Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/M6NQ_zrBylCaUcovBQfOP20BCD8.roa
File:                     M6NQ_zrBylCaUcovBQfOP20BCD8.roa (raw, json)
Hash identifier:          xAHnmrSkRIqDu2M5elGu4oSf4o7e4eZxG8kM8uurt1M=
Subject key identifier:   33:A3:50:FF:3A:C1:CA:50:9A:51:CA:2F:05:07:CE:3F:6D:01:08:3F
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       01936772FF7348FCD509783DE98B02663F22
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/M6NQ_zrBylCaUcovBQfOP20BCD8.roa
Signing time:             Tue 26 Nov 2024 07:50:09 +0000
ROA not before:           Tue 26 Nov 2024 07:50:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206065
IP address blocks:        31.217.208.0/21 maxlen: 24
                          37.19.80.0/20 maxlen: 24
                          37.114.192.0/18 maxlen: 24
                          37.114.192.0/20 maxlen: 24
                          37.114.204.0/23 maxlen: 23
                          37.114.208.0/21 maxlen: 24
                          37.114.216.0/22 maxlen: 24
                          37.114.220.0/22 maxlen: 24
                          37.114.224.0/22 maxlen: 24
                          37.114.225.0/24 maxlen: 24
                          37.114.228.0/22 maxlen: 24
                          37.114.232.0/21 maxlen: 24
                          37.114.240.0/22 maxlen: 24
                          37.114.244.0/22 maxlen: 24
                          37.114.246.0/23 maxlen: 24
                          37.114.248.0/21 maxlen: 24
                          37.114.252.0/24 maxlen: 24
                          37.114.253.0/24 maxlen: 24
                          37.114.254.0/24 maxlen: 24
                          37.114.255.0/24 maxlen: 24
                          37.191.87.0/24 maxlen: 24
                          37.191.90.0/23 maxlen: 24
                          37.221.0.0/18 maxlen: 24
                          37.221.0.0/20 maxlen: 20
                          37.235.16.0/20 maxlen: 24
                          37.235.19.0/24 maxlen: 24
                          45.128.140.0/22 maxlen: 24
                          45.144.124.0/22 maxlen: 24
                          46.32.5.0/24 maxlen: 24
                          46.32.9.0/24 maxlen: 24
                          46.32.14.0/24 maxlen: 24
                          46.34.164.0/22 maxlen: 24
                          46.34.168.0/21 maxlen: 24
                          46.34.178.0/23 maxlen: 24
                          46.34.180.0/22 maxlen: 24
                          46.34.184.0/22 maxlen: 24
                          46.34.188.0/22 maxlen: 24
                          78.158.182.0/23 maxlen: 24
                          79.132.200.0/22 maxlen: 24
                          79.132.213.0/24 maxlen: 24
                          79.132.217.0/24 maxlen: 24
                          79.132.218.0/23 maxlen: 24
                          79.132.220.0/23 maxlen: 24
                          80.71.113.0/24 maxlen: 24
                          80.71.122.0/23 maxlen: 24
                          80.71.124.0/23 maxlen: 24
                          80.71.127.0/24 maxlen: 24
                          81.29.243.0/24 maxlen: 24
                          81.29.248.0/21 maxlen: 24
                          81.29.248.0/23 maxlen: 23
                          81.29.250.0/23 maxlen: 24
                          81.29.250.0/24 maxlen: 24
                          81.29.251.0/24 maxlen: 24
                          81.29.254.0/24 maxlen: 24
                          81.91.144.0/20 maxlen: 24
                          81.91.144.0/22 maxlen: 24
                          81.91.148.0/23 maxlen: 24
                          81.91.150.0/23 maxlen: 24
                          81.91.152.0/21 maxlen: 24
                          86.109.32.0/23 maxlen: 24
                          86.109.36.0/22 maxlen: 24
                          86.109.41.0/24 maxlen: 24
                          86.109.46.0/23 maxlen: 24
                          86.109.53.0/24 maxlen: 24
                          86.109.56.0/22 maxlen: 24
                          86.109.58.0/23 maxlen: 24
                          86.109.62.0/23 maxlen: 24
                          87.247.180.0/23 maxlen: 24
                          91.184.64.0/20 maxlen: 24
                          92.61.184.0/21 maxlen: 24
                          92.119.68.0/22 maxlen: 24
                          94.139.160.0/20 maxlen: 24
                          109.230.64.0/21 maxlen: 24
                          109.230.80.0/20 maxlen: 24
                          109.230.80.0/22 maxlen: 24
                          109.230.82.0/24 maxlen: 24
                          109.230.88.0/21 maxlen: 24
                          109.230.88.0/23 maxlen: 24
                          109.230.90.0/24 maxlen: 24
                          176.221.65.0/24 maxlen: 24
                          185.12.62.0/24 maxlen: 24
                          185.21.76.0/22 maxlen: 24
                          185.30.76.0/22 maxlen: 24
                          185.40.240.0/22 maxlen: 24
                          185.45.188.0/22 maxlen: 24
                          185.70.60.0/22 maxlen: 24
                          185.82.164.0/23 maxlen: 24
                          185.85.68.0/22 maxlen: 24
                          185.104.228.0/24 maxlen: 24
                          185.133.152.0/22 maxlen: 24
                          185.142.233.0/24 maxlen: 24
                          185.142.234.0/23 maxlen: 24
                          185.172.0.0/22 maxlen: 24
                          185.190.20.0/22 maxlen: 24
                          185.197.68.0/22 maxlen: 24
                          185.208.150.0/23 maxlen: 24
                          188.75.92.0/24 maxlen: 24
                          188.75.94.0/24 maxlen: 24
                          188.75.102.0/23 maxlen: 24
                          188.75.107.0/24 maxlen: 24
                          188.75.110.0/23 maxlen: 24
                          188.75.113.0/24 maxlen: 24
                          188.75.114.0/23 maxlen: 24
                          188.75.116.0/23 maxlen: 24
                          188.75.122.0/23 maxlen: 24
                          188.121.128.0/19 maxlen: 24
                          188.121.128.0/23 maxlen: 24
                          188.121.128.0/24 maxlen: 24
                          188.121.129.0/24 maxlen: 24
                          188.121.136.0/21 maxlen: 24
                          188.121.144.0/20 maxlen: 24
                          188.121.144.0/22 maxlen: 24
                          188.121.146.0/24 maxlen: 24
                          188.121.148.0/23 maxlen: 24
                          188.121.152.0/22 maxlen: 24
                          188.121.156.0/24 maxlen: 24
                          188.121.157.0/24 maxlen: 24
                          188.121.158.0/23 maxlen: 24
                          188.136.148.0/24 maxlen: 24
                          188.136.174.0/24 maxlen: 24
                          188.136.176.0/21 maxlen: 24
                          188.136.184.0/24 maxlen: 24
                          188.136.186.0/23 maxlen: 24
                          188.136.188.0/23 maxlen: 24
                          188.136.195.0/24 maxlen: 24
                          188.136.197.0/24 maxlen: 24
                          188.136.198.0/23 maxlen: 24
                          188.136.201.0/24 maxlen: 24
                          188.136.202.0/23 maxlen: 24
                          188.136.208.0/24 maxlen: 24
                          188.136.212.0/22 maxlen: 24
                          188.136.216.0/22 maxlen: 24
                          188.136.218.0/23 maxlen: 24
                          188.136.220.0/23 maxlen: 24
                          188.136.222.0/23 maxlen: 24
                          213.195.16.0/22 maxlen: 24
                          213.207.192.0/20 maxlen: 24
                          213.207.193.0/24 maxlen: 24
                          213.207.194.0/24 maxlen: 24
                          213.207.201.0/24 maxlen: 24
                          217.66.208.0/24 maxlen: 24
                          217.66.211.0/24 maxlen: 24
                          2a0c:100::/29 maxlen: 48
                          2a0c:104::/30 maxlen: 30
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:72:ff:73:48:fc:d5:09:78:3d:e9:8b:02:66:3f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Nov 26 07:50:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=33a350ff3ac1ca509a51ca2f0507ce3f6d01083f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:2a:df:5e:74:ad:b3:40:4a:11:99:0b:1e:
                    57:09:f3:1a:e6:02:a0:d1:1d:78:35:1e:dc:cd:0c:
                    87:2e:30:ce:fa:33:71:52:69:d7:55:6d:b0:c8:aa:
                    11:7b:7b:3d:8b:0f:5e:48:4b:fd:66:cd:6b:08:7b:
                    94:f5:f2:37:73:74:28:d9:73:31:25:03:80:82:4d:
                    df:11:f7:ab:07:70:a7:05:09:c5:85:a0:4d:d2:89:
                    2b:2a:1c:99:7d:e5:45:66:c0:c7:e6:3a:23:28:ea:
                    db:e0:63:95:bd:af:e4:b4:22:76:84:b3:90:cd:7a:
                    9c:0d:57:eb:5a:e2:23:c3:ea:d1:97:42:e1:39:71:
                    9a:1a:1b:12:60:e3:b4:ed:05:0b:9b:77:4a:f2:db:
                    94:d2:18:ed:03:b5:12:6b:25:a7:62:54:28:07:09:
                    1e:c3:c4:f3:e0:ae:60:ca:b0:ae:cc:7d:b9:aa:6a:
                    13:ee:e4:41:ba:ab:24:33:ac:79:93:e4:6b:2d:9c:
                    b3:c9:da:10:44:ef:30:5e:61:0e:47:0b:38:2d:a8:
                    36:95:d6:6e:b5:fb:ba:29:65:e4:1c:07:ca:b7:d7:
                    6e:19:50:5e:e4:51:c6:55:25:69:30:b9:f7:5a:2a:
                    de:0a:29:c3:c0:5f:87:fc:49:d3:67:6b:e7:ab:cb:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A3:50:FF:3A:C1:CA:50:9A:51:CA:2F:05:07:CE:3F:6D:01:08:3F
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/M6NQ_zrBylCaUcovBQfOP20BCD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.217.208.0/21
                  37.19.80.0/20
                  37.114.192.0/18
                  37.191.87.0/24
                  37.191.90.0/23
                  37.221.0.0/18
                  37.235.16.0/20
                  45.128.140.0/22
                  45.144.124.0/22
                  46.32.5.0/24
                  46.32.9.0/24
                  46.32.14.0/24
                  46.34.164.0-46.34.175.255
                  46.34.178.0-46.34.191.255
                  78.158.182.0/23
                  79.132.200.0/22
                  79.132.213.0/24
                  79.132.217.0-79.132.221.255
                  80.71.113.0/24
                  80.71.122.0-80.71.125.255
                  80.71.127.0/24
                  81.29.243.0/24
                  81.29.248.0/21
                  81.91.144.0/20
                  86.109.32.0/23
                  86.109.36.0/22
                  86.109.41.0/24
                  86.109.46.0/23
                  86.109.53.0/24
                  86.109.56.0/22
                  86.109.62.0/23
                  87.247.180.0/23
                  91.184.64.0/20
                  92.61.184.0/21
                  92.119.68.0/22
                  94.139.160.0/20
                  109.230.64.0/21
                  109.230.80.0/20
                  176.221.65.0/24
                  185.12.62.0/24
                  185.21.76.0/22
                  185.30.76.0/22
                  185.40.240.0/22
                  185.45.188.0/22
                  185.70.60.0/22
                  185.82.164.0/23
                  185.85.68.0/22
                  185.104.228.0/24
                  185.133.152.0/22
                  185.142.233.0-185.142.235.255
                  185.172.0.0/22
                  185.190.20.0/22
                  185.197.68.0/22
                  185.208.150.0/23
                  188.75.92.0/24
                  188.75.94.0/24
                  188.75.102.0/23
                  188.75.107.0/24
                  188.75.110.0/23
                  188.75.113.0-188.75.117.255
                  188.75.122.0/23
                  188.121.128.0/19
                  188.136.148.0/24
                  188.136.174.0/24
                  188.136.176.0-188.136.184.255
                  188.136.186.0-188.136.189.255
                  188.136.195.0/24
                  188.136.197.0-188.136.199.255
                  188.136.201.0-188.136.203.255
                  188.136.208.0/24
                  188.136.212.0-188.136.223.255
                  213.195.16.0/22
                  213.207.192.0/20
                  217.66.208.0/24
                  217.66.211.0/24
                IPv6:
                  2a0c:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:3b:34:cb:65:c0:9c:ea:fa:de:c8:45:32:ac:f4:a1:9a:
         f0:a0:47:db:b9:75:60:e7:ad:1f:ae:76:35:f1:82:4d:ab:ca:
         7d:e6:e4:6e:42:cf:a3:51:57:fa:e3:62:95:ee:4b:fb:9d:4d:
         ae:11:15:02:d7:c9:2f:2e:d0:b0:96:c4:0f:4e:5b:ba:6d:55:
         d1:62:a6:3e:35:52:f7:06:1e:e6:33:29:b6:51:bb:8f:81:65:
         01:c8:1a:da:07:35:79:b5:f6:ea:f3:fb:02:26:14:a7:7b:d1:
         c5:75:0b:0b:56:21:88:52:28:80:8d:36:9b:54:30:6d:fb:50:
         ed:ce:28:08:8b:ff:9d:4b:61:fe:4d:8e:8d:7b:3b:e3:08:58:
         25:77:05:07:ff:39:12:a8:9d:e4:37:b6:9e:d4:2e:0c:ab:e4:
         79:3e:e8:6a:d4:5a:b9:b9:9f:9f:da:91:3c:da:06:9a:e3:f2:
         d1:74:11:92:60:6c:b2:51:3f:01:61:17:b5:68:29:dd:66:e4:
         45:6c:f4:6c:f4:49:05:d3:d6:93:9d:24:2b:e9:73:21:b6:2f:
         3d:eb:8a:c5:7c:19:a5:e8:ff:d4:2d:78:f2:c4:1b:40:8e:01:
         30:af:5e:85:a6:f0:15:d5:ce:47:21:1f:57:a6:f9:41:c4:f4:
         5d:d3:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:39 2025 by rpki-client