Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa
File:                     ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa (raw, json)
Hash identifier:          o/eumNvuz+9CmmVOqXWqv98TZutXQn/8mhjgfl+DMUM=
Subject key identifier:   89:CE:13:CD:E0:4E:2F:1E:3A:54:0C:59:D2:40:4E:C8:B9:CB:F9:A0
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       01953C427322B255F18FAA541A49107CB7B5
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa
Signing time:             Tue 25 Feb 2025 08:39:02 +0000
ROA not before:           Tue 25 Feb 2025 08:39:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3326
IP address blocks:        5.1.0.0/23 maxlen: 23
                          5.1.4.0/22 maxlen: 22
                          5.1.8.0/21 maxlen: 21
                          5.1.16.0/20 maxlen: 20
                          31.128.68.0/22 maxlen: 22
                          31.128.72.0/22 maxlen: 22
                          31.128.76.0/23 maxlen: 23
                          31.128.78.0/23 maxlen: 23
                          31.128.80.0/20 maxlen: 20
                          46.164.128.0/20 maxlen: 20
                          46.164.144.0/21 maxlen: 21
                          46.164.152.0/23 maxlen: 23
                          46.164.154.0/23 maxlen: 23
                          46.164.156.0/23 maxlen: 23
                          46.164.158.0/24 maxlen: 24
                          46.164.159.0/24 maxlen: 24
                          46.164.164.0/23 maxlen: 23
                          46.164.168.0/22 maxlen: 22
                          46.164.172.0/22 maxlen: 22
                          77.88.201.0/24 maxlen: 24
                          77.88.202.0/24 maxlen: 24
                          77.88.206.0/24 maxlen: 24
                          77.88.207.0/24 maxlen: 24
                          77.88.208.0/23 maxlen: 23
                          77.88.210.0/24 maxlen: 24
                          77.88.211.0/24 maxlen: 24
                          77.88.212.0/24 maxlen: 24
                          77.88.214.0/23 maxlen: 23
                          77.88.216.0/22 maxlen: 22
                          77.88.220.0/24 maxlen: 24
                          77.88.221.0/24 maxlen: 24
                          77.88.248.0/24 maxlen: 24
                          77.88.252.0/24 maxlen: 24
                          77.88.253.0/24 maxlen: 24
                          77.88.254.0/24 maxlen: 24
                          77.88.255.0/24 maxlen: 24
                          77.222.128.0/21 maxlen: 21
                          77.222.137.0/24 maxlen: 24
                          77.222.138.0/24 maxlen: 24
                          77.222.139.0/24 maxlen: 24
                          77.222.140.0/22 maxlen: 22
                          77.222.144.0/21 maxlen: 21
                          77.222.152.0/22 maxlen: 22
                          77.222.156.0/23 maxlen: 23
                          77.222.158.0/23 maxlen: 23
                          80.77.32.0/22 maxlen: 22
                          80.77.36.0/24 maxlen: 24
                          80.77.37.0/24 maxlen: 24
                          80.77.38.0/24 maxlen: 24
                          80.77.39.0/24 maxlen: 24
                          80.77.40.0/21 maxlen: 21
                          80.91.160.0/22 maxlen: 22
                          80.91.164.0/23 maxlen: 23
                          80.91.166.0/24 maxlen: 24
                          80.91.167.0/24 maxlen: 24
                          80.91.168.0/24 maxlen: 24
                          80.91.169.0/24 maxlen: 24
                          80.91.170.0/24 maxlen: 24
                          80.91.171.0/24 maxlen: 24
                          80.91.172.0/22 maxlen: 22
                          80.91.176.0/22 maxlen: 22
                          80.91.180.0/23 maxlen: 23
                          80.91.183.0/24 maxlen: 24
                          80.91.184.0/21 maxlen: 21
                          80.249.224.0/20 maxlen: 20
                          85.159.0.0/21 maxlen: 21
                          88.81.224.0/21 maxlen: 21
                          88.81.232.0/22 maxlen: 22
                          88.81.236.0/24 maxlen: 24
                          88.81.237.0/24 maxlen: 24
                          88.81.238.0/23 maxlen: 23
                          88.81.240.0/22 maxlen: 22
                          88.81.244.0/22 maxlen: 22
                          88.81.246.0/24 maxlen: 24
                          88.81.247.0/24 maxlen: 24
                          88.81.248.0/24 maxlen: 24
                          88.81.249.0/24 maxlen: 24
                          88.81.251.0/24 maxlen: 24
                          88.81.252.0/23 maxlen: 23
                          88.81.254.0/23 maxlen: 23
                          91.193.68.0/22 maxlen: 22
                          91.197.220.0/24 maxlen: 24
                          91.197.221.0/24 maxlen: 24
                          91.197.222.0/24 maxlen: 24
                          91.197.223.0/24 maxlen: 24
                          91.204.92.0/23 maxlen: 23
                          91.204.94.0/24 maxlen: 24
                          91.204.95.0/24 maxlen: 24
                          93.183.192.0/24 maxlen: 24
                          93.183.193.0/24 maxlen: 24
                          93.183.194.0/23 maxlen: 23
                          93.183.196.0/24 maxlen: 24
                          93.183.197.0/24 maxlen: 24
                          93.183.198.0/23 maxlen: 23
                          93.183.200.0/21 maxlen: 21
                          93.183.208.0/22 maxlen: 22
                          93.183.212.0/23 maxlen: 23
                          93.183.214.0/24 maxlen: 24
                          93.183.215.0/24 maxlen: 24
                          93.183.216.0/24 maxlen: 24
                          93.183.217.0/24 maxlen: 24
                          93.183.218.0/23 maxlen: 23
                          93.183.220.0/22 maxlen: 22
                          93.183.224.0/24 maxlen: 24
                          93.183.225.0/24 maxlen: 24
                          93.183.226.0/24 maxlen: 24
                          93.183.227.0/24 maxlen: 24
                          93.183.228.0/24 maxlen: 24
                          93.183.229.0/24 maxlen: 24
                          93.183.230.0/23 maxlen: 23
                          93.183.232.0/22 maxlen: 22
                          93.183.237.0/24 maxlen: 24
                          93.183.239.0/24 maxlen: 24
                          93.183.240.0/21 maxlen: 21
                          93.183.248.0/21 maxlen: 21
                          94.232.72.0/21 maxlen: 21
                          109.206.32.0/19 maxlen: 19
                          176.102.32.0/21 maxlen: 21
                          176.102.40.0/21 maxlen: 21
                          176.102.48.0/23 maxlen: 23
                          176.102.50.0/24 maxlen: 24
                          176.102.51.0/24 maxlen: 24
                          176.102.52.0/22 maxlen: 22
                          176.102.56.0/21 maxlen: 21
                          176.112.0.0/19 maxlen: 19
                          176.241.104.0/21 maxlen: 21
                          176.241.128.0/23 maxlen: 23
                          176.241.130.0/23 maxlen: 23
                          176.241.132.0/22 maxlen: 22
                          176.241.136.0/21 maxlen: 21
                          176.241.144.0/20 maxlen: 20
                          176.241.148.0/22 maxlen: 22
                          178.213.168.0/21 maxlen: 21
                          178.213.168.0/22 maxlen: 22
                          178.213.172.0/23 maxlen: 23
                          178.213.174.0/24 maxlen: 24
                          178.213.175.0/24 maxlen: 24
                          185.8.40.0/22 maxlen: 22
                          185.8.40.0/24 maxlen: 24
                          185.8.41.0/24 maxlen: 24
                          185.8.42.0/23 maxlen: 23
                          185.46.248.0/22 maxlen: 22
                          188.0.64.0/22 maxlen: 22
                          188.0.64.0/23 maxlen: 23
                          188.0.66.0/24 maxlen: 24
                          188.247.96.0/20 maxlen: 20
                          188.247.112.0/22 maxlen: 22
                          188.247.116.0/22 maxlen: 22
                          193.41.48.0/22 maxlen: 22
                          193.108.48.0/24 maxlen: 24
                          193.108.49.0/24 maxlen: 24
                          193.108.51.0/24 maxlen: 24
                          193.108.128.0/24 maxlen: 24
                          193.108.129.0/24 maxlen: 24
                          193.109.164.0/22 maxlen: 24
                          194.29.60.0/22 maxlen: 22
                          194.146.196.0/24 maxlen: 24
                          194.146.197.0/24 maxlen: 24
                          194.146.198.0/24 maxlen: 24
                          195.69.176.0/23 maxlen: 23
                          195.69.176.0/24 maxlen: 24
                          195.69.177.0/24 maxlen: 24
                          195.69.178.0/24 maxlen: 24
                          195.69.179.0/24 maxlen: 24
                          195.114.131.0/24 maxlen: 24
                          195.114.139.0/24 maxlen: 24
                          195.114.141.0/24 maxlen: 24
                          195.114.142.0/24 maxlen: 24
                          195.114.143.0/24 maxlen: 24
                          195.114.144.0/20 maxlen: 22
                          195.114.144.0/24 maxlen: 24
                          195.114.145.0/24 maxlen: 24
                          195.114.146.0/24 maxlen: 24
                          195.114.147.0/24 maxlen: 24
                          195.114.148.0/24 maxlen: 24
                          195.114.149.0/24 maxlen: 24
                          195.114.150.0/24 maxlen: 24
                          195.114.151.0/24 maxlen: 24
                          213.111.192.0/18 maxlen: 18
                          217.112.208.0/20 maxlen: 20
                          2a01:758::/32 maxlen: 48
                          2a01:758:ffe0::/48 maxlen: 48
                          2a01:758:ffe1::/48 maxlen: 48
                          2a01:758:ffe2::/48 maxlen: 48
                          2a01:758:ffe3::/48 maxlen: 48
                          2a01:758:ffe4::/48 maxlen: 48
                          2a01:758:ffe5::/48 maxlen: 48
                          2a01:758:ffe6::/48 maxlen: 48
                          2a01:758:ffe7::/48 maxlen: 48
                          2a01:758:ffe8::/48 maxlen: 48
                          2a01:758:ffee::/48 maxlen: 48
                          2a01:758:fff3::/48 maxlen: 48
                          2a01:758:fff4::/48 maxlen: 48
                          2a01:758:fff6::/48 maxlen: 48
                          2a01:758:fff8::/48 maxlen: 48
                          2a01:758:fffa::/48 maxlen: 48
                          2a01:758:fffb::/48 maxlen: 48
                          2a01:758:fffc::/48 maxlen: 48
                          2a01:758:fffe::/48 maxlen: 48
                          2a01:758:ffff::/48 maxlen: 48
                          2a02:70::/32 maxlen: 32
                          2a02:70::/48 maxlen: 48
                          2a02:70:1::/48 maxlen: 48
                          2a02:70:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3c:42:73:22:b2:55:f1:8f:aa:54:1a:49:10:7c:b7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Feb 25 08:39:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=89ce13cde04e2f1e3a540c59d2404ec8b9cbf9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:79:4e:f6:9f:26:ca:da:91:66:ff:c5:25:
                    db:90:5a:af:ce:e6:8b:84:63:c2:2c:4c:34:16:63:
                    a2:57:59:9c:fa:a7:44:c6:f0:89:aa:f5:2d:d8:3a:
                    23:43:f1:43:be:0d:26:0c:df:1c:cd:62:d4:c4:32:
                    4d:10:20:c2:a3:ab:f4:b9:f6:92:d4:be:80:51:9a:
                    e2:f4:d9:34:16:f7:b6:0c:ac:61:f2:ce:33:31:0f:
                    76:9b:a2:07:05:4e:6e:1d:60:2d:7c:9b:04:b0:ab:
                    2b:8f:1c:c5:6e:ff:a8:5f:f7:a3:6a:3e:a8:11:db:
                    ad:0e:17:fa:c6:63:72:be:14:69:21:87:f4:6e:b2:
                    67:1e:69:eb:f9:08:df:09:ed:a2:02:62:f7:b3:df:
                    25:d4:51:8f:c9:ef:31:94:f3:cc:66:b2:87:5f:e5:
                    5f:5f:74:66:fe:ef:14:47:0b:b6:52:f5:08:9c:f6:
                    fe:9e:59:ce:9e:3d:37:c6:6e:ab:b5:fe:a7:76:3a:
                    4f:8f:f1:74:c7:68:4f:ae:f9:2c:ac:63:d0:1e:f5:
                    38:c5:31:14:46:de:af:2a:6f:3c:06:8d:1c:82:6d:
                    b9:d2:61:73:71:06:5f:65:11:db:0b:9b:9c:22:c9:
                    aa:81:93:88:31:ad:c7:48:9b:92:84:a4:de:83:1f:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:13:CD:E0:4E:2F:1E:3A:54:0C:59:D2:40:4E:C8:B9:CB:F9:A0
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ic4TzeBOLx46VAxZ0kBOyLnL-aA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.0.0/23
                  5.1.4.0-5.1.31.255
                  31.128.68.0-31.128.95.255
                  46.164.128.0/19
                  46.164.164.0/23
                  46.164.168.0/21
                  77.88.201.0-77.88.202.255
                  77.88.206.0-77.88.212.255
                  77.88.214.0-77.88.221.255
                  77.88.248.0/24
                  77.88.252.0/22
                  77.222.128.0/21
                  77.222.137.0-77.222.159.255
                  80.77.32.0/20
                  80.91.160.0-80.91.181.255
                  80.91.183.0-80.91.191.255
                  80.249.224.0/20
                  85.159.0.0/21
                  88.81.224.0-88.81.249.255
                  88.81.251.0-88.81.255.255
                  91.193.68.0/22
                  91.197.220.0/22
                  91.204.92.0/22
                  93.183.192.0-93.183.235.255
                  93.183.237.0/24
                  93.183.239.0-93.183.255.255
                  94.232.72.0/21
                  109.206.32.0/19
                  176.102.32.0/19
                  176.112.0.0/19
                  176.241.104.0/21
                  176.241.128.0/19
                  178.213.168.0/21
                  185.8.40.0/22
                  185.46.248.0/22
                  188.0.64.0/22
                  188.247.96.0-188.247.119.255
                  193.41.48.0/22
                  193.108.48.0/23
                  193.108.51.0/24
                  193.108.128.0/23
                  193.109.164.0/22
                  194.29.60.0/22
                  194.146.196.0-194.146.198.255
                  195.69.176.0/22
                  195.114.131.0/24
                  195.114.139.0/24
                  195.114.141.0-195.114.159.255
                  213.111.192.0/18
                  217.112.208.0/20
                IPv6:
                  2a01:758::/32
                  2a02:70::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:60:e7:4a:05:30:46:c1:a9:ec:15:cc:8d:d4:33:54:c4:7f:
         33:80:43:48:39:ce:d0:e6:0a:be:4a:e8:18:fb:61:23:1b:18:
         cc:b4:08:fb:07:23:68:a5:df:2a:8e:de:70:0b:63:17:20:c8:
         c8:92:b4:76:7f:35:9a:65:13:25:fe:9c:32:05:a6:f6:68:6a:
         59:f4:b4:84:2b:45:85:48:2b:12:d9:3e:11:92:e4:99:84:cc:
         fb:74:95:94:2a:c4:69:8a:5e:9c:ff:32:a9:dc:48:d7:97:d5:
         90:5a:25:85:66:66:45:22:fe:69:39:62:8a:4c:e8:85:03:76:
         f5:d9:67:fe:ff:40:10:92:3e:7a:ea:70:3e:c3:90:27:99:bf:
         18:24:05:a4:e4:2d:23:9a:f6:65:7c:5e:ef:6e:3a:dd:d7:9d:
         52:79:34:39:41:07:70:f0:d6:85:21:93:c4:09:eb:3a:eb:58:
         68:6c:54:a8:5b:36:6d:87:9b:53:dd:d0:52:a7:58:6b:07:de:
         a7:88:81:18:5d:f0:de:b9:a2:cd:e7:20:80:a2:f9:5d:af:91:
         52:26:88:c4:5c:5a:da:8d:f8:18:a2:0e:65:24:60:a1:a2:bd:
         20:62:d5:53:2c:b3:e1:22:64:08:1e:ca:b9:d8:7c:84:08:8b:
         12:59:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:17:25 2025 by rpki-client