83:57:6e:d3:2e:59:ff:0b:
         f1:39:f0:6a:82:41:a5:30:d5:02:f1:11:8d:f5:93:ca:67:b6:
         79:c0:cf:95:90:73:1e:16:a0:aa:e9:b2:36:08:79:c0:68:61:
         fd:38:17:51:62:fb:42:d5:0a:27:d0:58:6c:0c:7b:57:e0:a5:
         d5:2a:3d:ea:45:63:cd:cd:cb:9e:9c:e8:67:3f:d8:e9:8d:f8:
         2d:0c:8c:01:1b:cd:1c:c2:d6:18:4b:bf:b5:73:33:07:57:29:
         66:15:15:f6:76:2f:ea:d9:6c:51:6c:fb:a3:12:51:bc:92:8f:
         f1:0f:5c:0e:91:50:21:34:65:61:d9:28:18:6f:b2:32:c4:b2:
         66:d3:7d:e5:50:82:bd:5c:d1:e2:70:af:aa:65:47:75:12:70:
         68:26:f3:1c:93:77:2d:38:0a:fe:00:c1:4a:07:7c:ed:72:4b:
         cf:85:3f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net