Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/reixubVZotqySmPnmQA2RN7RJOo.roa
File:                     reixubVZotqySmPnmQA2RN7RJOo.roa (raw, json)
Hash identifier:          k1x+C1eMk5Um44ZikiHvBZAF5WaeGN5ZEKhHTEPufBk=
Subject key identifier:   AD:E8:B1:B9:B5:59:A2:DA:B2:4A:63:E7:99:00:36:44:DE:D1:24:EA
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0195ACCC11D95C9CB619589A146256266B60
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/reixubVZotqySmPnmQA2RN7RJOo.roa
Signing time:             Wed 19 Mar 2025 05:06:49 +0000
ROA not before:           Wed 19 Mar 2025 05:06:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12586
IP address blocks:        5.83.128.0/19 maxlen: 32
                          5.83.128.0/20 maxlen: 32
                          5.83.136.0/24 maxlen: 24
                          5.83.139.0/24 maxlen: 24
                          5.83.151.0/24 maxlen: 32
                          5.83.156.0/24 maxlen: 24
                          5.83.157.0/24 maxlen: 24
                          5.175.128.0/24 maxlen: 32
                          5.175.129.0/24 maxlen: 32
                          5.175.130.0/24 maxlen: 32
                          5.175.131.0/24 maxlen: 32
                          5.175.133.0/24 maxlen: 32
                          5.175.142.0/24 maxlen: 24
                          5.175.143.0/24 maxlen: 24
                          5.175.218.0/24 maxlen: 32
                          5.175.219.0/24 maxlen: 32
                          5.175.225.0/24 maxlen: 32
                          5.175.226.0/24 maxlen: 32
                          5.175.227.0/24 maxlen: 32
                          5.175.228.0/24 maxlen: 32
                          5.175.229.0/24 maxlen: 32
                          5.175.230.0/24 maxlen: 32
                          5.175.231.0/24 maxlen: 32
                          5.175.232.0/24 maxlen: 32
                          5.175.235.0/24 maxlen: 32
                          5.175.238.0/24 maxlen: 24
                          5.175.240.0/24 maxlen: 32
                          5.175.241.0/24 maxlen: 32
                          5.175.242.0/24 maxlen: 32
                          5.175.243.0/24 maxlen: 32
                          5.175.244.0/24 maxlen: 32
                          5.175.251.0/24 maxlen: 32
                          5.175.252.0/24 maxlen: 32
                          5.175.253.0/24 maxlen: 32
                          5.175.254.0/24 maxlen: 32
                          5.175.255.0/24 maxlen: 32
                          5.230.0.0/15 maxlen: 32
                          5.230.6.0/24 maxlen: 32
                          5.230.11.0/24 maxlen: 32
                          5.230.102.0/24 maxlen: 32
                          5.230.224.0/24 maxlen: 32
                          5.231.24.0/24 maxlen: 24
                          5.231.61.0/24 maxlen: 24
                          5.231.79.0/24 maxlen: 24
                          5.231.96.0/24 maxlen: 24
                          5.231.104.0/24 maxlen: 24
                          5.231.254.0/24 maxlen: 24
                          77.90.0.0/18 maxlen: 32
                          77.90.7.0/24 maxlen: 24
                          77.90.15.0/24 maxlen: 24
                          77.90.18.0/24 maxlen: 24
                          77.90.47.0/24 maxlen: 24
                          83.243.80.0/21 maxlen: 32
                          85.93.0.0/19 maxlen: 32
                          85.93.5.0/24 maxlen: 24
                          85.93.20.0/24 maxlen: 32
                          85.93.31.0/24 maxlen: 24
                          85.118.160.0/21 maxlen: 32
                          85.118.162.0/24 maxlen: 24
                          87.239.128.0/21 maxlen: 32
                          87.239.130.0/24 maxlen: 24
                          89.106.64.0/19 maxlen: 32
                          89.144.0.0/18 maxlen: 32
                          89.144.5.0/24 maxlen: 24
                          89.144.6.0/24 maxlen: 24
                          89.144.7.0/24 maxlen: 24
                          89.144.14.0/24 maxlen: 24
                          89.144.21.0/24 maxlen: 24
                          89.144.60.0/24 maxlen: 24
                          94.103.160.0/20 maxlen: 32
                          94.103.164.0/24 maxlen: 24
                          94.249.128.0/17 maxlen: 32
                          94.249.138.0/24 maxlen: 24
                          94.249.153.0/24 maxlen: 24
                          94.249.158.0/24 maxlen: 24
                          94.249.168.0/24 maxlen: 24
                          94.249.169.0/24 maxlen: 24
                          94.249.212.0/24 maxlen: 24
                          94.249.237.0/24 maxlen: 24
                          95.215.32.0/22 maxlen: 32
                          178.18.144.0/20 maxlen: 32
                          178.18.151.0/24 maxlen: 32
                          185.13.156.0/22 maxlen: 32
                          185.13.159.0/24 maxlen: 24
                          185.47.140.0/24 maxlen: 32
                          185.47.141.0/24 maxlen: 32
                          185.47.143.0/24 maxlen: 24
                          185.121.71.0/24 maxlen: 32
                          193.28.251.0/24 maxlen: 32
                          195.110.14.0/23 maxlen: 32
                          217.69.160.0/20 maxlen: 32
                          217.69.167.0/24 maxlen: 24
                          217.69.170.0/24 maxlen: 24
                          2a00:12d8::/29 maxlen: 128
                          2a00:19d0::/29 maxlen: 128
                          2a00:cdc0::/32 maxlen: 128
                          2a01:bd40::/29 maxlen: 128
                          2a02:7a0::/29 maxlen: 128
                          2a02:2fc0::/29 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ac:cc:11:d9:5c:9c:b6:19:58:9a:14:62:56:26:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Mar 19 05:06:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ade8b1b9b559a2dab24a63e799003644ded124ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:df:84:6d:57:c0:0a:db:ca:7f:6d:c6:10:
                    a5:b6:02:75:21:1b:ad:ea:ab:3c:ae:bd:ef:9e:36:
                    0a:a2:1c:aa:b0:ba:9a:1d:74:9f:b3:75:dc:7b:03:
                    8e:d8:52:96:11:31:f9:e6:5b:d1:d9:ac:99:37:5f:
                    c2:b0:7e:b1:c2:40:d0:b2:5d:20:db:6e:c9:b2:a5:
                    20:57:76:aa:e6:79:4b:d1:35:2b:11:74:7d:97:bb:
                    0a:13:58:d9:51:ff:7c:3e:e3:1f:4e:40:19:f0:0f:
                    42:3d:2d:38:dd:ab:06:53:af:d9:6b:ca:76:41:9c:
                    c7:d1:ce:f3:18:f4:4f:e3:24:e4:d4:e7:2e:66:3a:
                    56:48:b7:71:71:8b:39:80:d2:1e:33:2b:63:05:e3:
                    56:50:56:3d:c5:ec:8e:7e:74:ef:e8:e4:b3:d2:6f:
                    25:51:cd:92:6d:d6:21:dd:de:37:a2:18:b7:7c:98:
                    8b:3b:15:31:48:ed:77:f8:9b:2e:aa:46:25:09:4a:
                    9a:de:dd:b2:dc:89:76:da:f6:07:da:24:b4:8d:45:
                    db:3a:29:80:c1:3c:20:24:e8:8a:f6:3a:c7:33:2b:
                    60:48:d5:10:27:78:db:bd:09:17:21:bd:ed:75:ce:
                    ed:b8:17:ee:3b:ea:76:34:96:ac:08:59:8b:63:fc:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E8:B1:B9:B5:59:A2:DA:B2:4A:63:E7:99:00:36:44:DE:D1:24:EA
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/reixubVZotqySmPnmQA2RN7RJOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.128.0/19
                  5.175.128.0/22
                  5.175.133.0/24
                  5.175.142.0/23
                  5.175.218.0/23
                  5.175.225.0-5.175.232.255
                  5.175.235.0/24
                  5.175.238.0/24
                  5.175.240.0-5.175.244.255
                  5.175.251.0-5.175.255.255
                  5.230.0.0/15
                  77.90.0.0/18
                  83.243.80.0/21
                  85.93.0.0/19
                  85.118.160.0/21
                  87.239.128.0/21
                  89.106.64.0/19
                  89.144.0.0/18
                  94.103.160.0/20
                  94.249.128.0/17
                  95.215.32.0/22
                  178.18.144.0/20
                  185.13.156.0/22
                  185.47.140.0/23
                  185.47.143.0/24
                  185.121.71.0/24
                  193.28.251.0/24
                  195.110.14.0/23
                  217.69.160.0/20
                IPv6:
                  2a00:12d8::/29
                  2a00:19d0::/29
                  2a00:cdc0::/32
                  2a01:bd40::/29
                  2a02:7a0::/29
                  2a02:2fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:12:10:f4:dc:0f:0c:14:a9:6d:e8:76:03:49:08:92:24:
         d6:3f:b0:2e:6b:a5:06:b4:54:cb:2e:d1:3f:cb:a5:ef:18:8d:
         4c:38:5b:d2:6f:7d:74:b2:1f:43:c1:eb:0f:9c:89:2c:32:a6:
         88:df:8d:a0:7a:ba:3d:5e:d7:c9:34:f2:37:dc:a0:64:36:c0:
         14:33:55:fa:80:c0:6a:e0:92:5a:0f:03:a1:85:c8:d1:ee:3f:
         d0:80:af:94:4a:9b:4e:5c:8f:e6:c0:66:a3:26:8e:98:c1:79:
         70:39:ed:9e:a7:67:48:05:c1:91:c1:f6:4d:2c:a3:09:eb:c3:
         66:c8:92:ed:2d:0d:cb:b2:f7:12:56:43:30:f7:99:52:eb:bc:
         31:8a:a3:48:14:e6:87:68:a8:32:eb:3f:3c:6f:53:54:5d:56:
         8d:c7:05:a1:df:6b:5f:bd:26:aa:71:5d:8c:80:b4:c7:b1:cb:
         57:99:26:bf:8d:e8:14:03:14:02:04:d5:80:7e:8a:dd:35:8a:
         53:39:50:2b:84:1a:08:b0:08:9e:f6:f0:72:f4:3a:95:c5:fc:
         2c:d7:7d:3b:43:5e:cf:ce:55:20:ed:9a:1a:c3:4a:1c:31:0e:
         62:3a:bd:8a:63:4d:b5:f9:45:e3:fb:ff:b8:c7:e7:7d:45:09:
         67:ef:0f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:30 2025 by rpki-client