Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/yG-QfVXMBKRZod9pUeV3Ulleh1s.roa
File:                     yG-QfVXMBKRZod9pUeV3Ulleh1s.roa (raw, json)
Hash identifier:          JHJajmr2kdhg0/Wl5Jc7NGJ0T9TiYzqwN+Aha6FXR8w=
Subject key identifier:   C8:6F:90:7D:55:CC:04:A4:59:A1:DF:69:51:E5:77:52:59:5E:87:5B
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       019428231826D6FCECC76889544F61F6BF1A
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/yG-QfVXMBKRZod9pUeV3Ulleh1s.roa
Signing time:             Thu 02 Jan 2025 17:49:36 +0000
ROA not before:           Thu 02 Jan 2025 17:49:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        141.101.64.0/24 maxlen: 24
                          141.101.65.0/24 maxlen: 24
                          141.101.66.0/24 maxlen: 24
                          141.101.67.0/24 maxlen: 24
                          141.101.68.0/24 maxlen: 24
                          141.101.69.0/24 maxlen: 24
                          141.101.70.0/24 maxlen: 24
                          141.101.71.0/24 maxlen: 24
                          141.101.72.0/24 maxlen: 24
                          141.101.73.0/24 maxlen: 24
                          141.101.74.0/24 maxlen: 24
                          141.101.75.0/24 maxlen: 24
                          141.101.76.0/23 maxlen: 23
                          141.101.82.0/24 maxlen: 24
                          141.101.83.0/24 maxlen: 24
                          141.101.84.0/24 maxlen: 24
                          141.101.85.0/24 maxlen: 24
                          141.101.86.0/24 maxlen: 24
                          141.101.87.0/24 maxlen: 24
                          141.101.88.0/22 maxlen: 22
                          141.101.90.0/24 maxlen: 24
                          141.101.92.0/24 maxlen: 24
                          141.101.93.0/24 maxlen: 24
                          141.101.94.0/24 maxlen: 24
                          141.101.95.0/24 maxlen: 24
                          141.101.96.0/24 maxlen: 24
                          141.101.97.0/24 maxlen: 24
                          141.101.98.0/24 maxlen: 24
                          141.101.99.0/24 maxlen: 24
                          141.101.100.0/22 maxlen: 22
                          141.101.100.0/24 maxlen: 24
                          141.101.104.0/24 maxlen: 24
                          141.101.105.0/24 maxlen: 24
                          141.101.106.0/24 maxlen: 24
                          141.101.107.0/24 maxlen: 24
                          141.101.108.0/24 maxlen: 24
                          141.101.109.0/24 maxlen: 24
                          141.101.110.0/24 maxlen: 24
                          141.101.111.0/24 maxlen: 24
                          141.101.112.0/20 maxlen: 20
                          141.101.112.0/23 maxlen: 23
                          141.101.114.0/23 maxlen: 23
                          141.101.120.0/22 maxlen: 22
                          188.114.96.0/24 maxlen: 24
                          188.114.97.0/24 maxlen: 24
                          188.114.98.0/24 maxlen: 24
                          188.114.99.0/24 maxlen: 24
                          188.114.100.0/24 maxlen: 24
                          188.114.101.0/24 maxlen: 24
                          188.114.102.0/24 maxlen: 24
                          188.114.103.0/24 maxlen: 24
                          188.114.104.0/24 maxlen: 24
                          188.114.106.0/23 maxlen: 23
                          188.114.108.0/24 maxlen: 24
                          188.114.109.0/24 maxlen: 24
                          188.114.110.0/24 maxlen: 24
                          188.114.111.0/24 maxlen: 24
                          2a06:98c0:1c01::/48 maxlen: 48
                          2a06:98c0:1c02::/48 maxlen: 48
                          2a06:98c0:1c03::/48 maxlen: 48
                          2a06:98c0:1c04::/48 maxlen: 48
                          2a06:98c0:1c05::/48 maxlen: 48
                          2a06:98c0:1c06::/48 maxlen: 48
                          2a06:98c0:1c07::/48 maxlen: 48
                          2a06:98c0:1c08::/48 maxlen: 48
                          2a06:98c0:1c09::/48 maxlen: 48
                          2a06:98c0:1c0a::/48 maxlen: 48
                          2a06:98c0:1c0c::/48 maxlen: 48
                          2a06:98c0:1c0d::/48 maxlen: 48
                          2a06:98c0:1c0e::/48 maxlen: 48
                          2a06:98c0:1c0f::/48 maxlen: 48
                          2a06:98c0:1c10::/48 maxlen: 48
                          2a06:98c0:1c20::/48 maxlen: 48
                          2a06:98c0:1c21::/48 maxlen: 48
                          2a06:98c0:1c22::/48 maxlen: 48
                          2a06:98c0:1c23::/48 maxlen: 48
                          2a06:98c0:1c24::/48 maxlen: 48
                          2a06:98c0:1c25::/48 maxlen: 48
                          2a06:98c0:1c26::/48 maxlen: 48
                          2a06:98c0:1c27::/48 maxlen: 48
                          2a06:98c0:1c28::/48 maxlen: 48
                          2a06:98c0:1c29::/48 maxlen: 48
                          2a06:98c0:1c2a::/48 maxlen: 48
                          2a06:98c0:1c2b::/48 maxlen: 48
                          2a06:98c0:1c2c::/48 maxlen: 48
                          2a06:98c0:1c2d::/48 maxlen: 48
                          2a06:98c0:1c2e::/48 maxlen: 48
                          2a06:98c0:1c2f::/48 maxlen: 48
                          2a06:98c0:1c30::/48 maxlen: 48
                          2a06:98c0:1c31::/48 maxlen: 48
                          2a06:98c0:1c32::/48 maxlen: 48
                          2a06:98c0:1c33::/48 maxlen: 48
                          2a06:98c0:1c34::/48 maxlen: 48
                          2a06:98c0:1c35::/48 maxlen: 48
                          2a06:98c0:1c36::/48 maxlen: 48
                          2a06:98c0:1c37::/48 maxlen: 48
                          2a06:98c0:1c38::/48 maxlen: 48
                          2a06:98c0:1c39::/48 maxlen: 48
                          2a06:98c0:1c3a::/48 maxlen: 48
                          2a06:98c0:1c3b::/48 maxlen: 48
                          2a06:98c0:1c3c::/48 maxlen: 48
                          2a06:98c0:1c3d::/48 maxlen: 48
                          2a06:98c0:1c3e::/48 maxlen: 48
                          2a06:98c0:1c3f::/48 maxlen: 48
                          2a06:98c0:1c40::/48 maxlen: 48
                          2a06:98c0:1c41::/48 maxlen: 48
                          2a06:98c0:1c42::/48 maxlen: 48
                          2a06:98c0:1c43::/48 maxlen: 48
                          2a06:98c0:1c44::/48 maxlen: 48
                          2a06:98c0:1c45::/48 maxlen: 48
                          2a06:98c0:1c46::/48 maxlen: 48
                          2a06:98c0:1c47::/48 maxlen: 48
                          2a06:98c0:1c48::/48 maxlen: 48
                          2a06:98c0:1c49::/48 maxlen: 48
                          2a06:98c0:1c4b::/48 maxlen: 48
                          2a06:98c0:1c4c::/48 maxlen: 48
                          2a06:98c0:1c4d::/48 maxlen: 48
                          2a06:98c0:1c4e::/48 maxlen: 48
                          2a06:98c0:1c4f::/48 maxlen: 48
                          2a06:98c0:1c50::/48 maxlen: 48
                          2a06:98c0:1c51::/48 maxlen: 48
                          2a06:98c0:1c52::/48 maxlen: 48
                          2a06:98c0:1c53::/48 maxlen: 48
                          2a06:98c0:3619::/48 maxlen: 48
                          2a06:98c0:361a::/48 maxlen: 48
                          2a06:98c1:40::/48 maxlen: 48
                          2a06:98c1:41::/48 maxlen: 48
                          2a06:98c1:42::/48 maxlen: 48
                          2a06:98c1:43::/48 maxlen: 48
                          2a06:98c1:48::/48 maxlen: 48
                          2a06:98c1:49::/48 maxlen: 48
                          2a06:98c1:50::/45 maxlen: 45
                          2a06:98c1:54::/48 maxlen: 48
                          2a06:98c1:56::/48 maxlen: 48
                          2a06:98c1:58::/48 maxlen: 48
                          2a06:98c1:3100::/48 maxlen: 48
                          2a06:98c1:3101::/48 maxlen: 48
                          2a06:98c1:3102::/48 maxlen: 48
                          2a06:98c1:3103::/48 maxlen: 48
                          2a06:98c1:3104::/48 maxlen: 48
                          2a06:98c1:3105::/48 maxlen: 48
                          2a06:98c1:3106::/48 maxlen: 48
                          2a06:98c1:3107::/48 maxlen: 48
                          2a06:98c1:3108::/48 maxlen: 48
                          2a06:98c1:3109::/48 maxlen: 48
                          2a06:98c1:310a::/48 maxlen: 48
                          2a06:98c1:310b::/48 maxlen: 48
                          2a06:98c1:310c::/48 maxlen: 48
                          2a06:98c1:310d::/48 maxlen: 48
                          2a06:98c1:310e::/48 maxlen: 48
                          2a06:98c1:310f::/48 maxlen: 48
                          2a06:98c1:3120::/48 maxlen: 48
                          2a06:98c1:3121::/48 maxlen: 48
                          2a06:98c1:3122::/48 maxlen: 48
                          2a06:98c1:3123::/48 maxlen: 48
                          2a06:98c1:3200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:18:26:d6:fc:ec:c7:68:89:54:4f:61:f6:bf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Jan  2 17:49:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c86f907d55cc04a459a1df6951e57752595e875b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:4a:af:a7:eb:d2:67:0e:2c:4a:20:1b:f5:
                    99:e9:a6:98:2b:c2:74:52:d5:a3:13:5c:60:39:0e:
                    d7:49:58:5b:d6:f4:48:34:c4:19:fb:63:b7:64:59:
                    95:6a:a3:1e:c9:e3:04:19:76:d0:da:ee:78:da:ff:
                    5f:aa:89:0d:a9:fe:6d:1c:ee:aa:23:d5:c1:14:b1:
                    9c:28:d0:ee:14:04:6b:ab:f5:9f:b5:3a:8f:2b:4c:
                    b2:19:48:ac:e6:b9:48:e0:cc:3e:6e:72:9d:99:74:
                    11:04:13:cf:cd:e4:b1:76:e9:1c:80:ca:94:59:47:
                    74:92:70:19:46:10:95:11:a2:04:71:a3:33:48:8a:
                    14:53:2f:90:f7:7a:91:3e:3b:6b:b4:8d:d6:97:c0:
                    42:e5:e0:55:48:46:68:eb:5a:b8:9b:ea:e3:5c:8e:
                    8b:24:b2:04:97:b3:74:b3:5b:fa:08:91:1d:97:ba:
                    22:ca:0b:08:87:a9:63:a9:46:3a:6a:dd:67:a2:c3:
                    5f:12:7b:41:ec:28:46:e2:fc:d7:fb:ef:1e:63:2a:
                    70:2e:9c:5f:59:46:6d:72:08:26:15:44:44:82:16:
                    ac:8b:18:da:ef:f6:cd:47:a7:68:3a:02:57:30:18:
                    af:eb:ef:3a:70:d9:d0:de:1e:3e:08:db:e3:6a:e5:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6F:90:7D:55:CC:04:A4:59:A1:DF:69:51:E5:77:52:59:5E:87:5B
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/yG-QfVXMBKRZod9pUeV3Ulleh1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.101.64.0-141.101.77.255
                  141.101.82.0-141.101.127.255
                  188.114.96.0-188.114.104.255
                  188.114.106.0-188.114.111.255
                IPv6:
                  2a06:98c0:1c01::-2a06:98c0:1c0a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c0c::-2a06:98c0:1c10:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c20::-2a06:98c0:1c49:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:1c4b::-2a06:98c0:1c53:ffff:ffff:ffff:ffff:ffff
                  2a06:98c0:3619::-2a06:98c0:361a:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:40::/46
                  2a06:98c1:48::/47
                  2a06:98c1:50::-2a06:98c1:58:ffff:ffff:ffff:ffff:ffff
                  2a06:98c1:3100::/44
                  2a06:98c1:3120::/46
                  2a06:98c1:3200::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:d3:43:31:a4:a2:0c:62:c8:bc:23:02:8f:7b:7a:19:ad:
         72:68:8c:c8:e4:89:eb:be:22:4a:90:2f:25:60:f9:1e:63:8d:
         8c:8c:21:66:da:93:a1:f7:12:c3:1a:23:a0:72:d2:aa:63:dc:
         a7:f7:13:b8:d4:41:ca:f0:68:ef:29:2e:2b:11:71:80:5f:c3:
         57:c9:18:f8:56:1f:ae:83:b0:56:39:f5:bc:28:85:e4:5e:d8:
         8e:30:3c:42:3c:a7:0c:e8:12:50:25:1e:00:af:03:ab:70:57:
         b4:21:da:94:e0:24:5a:32:89:08:0f:d2:5d:5d:6c:c0:26:96:
         12:b9:1a:7e:15:2a:ac:62:f1:93:d6:c2:26:e2:20:5e:3e:84:
         ae:c1:24:13:c6:f9:6c:2c:fc:1c:de:60:64:86:f9:3d:d5:af:
         51:3f:2f:d4:2f:73:77:29:83:d2:63:f4:fa:71:3d:74:97:64:
         fd:5a:5f:73:c8:e9:30:79:59:2d:b9:64:d4:db:25:13:fe:73:
         35:a3:fc:1f:f3:e7:70:84:58:d3:c0:e0:5f:16:6d:d3:9c:74:
         b5:f1:db:8e:0e:a3:6c:a3:02:aa:6f:ee:0c:f2:4e:fa:3e:cf:
         03:fb:01:f0:60:84:8e:b2:64:90:25:17:0a:8b:11:47:4b:ee:
         a5:bb:b0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:18:24 2025 by rpki-client