Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/jTqP53NK6a8JQoM91_qtUIYBm5w.roa
File:                     jTqP53NK6a8JQoM91_qtUIYBm5w.roa (raw, json)
Hash identifier:          1PawQPD0/EXw6bPcDgVvHzDWGE7lpPiEgFptR2onkmg=
Subject key identifier:   8D:3A:8F:E7:73:4A:E9:AF:09:42:83:3D:D7:FA:AD:50:86:01:9B:9C
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       01938911DF1A01AB18FE9AB49D8E88AABEFE
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/jTqP53NK6a8JQoM91_qtUIYBm5w.roa
Signing time:             Mon 02 Dec 2024 20:31:09 +0000
ROA not before:           Mon 02 Dec 2024 20:31:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:1c41::/48 maxlen: 48
                          2a06:98c0:1c42::/48 maxlen: 48
                          2a06:98c0:1c43::/48 maxlen: 48
                          2a06:98c0:1c44::/48 maxlen: 48
                          2a06:98c0:1c45::/48 maxlen: 48
                          2a06:98c0:1c46::/48 maxlen: 48
                          2a06:98c0:1c47::/48 maxlen: 48
                          2a06:98c0:1c48::/48 maxlen: 48
                          2a06:98c0:1c49::/48 maxlen: 48
                          2a06:98c0:1c4b::/48 maxlen: 48
                          2a06:98c0:1c4c::/48 maxlen: 48
                          2a06:98c0:1c4d::/48 maxlen: 48
                          2a06:98c0:1c4e::/48 maxlen: 48
                          2a06:98c0:1c4f::/48 maxlen: 48
                          2a06:98c0:1c50::/48 maxlen: 48
                          2a06:98c0:1c51::/48 maxlen: 48
                          2a06:98c0:1c52::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:40::/48 maxlen: 48
                          2a06:98c1:41::/48 maxlen: 48
                          2a06:98c1:42::/48 maxlen: 48
                          2a06:98c1:43::/48 maxlen: 48
                          2a06:98c1:48::/48 maxlen: 48
                          2a06:98c1:49::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:89:11:df:1a:01:ab:18:fe:9a:b4:9d:8e:88:aa:be:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Dec  2 20:31:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8d3a8fe7734ae9af0942833dd7faad5086019b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:20:79:bd:c0:8e:fd:88:f7:59:b9:6c:82:e2:
                    59:bf:58:bc:e7:3b:f7:d1:9c:dd:4e:a3:4e:28:10:
                    b8:28:63:6e:94:13:e4:f5:55:8f:07:a1:25:3a:8c:
                    37:1e:b4:6f:2f:84:4a:94:c8:ab:ad:9f:22:82:5f:
                    3f:75:95:74:8f:97:3c:d2:e6:e6:f7:7e:d9:4c:b4:
                    9c:f0:4a:db:48:0c:5e:ba:ad:af:c4:d3:78:10:6f:
                    99:ac:72:04:cd:3b:e6:a8:b9:23:4e:f4:99:bf:ce:
                    48:44:fc:e6:72:56:09:e4:44:85:fb:a6:84:3d:3e:
                    23:60:0d:b7:e6:52:97:c4:9a:2d:34:b5:70:4c:38:
                    c8:02:3f:32:7b:96:40:fb:09:f2:58:2f:f6:af:79:
                    14:96:ea:4a:14:c1:85:e4:f7:a7:34:e9:77:b4:27:
                    95:8d:d7:52:97:59:c5:57:0f:48:26:9c:2d:2d:28:
                    0e:73:76:fb:b3:e5:77:48:42:79:53:32:2f:b8:8e:
                    82:9f:ce:33:cd:d8:00:61:1e:9b:31:a4:00:6a:09:
                    1d:09:7e:f7:20:1c:d3:26:37:b2:8e:df:a8:a2:77:
                    5d:49:c3:99:f8:ef:52:0c:81:81:2e:49:4a:d6:12:
                    23:87:b9:b7:24:00:68:48:a0:9f:5a:6e:4c:82:be:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3A:8F:E7:73:4A:E9:AF:09:42:83:3D:D7:FA:AD:50:86:01:9B:9C
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/jTqP53NK6a8JQoM91_qtUIYBm5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c4b::-2a06:98c0:1c52:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:40::/46
                  2a06:98c1:48::/47
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:67:4a:e5:37:77:bd:a9:73:22:23:59:de:80:80:2a:62:d4:
         9c:08:d5:61:36:e0:17:73:40:de:61:99:89:fe:73:87:56:3c:
         25:7b:99:d4:6e:4c:83:82:d1:5a:53:b3:91:a3:31:12:85:b7:
         51:2c:fe:00:b9:ab:74:85:9f:2b:94:8a:a6:0e:d7:60:34:ac:
         3b:b1:81:b5:40:90:e1:fe:a6:6a:12:92:95:50:00:b1:7f:36:
         e5:cf:83:9d:0e:44:ce:08:f8:cd:6d:5a:04:3a:6e:21:7e:56:
         70:59:83:27:05:37:ed:57:a5:01:b0:70:ea:24:ee:8c:87:99:
         8e:62:6f:2a:60:51:4f:fe:86:a9:52:fe:ba:98:e1:c8:81:6a:
         65:91:67:26:d0:b5:bf:46:8f:cc:5d:29:37:83:f6:27:1a:38:
         5f:cd:4e:ac:f8:6e:5c:83:44:80:6f:7a:58:a3:80:19:e9:8e:
         50:a2:43:05:0d:96:8b:36:fa:2e:a1:ea:3b:09:14:42:11:8a:
         b7:c8:90:60:63:d4:d9:d1:6e:6b:8c:76:53:60:00:c1:ad:79:
         25:b5:e5:76:31:30:f0:9f:1c:4a:c8:04:19:c8:fc:25:ca:20:
         fa:0e:32:d6:65:01:0d:fa:7e:95:5c:f3:3f:8d:d2:00:a2:a8:
         2e:40:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:21:11 2025 by rpki-client