Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/e-9_WmNQlDdvxFgjR2Kwc1ASi9w.roa
File:                     e-9_WmNQlDdvxFgjR2Kwc1ASi9w.roa (raw, json)
Hash identifier:          aVqmgO857bQj0EVRvB18V0Ko2ibCdfiOrJ0FH/nSLug=
Subject key identifier:   7B:EF:7F:5A:63:50:94:37:6F:C4:58:23:47:62:B0:73:50:12:8B:DC
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       0192BE301C54436C456BABF589233685AA41
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/e-9_WmNQlDdvxFgjR2Kwc1ASi9w.roa
Signing time:             Thu 24 Oct 2024 11:01:16 +0000
ROA not before:           Thu 24 Oct 2024 11:01:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212046
IP address blocks:        82.140.133.0/24 maxlen: 24
                          82.140.152.0/24 maxlen: 24
                          82.140.171.0/24 maxlen: 24
                          82.140.176.0/24 maxlen: 24
                          82.140.179.0/24 maxlen: 24
                          82.140.184.0/24 maxlen: 24
                          82.140.185.0/24 maxlen: 24
                          84.46.136.0/24 maxlen: 24
                          84.46.146.0/24 maxlen: 24
                          84.46.147.0/24 maxlen: 24
                          84.46.148.0/24 maxlen: 24
                          84.46.149.0/24 maxlen: 24
                          84.46.160.0/24 maxlen: 24
                          84.46.161.0/24 maxlen: 24
                          84.46.162.0/24 maxlen: 24
                          84.46.163.0/24 maxlen: 24
                          84.46.168.0/24 maxlen: 24
                          84.46.169.0/24 maxlen: 24
                          84.46.204.0/24 maxlen: 24
                          84.46.205.0/24 maxlen: 24
                          84.46.207.0/24 maxlen: 24
                          86.38.6.0/24 maxlen: 24
                          86.38.18.0/24 maxlen: 24
                          86.38.28.0/24 maxlen: 24
                          86.38.29.0/24 maxlen: 24
                          86.38.30.0/24 maxlen: 24
                          86.38.31.0/24 maxlen: 24
                          86.38.33.0/24 maxlen: 24
                          86.38.36.0/24 maxlen: 24
                          86.38.38.0/24 maxlen: 24
                          86.38.39.0/24 maxlen: 24
                          86.38.100.0/24 maxlen: 24
                          86.38.102.0/24 maxlen: 24
                          86.38.122.0/24 maxlen: 24
                          86.38.124.0/24 maxlen: 24
                          86.38.125.0/24 maxlen: 24
                          86.38.126.0/24 maxlen: 24
                          86.38.152.0/24 maxlen: 24
                          86.38.153.0/24 maxlen: 24
                          86.38.154.0/24 maxlen: 24
                          86.38.161.0/24 maxlen: 24
                          86.38.165.0/24 maxlen: 24
                          86.38.166.0/24 maxlen: 24
                          86.38.167.0/24 maxlen: 24
                          86.38.168.0/24 maxlen: 24
                          86.38.169.0/24 maxlen: 24
                          86.38.171.0/24 maxlen: 24
                          86.38.173.0/24 maxlen: 24
                          86.38.174.0/24 maxlen: 24
                          86.38.176.0/24 maxlen: 24
                          86.38.188.0/24 maxlen: 24
                          86.38.201.0/24 maxlen: 24
                          86.38.215.0/24 maxlen: 24
                          86.38.234.0/24 maxlen: 24
                          86.38.236.0/24 maxlen: 24
                          89.116.14.0/24 maxlen: 24
                          89.116.71.0/24 maxlen: 24
                          89.116.77.0/24 maxlen: 24
                          89.116.78.0/24 maxlen: 24
                          89.116.90.0/24 maxlen: 24
                          89.116.93.0/24 maxlen: 24
                          89.116.97.0/24 maxlen: 24
                          89.116.124.0/24 maxlen: 24
                          89.116.129.0/24 maxlen: 24
                          89.116.143.0/24 maxlen: 24
                          89.116.151.0/24 maxlen: 24
                          89.116.155.0/24 maxlen: 24
                          89.116.160.0/24 maxlen: 24
                          89.116.162.0/24 maxlen: 24
                          89.116.174.0/24 maxlen: 24
                          89.116.176.0/24 maxlen: 24
                          89.116.178.0/24 maxlen: 24
                          89.116.232.0/24 maxlen: 24
                          89.116.235.0/24 maxlen: 24
                          89.116.238.0/24 maxlen: 24
                          89.116.240.0/24 maxlen: 24
                          89.116.245.0/24 maxlen: 24
                          89.116.249.0/24 maxlen: 24
                          89.117.10.0/24 maxlen: 24
                          89.117.14.0/24 maxlen: 24
                          89.117.69.0/24 maxlen: 24
                          89.117.125.0/24 maxlen: 24
                          89.117.127.0/24 maxlen: 24
                          89.117.128.0/24 maxlen: 24
                          89.117.137.0/24 maxlen: 24
                          89.117.138.0/24 maxlen: 24
                          89.117.140.0/24 maxlen: 24
                          89.117.165.0/24 maxlen: 24
                          89.117.185.0/24 maxlen: 24
                          89.117.207.0/24 maxlen: 24
                          89.117.211.0/24 maxlen: 24
                          89.117.219.0/24 maxlen: 24
                          89.117.223.0/24 maxlen: 24
                          89.117.247.0/24 maxlen: 24
                          89.117.249.0/24 maxlen: 24
                          217.9.240.0/24 maxlen: 24
                          217.9.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:be:30:1c:54:43:6c:45:6b:ab:f5:89:23:36:85:aa:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Oct 24 11:01:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7bef7f5a635094376fc458234762b07350128bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:49:d1:0f:97:cf:e9:ee:cb:f7:ba:fc:c1:
                    a1:99:97:92:f2:1a:fc:aa:78:05:45:f9:93:6a:56:
                    e7:76:3c:a0:20:a2:d6:2e:9c:b9:b5:ee:a0:a5:f4:
                    7a:68:35:d6:41:1d:b9:28:7b:0c:09:05:28:8d:c7:
                    9e:7b:8c:fb:92:ad:f4:05:11:84:47:ed:a3:44:22:
                    e2:81:d7:51:44:30:c6:e2:51:0c:ea:1f:01:a3:c5:
                    b5:54:9b:f9:16:1a:ea:3d:48:db:be:11:74:64:db:
                    29:44:02:d7:87:dc:68:ab:c0:c9:d8:86:94:9d:03:
                    9a:7d:c9:35:07:68:26:21:76:e8:c6:b5:06:17:8a:
                    5e:38:15:8b:46:75:6d:fe:c6:e1:2b:56:93:b9:bf:
                    1d:5b:14:92:24:6f:5f:bd:33:d1:64:75:6c:00:7c:
                    6a:0b:54:0e:92:65:6b:e9:f1:6b:c0:93:05:7b:41:
                    a6:e6:9b:b9:06:e2:f9:c4:92:ac:d4:02:79:67:b9:
                    9a:91:11:ad:46:79:f3:43:6b:c9:25:3f:cd:a4:ee:
                    53:1f:22:63:88:21:64:bd:4c:8a:50:73:5d:5d:1e:
                    2e:c2:6a:bd:2d:bd:6b:21:80:80:99:fe:96:b7:9f:
                    d0:c9:20:6c:07:34:9b:ae:ed:42:1e:a0:54:cf:e0:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EF:7F:5A:63:50:94:37:6F:C4:58:23:47:62:B0:73:50:12:8B:DC
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/e-9_WmNQlDdvxFgjR2Kwc1ASi9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.133.0/24
                  82.140.152.0/24
                  82.140.171.0/24
                  82.140.176.0/24
                  82.140.179.0/24
                  82.140.184.0/23
                  84.46.136.0/24
                  84.46.146.0-84.46.149.255
                  84.46.160.0/22
                  84.46.168.0/23
                  84.46.204.0/23
                  84.46.207.0/24
                  86.38.6.0/24
                  86.38.18.0/24
                  86.38.28.0/22
                  86.38.33.0/24
                  86.38.36.0/24
                  86.38.38.0/23
                  86.38.100.0/24
                  86.38.102.0/24
                  86.38.122.0/24
                  86.38.124.0-86.38.126.255
                  86.38.152.0-86.38.154.255
                  86.38.161.0/24
                  86.38.165.0-86.38.169.255
                  86.38.171.0/24
                  86.38.173.0-86.38.174.255
                  86.38.176.0/24
                  86.38.188.0/24
                  86.38.201.0/24
                  86.38.215.0/24
                  86.38.234.0/24
                  86.38.236.0/24
                  89.116.14.0/24
                  89.116.71.0/24
                  89.116.77.0-89.116.78.255
                  89.116.90.0/24
                  89.116.93.0/24
                  89.116.97.0/24
                  89.116.124.0/24
                  89.116.129.0/24
                  89.116.143.0/24
                  89.116.151.0/24
                  89.116.155.0/24
                  89.116.160.0/24
                  89.116.162.0/24
                  89.116.174.0/24
                  89.116.176.0/24
                  89.116.178.0/24
                  89.116.232.0/24
                  89.116.235.0/24
                  89.116.238.0/24
                  89.116.240.0/24
                  89.116.245.0/24
                  89.116.249.0/24
                  89.117.10.0/24
                  89.117.14.0/24
                  89.117.69.0/24
                  89.117.125.0/24
                  89.117.127.0-89.117.128.255
                  89.117.137.0-89.117.138.255
                  89.117.140.0/24
                  89.117.165.0/24
                  89.117.185.0/24
                  89.117.207.0/24
                  89.117.211.0/24
                  89.117.219.0/24
                  89.117.223.0/24
                  89.117.247.0/24
                  89.117.249.0/24
                  217.9.240.0/24
                  217.9.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:80:77:0b:3d:d4:17:f3:20:45:dd:65:87:53:28:50:52:19:
         37:d0:a1:6e:9f:1e:fa:21:b5:51:39:5b:68:9d:7c:55:e3:29:
         0d:5e:71:c5:47:87:f8:c9:53:82:7f:70:3d:31:76:4d:55:73:
         0f:44:16:a2:55:09:cc:9e:4f:d8:88:f8:18:70:ac:1f:e5:13:
         44:ab:56:38:ba:c8:e5:fd:1e:15:1e:f5:39:e8:42:58:e5:49:
         e4:de:d1:c4:b7:96:11:5a:63:06:c3:e2:56:f1:25:71:fb:9c:
         48:e9:07:60:76:1e:14:81:95:78:d5:ce:dd:78:0f:1d:d8:c7:
         f2:7d:ec:ef:7d:6a:9f:2c:42:b5:38:6e:a0:81:6a:09:5b:fd:
         b2:02:b4:79:e2:f8:c8:51:f7:d8:9a:4a:9a:8f:6c:12:59:4a:
         f0:74:20:7f:2f:d8:9b:bf:d7:30:70:c5:92:69:46:35:4d:f5:
         67:ca:86:f1:e1:4b:01:fe:8a:d3:83:4e:fa:d2:8e:19:d1:69:
         99:2c:9b:c7:ab:6e:ef:31:47:90:93:9d:f2:33:90:34:5c:d0:
         f5:d2:2a:84:60:9e:09:ef:c2:82:13:d7:fb:74:5c:05:68:ae:
         74:40:fd:03:1e:a2:b1:70:75:fb:fe:ca:7a:18:86:46:b7:89:
         56:71:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:59 2025 by rpki-client