Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/FnZ4z90NEx_9Zm0VBI68LOuXJHk.roa
File:                     FnZ4z90NEx_9Zm0VBI68LOuXJHk.roa (raw, json)
Hash identifier:          uQupNbPVymf4DIBcw8/9rNUjQQEKoobAabvlWqAbP9M=
Subject key identifier:   16:76:78:CF:DD:0D:13:1F:FD:66:6D:15:04:8E:BC:2C:EB:97:24:79
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       018D77A8EEDC373FB8AA27324BA4D2CDAF68
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/FnZ4z90NEx_9Zm0VBI68LOuXJHk.roa
Signing time:             Mon 05 Feb 2024 05:06:16 +0000
ROA not before:           Mon 05 Feb 2024 05:06:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     31363
IP address blocks:        86.62.75.0/24 maxlen: 24
                          86.62.79.0/24 maxlen: 24
                          86.62.84.0/24 maxlen: 24
                          86.62.92.0/24 maxlen: 24
                          86.62.94.0/24 maxlen: 24
                          86.62.96.0/24 maxlen: 24
                          86.62.98.0/24 maxlen: 24
                          86.62.99.0/24 maxlen: 24
                          86.62.102.0/24 maxlen: 24
                          86.62.103.0/24 maxlen: 24
                          86.62.110.0/24 maxlen: 24
                          86.62.112.0/24 maxlen: 24
                          86.62.113.0/24 maxlen: 24
                          86.62.114.0/24 maxlen: 24
                          86.62.115.0/24 maxlen: 24
                          86.62.116.0/24 maxlen: 24
                          86.62.117.0/24 maxlen: 24
                          86.62.118.0/24 maxlen: 24
                          86.62.119.0/24 maxlen: 24
                          86.62.125.0/24 maxlen: 24
                          195.54.210.0/24 maxlen: 24
                          195.91.133.0/24 maxlen: 24
                          195.91.138.0/24 maxlen: 24
                          195.91.144.0/24 maxlen: 24
                          195.91.145.0/24 maxlen: 24
                          195.91.146.0/24 maxlen: 24
                          195.91.147.0/24 maxlen: 24
                          195.91.148.0/24 maxlen: 24
                          195.91.149.0/24 maxlen: 24
                          195.91.150.0/24 maxlen: 24
                          195.91.151.0/24 maxlen: 24
                          195.91.153.0/24 maxlen: 24
                          195.91.156.0/24 maxlen: 24
                          195.91.160.0/24 maxlen: 24
                          195.91.165.0/24 maxlen: 24
                          195.91.166.0/24 maxlen: 24
                          195.91.168.0/24 maxlen: 24
                          195.91.169.0/24 maxlen: 24
                          195.91.170.0/24 maxlen: 24
                          195.91.171.0/24 maxlen: 24
                          195.91.172.0/24 maxlen: 24
                          195.91.173.0/24 maxlen: 24
                          195.91.174.0/24 maxlen: 24
                          195.91.175.0/24 maxlen: 24
                          195.91.178.0/24 maxlen: 24
                          195.91.179.0/24 maxlen: 24
                          195.91.180.0/24 maxlen: 24
                          195.91.181.0/24 maxlen: 24
                          195.91.182.0/24 maxlen: 24
                          195.91.184.0/24 maxlen: 24
                          195.91.187.0/24 maxlen: 24
                          195.91.188.0/24 maxlen: 24
                          195.91.191.0/24 maxlen: 24
                          195.91.195.0/24 maxlen: 24
                          195.91.196.0/24 maxlen: 24
                          195.91.197.0/24 maxlen: 24
                          195.91.204.0/24 maxlen: 24
                          195.91.207.0/24 maxlen: 24
                          195.91.208.0/24 maxlen: 24
                          195.91.209.0/24 maxlen: 24
                          195.91.210.0/24 maxlen: 24
                          195.91.211.0/24 maxlen: 24
                          195.91.213.0/24 maxlen: 24
                          195.91.215.0/24 maxlen: 24
                          195.91.217.0/24 maxlen: 24
                          195.91.218.0/24 maxlen: 24
                          195.91.219.0/24 maxlen: 24
                          195.91.220.0/24 maxlen: 24
                          195.91.221.0/24 maxlen: 24
                          195.91.222.0/24 maxlen: 24
                          195.91.223.0/24 maxlen: 24
                          195.91.224.0/24 maxlen: 24
                          195.91.225.0/24 maxlen: 24
                          195.91.226.0/24 maxlen: 24
                          195.91.227.0/24 maxlen: 24
                          195.91.228.0/24 maxlen: 24
                          195.91.229.0/24 maxlen: 24
                          195.91.230.0/24 maxlen: 24
                          195.91.231.0/24 maxlen: 24
                          195.91.232.0/24 maxlen: 24
                          195.91.233.0/24 maxlen: 24
                          195.91.234.0/24 maxlen: 24
                          195.91.235.0/24 maxlen: 24
                          195.91.236.0/24 maxlen: 24
                          195.91.237.0/24 maxlen: 24
                          195.91.238.0/24 maxlen: 24
                          195.91.239.0/24 maxlen: 24
                          195.91.240.0/24 maxlen: 24
                          195.91.241.0/24 maxlen: 24
                          195.91.242.0/24 maxlen: 24
                          195.91.243.0/24 maxlen: 24
                          195.91.244.0/24 maxlen: 24
                          195.91.245.0/24 maxlen: 24
                          195.91.246.0/24 maxlen: 24
                          195.91.247.0/24 maxlen: 24
                          195.91.252.0/24 maxlen: 24
                          195.91.254.0/24 maxlen: 24
                          195.91.255.0/24 maxlen: 24
                          2a02:2698:9800::/38 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:77:a8:ee:dc:37:3f:b8:aa:27:32:4b:a4:d2:cd:af:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: Feb  5 05:06:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=167678cfdd0d131ffd666d15048ebc2ceb972479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:56:87:be:52:cf:46:c5:20:5c:e8:00:7f:
                    bd:bc:85:a8:ed:a6:d0:79:10:17:f4:3f:8e:34:96:
                    34:87:64:dc:a4:e2:ec:e4:c7:22:e0:e3:a5:91:3a:
                    f8:0f:2e:78:ed:d7:bc:88:55:45:94:49:ce:1f:9e:
                    7b:c0:e4:98:99:9d:b3:6d:e0:28:13:de:0d:75:92:
                    5f:67:69:d8:92:11:0d:1c:c1:15:db:dd:f4:03:ab:
                    41:e3:c4:ed:2e:52:8d:09:30:cd:c1:5d:1b:48:13:
                    76:18:3d:63:98:2e:99:f4:c6:5f:c7:5f:73:8d:8b:
                    12:69:11:be:c5:c5:72:99:94:c7:87:3d:5e:49:6a:
                    ca:33:64:05:44:47:53:ea:22:5f:9e:fb:36:bc:09:
                    28:ef:63:bb:c0:9c:b1:2e:4b:be:79:ec:d3:48:6f:
                    94:2e:19:2f:8d:f5:50:9e:b6:12:b9:b1:10:fd:0d:
                    41:43:a9:f0:b9:1f:b7:70:66:52:62:08:78:1a:03:
                    b6:ff:91:2d:7f:42:09:60:61:77:6b:44:c8:b3:74:
                    e9:6b:03:1d:01:27:2a:bb:45:94:2e:95:8d:a3:3f:
                    54:70:ab:3d:36:3e:8e:7f:8c:ff:9f:40:73:72:8a:
                    ef:99:dc:ba:f8:64:2e:f0:c1:3b:57:de:f4:6c:e9:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:76:78:CF:DD:0D:13:1F:FD:66:6D:15:04:8E:BC:2C:EB:97:24:79
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/FnZ4z90NEx_9Zm0VBI68LOuXJHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.62.75.0/24
                  86.62.79.0/24
                  86.62.84.0/24
                  86.62.92.0/24
                  86.62.94.0/24
                  86.62.96.0/24
                  86.62.98.0/23
                  86.62.102.0/23
                  86.62.110.0/24
                  86.62.112.0/21
                  86.62.125.0/24
                  195.54.210.0/24
                  195.91.133.0/24
                  195.91.138.0/24
                  195.91.144.0/21
                  195.91.153.0/24
                  195.91.156.0/24
                  195.91.160.0/24
                  195.91.165.0-195.91.166.255
                  195.91.168.0/21
                  195.91.178.0-195.91.182.255
                  195.91.184.0/24
                  195.91.187.0-195.91.188.255
                  195.91.191.0/24
                  195.91.195.0-195.91.197.255
                  195.91.204.0/24
                  195.91.207.0-195.91.211.255
                  195.91.213.0/24
                  195.91.215.0/24
                  195.91.217.0-195.91.247.255
                  195.91.252.0/24
                  195.91.254.0/23
                IPv6:
                  2a02:2698:9800::/38

    Signature Algorithm: sha256WithRSAEncryption
         08:aa:56:bc:81:7d:69:18:90:d1:7f:14:3a:9f:c6:18:43:15:
         d7:51:9e:0e:15:e3:95:6c:f3:41:83:e6:5a:c0:57:42:b8:ac:
         c2:e0:3c:93:42:74:31:e5:1f:e5:37:72:d8:57:a5:cb:89:4f:
         47:4c:15:c9:19:ab:7d:9a:a5:69:94:11:ca:ce:9c:ff:03:63:
         cf:7c:34:bb:3d:1c:3e:6a:45:00:c5:ca:33:41:aa:e5:4d:9b:
         e4:3f:29:d8:40:32:5a:d0:8f:d4:69:91:8b:71:bf:8d:c9:dd:
         b7:91:85:44:90:3f:d0:af:7f:30:59:4c:1a:fb:46:03:2e:06:
         dd:2e:c0:b9:e9:8e:f7:86:c6:3b:b7:fa:97:38:06:98:7e:12:
         1c:92:f3:ac:05:b8:90:26:b6:d7:a3:c8:32:4e:f1:09:26:04:
         a8:4f:79:74:37:4c:9a:f7:f8:3d:e3:d6:5d:84:e2:be:62:4c:
         e6:53:5c:16:f9:d4:c7:85:55:ee:5d:a4:fe:59:3f:07:57:8f:
         7c:35:8e:0e:4f:f7:1e:ed:36:41:5e:dd:15:50:f2:01:11:89:
         f1:81:81:73:2c:8a:2f:a6:cf:62:ac:c7:9f:e5:b6:d5:d5:63:
         1a:01:f2:f2:ed:db:06:d5:bb:65:ce:e2:b6:77:b4:1e:a3:ec:
         0e:3f:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:52 2025 by rpki-client