Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa
File:                     eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa (raw, json)
Hash identifier:          Nuu5BDy0CuOnKoHwa87Nw4BNQ/P69UXEmPo5SaswqxY=
Subject key identifier:   79:E0:DF:22:53:47:CF:E3:12:F3:82:67:F1:96:81:BD:FB:FD:4D:36
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       0194228D3A4859B2A546E2B15EDE383CF555
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa
Signing time:             Wed 01 Jan 2025 15:47:48 +0000
ROA not before:           Wed 01 Jan 2025 15:47:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31520
IP address blocks:        5.1.0.0/23 maxlen: 24
                          5.1.4.0/22 maxlen: 24
                          5.1.8.0/21 maxlen: 24
                          5.1.16.0/20 maxlen: 24
                          31.128.76.0/23 maxlen: 24
                          31.128.78.0/23 maxlen: 24
                          31.128.80.0/22 maxlen: 22
                          31.128.84.0/22 maxlen: 22
                          31.128.88.0/22 maxlen: 22
                          31.128.92.0/22 maxlen: 22
                          77.222.139.0/24 maxlen: 24
                          77.222.152.0/22 maxlen: 24
                          77.222.156.0/23 maxlen: 24
                          77.222.158.0/23 maxlen: 24
                          80.77.32.0/22 maxlen: 24
                          80.77.36.0/24 maxlen: 24
                          80.77.37.0/24 maxlen: 24
                          80.77.38.0/24 maxlen: 24
                          80.77.39.0/24 maxlen: 24
                          80.77.40.0/21 maxlen: 24
                          80.77.40.0/22 maxlen: 22
                          80.77.44.0/22 maxlen: 22
                          80.91.166.0/24 maxlen: 24
                          85.159.0.0/21 maxlen: 24
                          91.197.220.0/24 maxlen: 24
                          91.197.221.0/24 maxlen: 24
                          91.197.222.0/24 maxlen: 24
                          91.197.223.0/24 maxlen: 24
                          93.183.214.0/24 maxlen: 24
                          93.183.216.0/24 maxlen: 24
                          93.183.217.0/24 maxlen: 24
                          93.183.218.0/23 maxlen: 23
                          93.183.220.0/22 maxlen: 22
                          93.183.224.0/24 maxlen: 24
                          93.183.225.0/24 maxlen: 24
                          93.183.226.0/24 maxlen: 24
                          93.183.227.0/24 maxlen: 24
                          93.183.230.0/24 maxlen: 24
                          93.183.231.0/24 maxlen: 24
                          93.183.232.0/22 maxlen: 22
                          93.183.240.0/21 maxlen: 21
                          93.183.248.0/21 maxlen: 21
                          94.232.72.0/21 maxlen: 21
                          109.206.32.0/19 maxlen: 24
                          176.102.48.0/23 maxlen: 23
                          176.102.50.0/24 maxlen: 24
                          176.102.51.0/24 maxlen: 24
                          176.102.52.0/22 maxlen: 24
                          176.102.56.0/21 maxlen: 24
                          176.112.0.0/19 maxlen: 24
                          176.241.128.0/19 maxlen: 24
                          176.241.148.0/22 maxlen: 22
                          178.213.168.0/21 maxlen: 24
                          185.46.248.0/22 maxlen: 24
                          188.247.96.0/20 maxlen: 20
                          188.247.116.0/24 maxlen: 24
                          188.247.117.0/24 maxlen: 24
                          188.247.118.0/24 maxlen: 24
                          188.247.119.0/24 maxlen: 24
                          193.108.49.0/24 maxlen: 24
                          193.108.128.0/24 maxlen: 24
                          194.29.60.0/22 maxlen: 24
                          195.114.128.0/24 maxlen: 24
                          195.114.129.0/24 maxlen: 24
                          195.114.135.0/24 maxlen: 24
                          195.114.141.0/24 maxlen: 24
                          195.114.142.0/24 maxlen: 24
                          195.114.143.0/24 maxlen: 24
                          195.114.144.0/24 maxlen: 24
                          195.114.145.0/24 maxlen: 24
                          195.114.146.0/23 maxlen: 24
                          195.114.148.0/23 maxlen: 24
                          195.114.150.0/24 maxlen: 24
                          195.114.151.0/24 maxlen: 24
                          195.114.152.0/24 maxlen: 24
                          195.114.153.0/24 maxlen: 24
                          195.114.154.0/24 maxlen: 24
                          195.114.155.0/24 maxlen: 24
                          195.114.156.0/24 maxlen: 24
                          195.114.157.0/24 maxlen: 24
                          195.114.158.0/24 maxlen: 24
                          195.114.159.0/24 maxlen: 24
                          213.111.192.0/18 maxlen: 24
                          213.111.201.0/24 maxlen: 24
                          213.111.202.0/24 maxlen: 24
                          213.111.206.0/23 maxlen: 23
                          213.111.215.0/24 maxlen: 24
                          213.111.216.0/24 maxlen: 24
                          213.111.218.0/23 maxlen: 23
                          213.111.248.0/24 maxlen: 24
                          213.111.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:3a:48:59:b2:a5:46:e2:b1:5e:de:38:3c:f5:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Jan  1 15:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79e0df225347cfe312f38267f19681bdfbfd4d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:9b:39:cf:65:d9:cc:3c:69:1c:b3:05:75:
                    89:8c:83:c1:2e:eb:dc:ac:37:6f:7e:51:d6:67:f9:
                    ba:02:f7:5c:62:74:a8:c7:91:a3:f6:f6:e2:d1:75:
                    46:9b:46:02:18:15:a1:7a:88:70:b0:af:35:5b:ae:
                    93:db:de:45:6a:b9:ab:9b:56:7d:ba:9c:77:93:7c:
                    03:a9:32:cc:b5:4d:18:02:0e:8b:62:73:f3:25:a9:
                    56:e3:a3:f3:67:a1:73:81:bd:16:1b:ed:8e:7e:b5:
                    3d:85:07:9a:7f:38:53:d5:af:4c:27:51:a5:8d:45:
                    82:2c:3e:f8:57:70:ab:af:44:e3:41:84:38:8f:bf:
                    c0:54:93:13:ee:3a:75:ee:91:50:c1:1e:8e:ae:99:
                    df:5d:b8:58:82:3c:bd:ed:49:cf:86:ec:ea:0d:7b:
                    70:27:a8:4e:6d:d3:e3:40:ed:06:df:c9:6a:62:4e:
                    de:7d:07:3a:35:c9:6f:e9:4d:a7:c4:f2:e9:75:17:
                    01:b3:80:d0:05:1a:e5:db:65:a3:08:0b:4a:2b:a3:
                    d1:90:02:1f:2c:3d:ec:f9:6d:7f:a5:07:ec:33:a0:
                    2c:64:4e:c5:c7:0d:c8:9b:7e:b1:b5:cf:9e:0c:8e:
                    7a:03:3d:8c:d3:d8:7a:73:d1:f8:48:89:67:9e:a8:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:DF:22:53:47:CF:E3:12:F3:82:67:F1:96:81:BD:FB:FD:4D:36
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/eeDfIlNHz-MS84Jn8ZaBvfv9TTY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.0.0/23
                  5.1.4.0-5.1.31.255
                  31.128.76.0-31.128.95.255
                  77.222.139.0/24
                  77.222.152.0/21
                  80.77.32.0/20
                  80.91.166.0/24
                  85.159.0.0/21
                  91.197.220.0/22
                  93.183.214.0/24
                  93.183.216.0-93.183.227.255
                  93.183.230.0-93.183.235.255
                  93.183.240.0/20
                  94.232.72.0/21
                  109.206.32.0/19
                  176.102.48.0/20
                  176.112.0.0/19
                  176.241.128.0/19
                  178.213.168.0/21
                  185.46.248.0/22
                  188.247.96.0/20
                  188.247.116.0/22
                  193.108.49.0/24
                  193.108.128.0/24
                  194.29.60.0/22
                  195.114.128.0/23
                  195.114.135.0/24
                  195.114.141.0-195.114.159.255
                  213.111.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         07:ca:33:9c:48:18:23:c4:3a:aa:ca:e6:d7:c7:5b:c4:71:9e:
         02:72:56:d1:93:05:70:10:1e:17:96:f6:36:c0:63:b2:41:4f:
         49:41:c2:94:c8:82:ad:c6:c7:a2:45:02:ec:ef:bd:e5:58:f3:
         a3:a2:5f:c2:ec:7a:1c:18:db:98:92:0f:f2:a5:1c:15:71:18:
         e5:ff:62:e4:2c:cf:d4:87:d7:fb:c2:e0:19:14:9b:cc:92:9d:
         c5:95:ac:4f:7c:0a:b7:18:3b:3e:eb:ec:f4:b5:80:2f:61:f1:
         4b:f5:97:a6:66:93:3c:db:2d:65:3f:4d:9f:bd:33:9c:05:e3:
         99:4f:ce:a9:47:c1:66:83:14:63:96:2c:0e:c0:5c:4e:7f:a2:
         9c:be:c3:23:a6:48:e3:6a:19:9a:ce:c0:91:3d:be:a9:41:a7:
         eb:99:1d:45:08:82:de:55:7c:12:ce:8b:43:0f:b8:f6:a3:31:
         63:a8:ca:b6:f6:d8:63:ef:61:d8:d9:c6:d8:95:99:ed:a2:87:
         9d:a8:b8:60:f2:f0:36:32:88:47:03:4d:4a:f4:22:e3:23:30:
         4c:35:ba:b8:6f:55:30:b2:60:2e:ec:cb:fa:d9:5e:09:f6:ff:
         d8:51:1a:db:28:78:cf:3b:bb:e6:eb:3d:11:62:de:bf:ca:98:
         84:3d:ef:f2
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAZQijTpIWbKlRuKxXt44PPVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjUwMTAxMTU0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWUwZGYyMjUzNDdjZmUzMTJmMzgyNjdmMTk2ODFiZGZiZmQ0ZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3ebOc9l2cw8aRyzBXWJjIPBLuvc
rDdvflHWZ/m6AvdcYnSox5Gj9vbi0XVGm0YCGBWheohwsK81W66T295Farmrm1Z9
upx3k3wDqTLMtU0YAg6LYnPzJalW46PzZ6Fzgb0WG+2OfrU9hQeafzhT1a9MJ1Gl
jUWCLD74V3Crr0TjQYQ4j7/AVJMT7jp17pFQwR6OrpnfXbhYgjy97UnPhuzqDXtw
J6hObdPjQO0G38lqYk7efQc6Nclv6U2nxPLpdRcBs4DQBRrl22WjCAtKK6PRkAIf
LD3s+W1/pQfsM6AsZE7Fxw3Im36xtc+eDI56Az2M09h6c9H4SIlnnqiG/QIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFHng3yJTR8/jEvOCZ/GWgb37/U02MB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvZWVEZklsTkh6LU1TODRKbjhaYUJ2ZnY5VFRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBAEF
AQAwDAMEAgUBBAMEBQUBADAMAwQCH4BMAwQFH4BAAwQATd6LAwQDTd6YAwQEUE0g
AwQAUFumAwQDVZ8AAwQCW8XcAwQAXbfWMAwDBANdt9gDBAJdt+AwDAMEAV235gME
Al236AMEBF238AMEA17oSAMEBW3OIAMEBLBmMAMEBbBwAAMEBbDxgAMEA7LVqAME
Arku+AMEBLz3YAMEArz3dAMEAMFsMQMEAMFsgAMEAsIdPAMEAcNygAMEAMNyhzAM
AwQAw3KNAwQFw3KAAwQG1W/AMA0GCSqGSIb3DQEBCwUAA4IBAQAHyjOcSBgjxDqq
yubXx1vEcZ4CclbRkwVwEB4XlvY2wGOyQU9JQcKUyIKtxseiRQLs773lWPOjol/C
7HocGNuYkg/ypRwVcRjl/2LkLM/Uh9f7wuAZFJvMkp3FlaxPfAq3GDs+6+z0tYAv
YfFL9ZemZpM82y1lP02fvTOcBeOZT86pR8FmgxRjliwOwFxOf6KcvsMjpkjjahma
zsCRPb6pQafrmR1FCILeVXwSzotDD7j2ozFjqMq29thj72HY2cbYlZntooedqLhg
8vA2MohHA01K9CLjIzBMNbq4b1UwsmAu7Mv62V4J9v/YURrbKHjPO7vm6z0RYt6/
ypiEPe/y
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:17:25 2025 by rpki-client