Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QMo4fqBkYWu3GAYWEkjma6CxzTI.roa
File:                     QMo4fqBkYWu3GAYWEkjma6CxzTI.roa (raw, json)
Hash identifier:          pxGEgmTuW3NYwYgd65fVNDKMgER0/10YPZpJ5fPv9zo=
Subject key identifier:   40:CA:38:7E:A0:64:61:6B:B7:18:06:16:12:48:E6:6B:A0:B1:CD:32
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019421B20F4EA229A45CFCB4CF8468540D0A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QMo4fqBkYWu3GAYWEkjma6CxzTI.roa
Signing time:             Wed 01 Jan 2025 11:48:24 +0000
ROA not before:           Wed 01 Jan 2025 11:48:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20804
IP address blocks:        81.15.128.0/17 maxlen: 17
                          81.15.128.0/23 maxlen: 23
                          81.15.130.0/24 maxlen: 24
                          81.15.132.0/23 maxlen: 23
                          81.15.133.0/24 maxlen: 24
                          81.15.135.0/24 maxlen: 24
                          81.15.136.0/23 maxlen: 23
                          81.15.148.0/22 maxlen: 22
                          81.15.150.0/24 maxlen: 24
                          81.15.156.0/24 maxlen: 24
                          81.15.159.0/24 maxlen: 24
                          81.15.168.0/21 maxlen: 21
                          81.15.174.0/24 maxlen: 24
                          81.15.175.0/24 maxlen: 24
                          81.15.180.0/22 maxlen: 22
                          81.15.182.0/23 maxlen: 23
                          81.15.184.0/23 maxlen: 23
                          81.15.185.0/24 maxlen: 24
                          81.15.187.0/24 maxlen: 24
                          81.15.190.0/24 maxlen: 24
                          81.15.191.0/24 maxlen: 24
                          81.15.192.0/22 maxlen: 22
                          81.15.194.0/24 maxlen: 24
                          81.15.195.0/24 maxlen: 24
                          81.15.198.0/23 maxlen: 23
                          81.15.198.0/24 maxlen: 24
                          81.15.199.0/24 maxlen: 24
                          81.15.201.0/24 maxlen: 24
                          81.15.202.0/24 maxlen: 24
                          81.15.203.0/24 maxlen: 24
                          81.15.204.0/23 maxlen: 23
                          81.15.209.0/24 maxlen: 24
                          81.15.214.0/23 maxlen: 23
                          81.15.216.0/24 maxlen: 24
                          81.15.217.0/24 maxlen: 24
                          81.15.218.0/23 maxlen: 23
                          81.15.218.0/24 maxlen: 24
                          81.15.222.0/23 maxlen: 23
                          81.15.222.0/24 maxlen: 24
                          81.15.224.0/22 maxlen: 22
                          81.15.225.0/24 maxlen: 24
                          81.15.227.0/24 maxlen: 24
                          81.15.230.0/24 maxlen: 24
                          81.15.232.0/22 maxlen: 22
                          81.15.232.0/24 maxlen: 24
                          81.15.236.0/24 maxlen: 24
                          81.15.237.0/24 maxlen: 24
                          81.15.238.0/24 maxlen: 24
                          81.15.239.0/24 maxlen: 24
                          81.15.240.0/23 maxlen: 23
                          81.15.242.0/24 maxlen: 24
                          81.15.244.0/23 maxlen: 23
                          81.15.254.0/23 maxlen: 23
                          81.15.254.0/24 maxlen: 24
                          81.15.255.0/24 maxlen: 24
                          82.177.0.0/16 maxlen: 16
                          82.177.0.0/23 maxlen: 23
                          82.177.2.0/24 maxlen: 24
                          82.177.4.0/22 maxlen: 22
                          82.177.9.0/24 maxlen: 24
                          82.177.10.0/23 maxlen: 23
                          82.177.14.0/23 maxlen: 23
                          82.177.16.0/24 maxlen: 24
                          82.177.19.0/24 maxlen: 24
                          82.177.20.0/22 maxlen: 22
                          82.177.21.0/24 maxlen: 24
                          82.177.27.0/24 maxlen: 24
                          82.177.35.0/24 maxlen: 24
                          82.177.37.0/24 maxlen: 24
                          82.177.41.0/24 maxlen: 24
                          82.177.42.0/23 maxlen: 23
                          82.177.43.0/24 maxlen: 24
                          82.177.44.0/22 maxlen: 22
                          82.177.46.0/24 maxlen: 24
                          82.177.48.0/21 maxlen: 21
                          82.177.48.0/24 maxlen: 24
                          82.177.50.0/24 maxlen: 24
                          82.177.52.0/23 maxlen: 23
                          82.177.54.0/24 maxlen: 24
                          82.177.59.0/24 maxlen: 24
                          82.177.68.0/22 maxlen: 22
                          82.177.72.0/21 maxlen: 21
                          82.177.80.0/21 maxlen: 21
                          82.177.88.0/22 maxlen: 22
                          82.177.90.0/23 maxlen: 23
                          82.177.90.0/24 maxlen: 24
                          82.177.91.0/24 maxlen: 24
                          82.177.102.0/23 maxlen: 24
                          82.177.108.0/23 maxlen: 23
                          82.177.111.0/24 maxlen: 24
                          82.177.112.0/22 maxlen: 22
                          82.177.116.0/22 maxlen: 22
                          82.177.119.0/24 maxlen: 24
                          82.177.120.0/21 maxlen: 21
                          82.177.122.0/24 maxlen: 24
                          82.177.127.0/24 maxlen: 24
                          82.177.130.0/24 maxlen: 24
                          82.177.132.0/23 maxlen: 23
                          82.177.133.0/24 maxlen: 24
                          82.177.140.0/23 maxlen: 23
                          82.177.144.0/20 maxlen: 20
                          82.177.160.0/24 maxlen: 24
                          82.177.164.0/22 maxlen: 22
                          82.177.164.0/24 maxlen: 24
                          82.177.165.0/24 maxlen: 24
                          82.177.168.0/21 maxlen: 21
                          82.177.176.0/21 maxlen: 21
                          82.177.177.0/24 maxlen: 24
                          82.177.179.0/24 maxlen: 24
                          82.177.182.0/24 maxlen: 24
                          82.177.183.0/24 maxlen: 24
                          82.177.188.0/24 maxlen: 24
                          82.177.191.0/24 maxlen: 24
                          82.177.192.0/24 maxlen: 24
                          82.177.194.0/24 maxlen: 24
                          82.177.195.0/24 maxlen: 24
                          82.177.196.0/22 maxlen: 22
                          82.177.196.0/24 maxlen: 24
                          82.177.199.0/24 maxlen: 24
                          82.177.206.0/24 maxlen: 24
                          82.177.207.0/24 maxlen: 24
                          82.177.208.0/24 maxlen: 24
                          82.177.244.0/23 maxlen: 23
                          82.177.247.0/24 maxlen: 24
                          82.177.249.0/24 maxlen: 24
                          82.177.251.0/24 maxlen: 24
                          82.177.252.0/24 maxlen: 24
                          82.177.254.0/23 maxlen: 23
                          88.220.0.0/17 maxlen: 17
                          88.220.32.0/21 maxlen: 21
                          88.220.40.0/22 maxlen: 22
                          88.220.44.0/24 maxlen: 24
                          88.220.46.0/23 maxlen: 23
                          88.220.48.0/23 maxlen: 23
                          88.220.50.0/23 maxlen: 23
                          88.220.52.0/23 maxlen: 23
                          88.220.52.0/24 maxlen: 24
                          88.220.58.0/23 maxlen: 23
                          88.220.60.0/23 maxlen: 23
                          88.220.64.0/22 maxlen: 22
                          88.220.65.0/24 maxlen: 24
                          88.220.66.0/23 maxlen: 23
                          88.220.81.0/24 maxlen: 24
                          88.220.84.0/24 maxlen: 24
                          88.220.107.0/24 maxlen: 24
                          88.220.113.0/24 maxlen: 24
                          88.220.114.0/24 maxlen: 24
                          88.220.116.0/24 maxlen: 24
                          88.220.117.0/24 maxlen: 24
                          88.220.120.0/22 maxlen: 22
                          88.220.128.0/18 maxlen: 18
                          88.220.132.0/23 maxlen: 23
                          88.220.152.0/23 maxlen: 23
                          88.220.165.0/24 maxlen: 24
                          88.220.181.0/24 maxlen: 24
                          88.220.185.0/24 maxlen: 24
                          88.220.192.0/20 maxlen: 20
                          88.220.208.0/20 maxlen: 20
                          88.220.224.0/19 maxlen: 19
                          88.220.252.0/24 maxlen: 24
                          88.220.253.0/24 maxlen: 24
                          194.183.32.0/19 maxlen: 19
                          194.183.32.0/23 maxlen: 23
                          194.183.34.0/23 maxlen: 23
                          194.183.48.0/22 maxlen: 22
                          194.183.54.0/24 maxlen: 24
                          194.183.55.0/24 maxlen: 24
                          194.183.56.0/23 maxlen: 23
                          195.136.0.0/16 maxlen: 16
                          195.136.0.0/23 maxlen: 23
                          195.136.4.0/22 maxlen: 22
                          195.136.16.0/22 maxlen: 22
                          195.136.21.0/24 maxlen: 24
                          195.136.25.0/24 maxlen: 24
                          195.136.27.0/24 maxlen: 24
                          195.136.34.0/23 maxlen: 23
                          195.136.36.0/24 maxlen: 24
                          195.136.38.0/23 maxlen: 23
                          195.136.48.0/22 maxlen: 22
                          195.136.48.0/24 maxlen: 24
                          195.136.65.0/24 maxlen: 24
                          195.136.88.0/22 maxlen: 22
                          195.136.112.0/21 maxlen: 21
                          195.136.113.0/24 maxlen: 24
                          195.136.114.0/23 maxlen: 23
                          195.136.120.0/24 maxlen: 24
                          195.136.122.0/24 maxlen: 24
                          195.136.148.0/22 maxlen: 22
                          195.136.156.0/23 maxlen: 23
                          195.136.164.0/23 maxlen: 23
                          195.136.174.0/23 maxlen: 23
                          195.136.176.0/22 maxlen: 22
                          195.136.248.0/21 maxlen: 21
                          195.136.252.0/24 maxlen: 24
                          213.172.160.0/19 maxlen: 19
                          2a00:4120::/32 maxlen: 32
                          2a00:4120:8000:2::/64 maxlen: 64
                          2a00:4120:8000:4::/64 maxlen: 64
                          2a00:4120:8000:5::/64 maxlen: 64
                          2a00:4120:8000:70::/65 maxlen: 65
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:0f:4e:a2:29:a4:5c:fc:b4:cf:84:68:54:0d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 11:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=40ca387ea064616bb71806161248e66ba0b1cd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:3f:e1:8a:db:6d:af:05:7b:1f:67:94:82:
                    88:ae:50:9e:bf:21:67:3e:dc:12:dc:03:70:d4:d9:
                    93:52:b0:e7:be:fa:07:db:48:fc:5f:e3:79:99:6c:
                    a5:8c:c7:01:df:86:43:f3:8a:bd:e6:05:57:7a:f6:
                    7d:66:aa:9f:79:05:f6:f0:cb:48:50:e7:01:7f:b7:
                    42:59:80:15:4b:15:9a:ed:d2:6b:97:a3:b9:1d:8d:
                    a7:7f:25:ac:7f:2e:52:4c:6b:23:76:86:80:63:a8:
                    1a:63:a8:c7:be:29:b7:c0:47:eb:60:21:59:b5:b4:
                    aa:61:de:5e:bc:82:d7:81:fe:a2:35:ba:69:83:f3:
                    73:60:ea:8c:6a:92:f6:41:74:52:c2:9d:ff:59:38:
                    e6:b9:9e:94:1e:94:e1:f3:d1:34:50:d4:67:ad:87:
                    c7:c4:dd:00:4a:b5:98:d0:e7:c7:d4:da:b5:60:77:
                    fe:59:6a:ea:63:5c:83:80:fc:70:0e:df:65:dd:c4:
                    43:77:f8:1b:59:7e:cf:f3:2d:7c:2c:fc:9b:6a:c5:
                    33:71:68:c6:c1:ff:05:83:d9:83:83:fb:64:81:fd:
                    ce:f9:b9:2e:d7:71:48:24:e9:82:cb:09:22:e9:42:
                    ac:3f:d5:74:ce:04:61:77:39:f7:c2:fe:de:9f:e0:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CA:38:7E:A0:64:61:6B:B7:18:06:16:12:48:E6:6B:A0:B1:CD:32
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/QMo4fqBkYWu3GAYWEkjma6CxzTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.128.0/17
                  82.177.0.0/16
                  88.220.0.0/16
                  194.183.32.0/19
                  195.136.0.0/16
                  213.172.160.0/19
                IPv6:
                  2a00:4120::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:1b:a3:66:17:ae:70:e7:31:15:8e:5a:98:e3:66:91:63:e6:
         8c:1c:aa:64:ac:c8:3a:54:da:a7:09:11:e3:a3:2e:94:91:41:
         dc:58:09:ca:5f:74:cb:27:52:07:b6:c7:39:89:1f:a4:1d:c5:
         b2:1b:5d:ba:54:e2:73:19:a1:67:44:6a:bf:22:b2:94:a3:98:
         42:dd:08:40:78:71:b0:aa:12:c9:65:86:f5:0e:4a:48:32:22:
         ee:68:1c:cd:36:f7:53:7d:c0:ea:81:bb:c7:5e:47:4e:4e:1f:
         fe:0a:8e:d3:fb:e3:56:98:3f:85:f1:93:1f:84:b1:70:7a:7c:
         5a:36:9c:32:dd:33:9d:db:98:50:ae:82:1c:b1:11:76:e6:e4:
         6b:d3:1b:12:5b:be:54:0b:41:1e:f6:2c:c1:87:25:dd:28:79:
         11:e5:8a:df:91:b1:6c:7c:07:1b:b8:51:15:b8:dc:de:49:37:
         49:08:fe:a7:b3:83:c5:08:a9:c6:03:34:27:65:01:48:76:7a:
         15:62:c3:4a:a5:27:bc:50:49:ea:44:04:7b:c3:db:8e:25:ee:
         5f:50:0c:18:0f:9b:4b:6b:f5:6f:0d:31:44:02:c3:aa:82:20:
         f2:8f:01:f4:ee:79:08:69:8e:90:ad:36:bd:b6:99:e5:8e:7d:
         98:17:2c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:54 2025 by rpki-client