Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/qp4i_eZ6J2UOG69HPGVB6kmhFng.roa
File:                     qp4i_eZ6J2UOG69HPGVB6kmhFng.roa (raw, json)
Hash identifier:          XVzQsRuZhQ9NpMeiK4lLd7vR0Edi82kUpYpVa1/GB40=
Subject key identifier:   AA:9E:22:FD:E6:7A:27:65:0E:1B:AF:47:3C:65:41:EA:49:A1:16:78
Certificate issuer:       /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial:       019504E09859D46641B28D6D321C7155A548
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/qp4i_eZ6J2UOG69HPGVB6kmhFng.roa
Signing time:             Fri 14 Feb 2025 14:33:02 +0000
ROA not before:           Fri 14 Feb 2025 14:33:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41221
IP address blocks:        5.56.64.0/18 maxlen: 24
                          37.75.16.0/20 maxlen: 24
                          37.75.64.0/18 maxlen: 24
                          46.55.0.0/17 maxlen: 24
                          85.204.176.0/21 maxlen: 24
                          86.104.196.0/22 maxlen: 24
                          86.105.56.0/21 maxlen: 24
                          86.105.80.0/21 maxlen: 24
                          86.105.172.0/22 maxlen: 24
                          86.105.208.0/22 maxlen: 24
                          86.106.144.0/21 maxlen: 24
                          86.106.208.0/20 maxlen: 24
                          86.107.64.0/22 maxlen: 24
                          86.107.160.0/21 maxlen: 24
                          89.32.56.0/21 maxlen: 24
                          89.32.136.0/21 maxlen: 24
                          89.32.172.0/22 maxlen: 24
                          89.32.252.0/22 maxlen: 24
                          89.34.64.0/21 maxlen: 24
                          89.34.112.0/21 maxlen: 24
                          89.34.192.0/21 maxlen: 24
                          89.34.204.0/22 maxlen: 24
                          89.34.232.0/22 maxlen: 24
                          89.35.8.0/21 maxlen: 24
                          89.35.40.0/21 maxlen: 24
                          89.35.84.0/22 maxlen: 24
                          89.35.200.0/22 maxlen: 24
                          89.36.156.0/22 maxlen: 24
                          89.37.44.0/22 maxlen: 24
                          89.37.104.0/24 maxlen: 24
                          89.38.32.0/22 maxlen: 24
                          89.38.64.0/22 maxlen: 24
                          89.38.76.0/22 maxlen: 24
                          89.39.76.0/22 maxlen: 24
                          89.39.84.0/22 maxlen: 24
                          89.39.96.0/21 maxlen: 24
                          89.39.112.0/21 maxlen: 24
                          89.40.228.0/22 maxlen: 24
                          89.41.64.0/18 maxlen: 24
                          89.42.64.0/22 maxlen: 24
                          89.42.72.0/21 maxlen: 24
                          89.42.104.0/22 maxlen: 24
                          89.42.128.0/22 maxlen: 24
                          89.42.180.0/22 maxlen: 24
                          89.42.224.0/22 maxlen: 24
                          89.43.128.0/22 maxlen: 24
                          89.43.168.0/22 maxlen: 24
                          89.44.152.0/22 maxlen: 24
                          89.45.40.0/22 maxlen: 24
                          89.46.164.0/22 maxlen: 24
                          92.114.128.0/17 maxlen: 24
                          93.113.64.0/21 maxlen: 24
                          93.113.80.0/21 maxlen: 24
                          93.113.92.0/22 maxlen: 24
                          93.113.244.0/22 maxlen: 24
                          93.115.136.0/21 maxlen: 24
                          93.116.0.0/16 maxlen: 24
                          93.117.48.0/20 maxlen: 24
                          93.117.68.0/22 maxlen: 24
                          93.117.72.0/21 maxlen: 24
                          93.117.128.0/21 maxlen: 24
                          93.117.140.0/22 maxlen: 24
                          93.117.144.0/21 maxlen: 24
                          93.117.156.0/22 maxlen: 24
                          93.117.160.0/21 maxlen: 24
                          93.117.168.0/22 maxlen: 24
                          93.118.176.0/22 maxlen: 24
                          93.118.188.0/22 maxlen: 24
                          93.119.96.0/21 maxlen: 24
                          93.119.108.0/22 maxlen: 24
                          93.119.128.0/21 maxlen: 24
                          93.119.140.0/22 maxlen: 24
                          93.119.144.0/21 maxlen: 24
                          93.119.160.0/21 maxlen: 24
                          93.119.196.0/22 maxlen: 24
                          93.119.200.0/21 maxlen: 24
                          93.119.228.0/22 maxlen: 24
                          93.119.232.0/21 maxlen: 24
                          94.176.64.0/20 maxlen: 24
                          109.185.0.0/16 maxlen: 24
                          178.132.112.0/20 maxlen: 24
                          178.132.128.0/19 maxlen: 24
                          185.28.104.0/22 maxlen: 24
                          188.208.96.0/22 maxlen: 24
                          188.208.104.0/22 maxlen: 24
                          188.208.112.0/22 maxlen: 24
                          188.208.120.0/21 maxlen: 24
                          188.208.192.0/22 maxlen: 24
                          188.208.204.0/22 maxlen: 24
                          188.209.216.0/21 maxlen: 24
                          188.210.240.0/21 maxlen: 24
                          188.210.248.0/22 maxlen: 24
                          188.212.0.0/22 maxlen: 24
                          188.212.8.0/21 maxlen: 24
                          188.212.24.0/21 maxlen: 24
                          188.212.40.0/21 maxlen: 24
                          188.213.36.0/22 maxlen: 24
                          188.213.52.0/22 maxlen: 24
                          188.213.220.0/22 maxlen: 24
                          188.213.236.0/22 maxlen: 24
                          188.213.244.0/22 maxlen: 24
                          188.214.60.0/22 maxlen: 24
                          188.214.136.0/22 maxlen: 24
                          188.214.144.0/22 maxlen: 24
                          188.214.200.0/21 maxlen: 24
                          188.215.252.0/22 maxlen: 24
                          188.237.0.0/16 maxlen: 24
                          212.0.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:04:e0:98:59:d4:66:41:b2:8d:6d:32:1c:71:55:a5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
        Validity
            Not Before: Feb 14 14:33:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aa9e22fde67a27650e1baf473c6541ea49a11678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:cd:2f:77:1f:f3:7a:e9:d8:1d:96:b6:77:
                    6d:11:81:8a:3b:64:0f:51:bb:f2:c3:2e:e3:1f:cd:
                    6e:a4:74:36:b5:7e:4c:73:31:05:f7:b8:9c:01:42:
                    c3:4a:6b:fc:80:f1:c3:d2:5f:10:37:11:f0:b5:56:
                    fd:3f:ed:4a:d5:24:ef:b7:69:4c:cc:e2:4e:12:11:
                    bf:05:7e:ec:ec:1a:66:a7:26:37:48:12:10:32:1b:
                    e6:75:14:89:f8:5f:b6:0e:76:16:e0:1a:b6:6a:cb:
                    6d:fa:dc:bb:a7:08:7b:b4:36:3b:4b:29:3f:cf:07:
                    09:12:a5:48:ae:80:f8:c4:91:fa:fa:31:e2:92:3e:
                    a0:db:96:1c:67:ce:aa:cd:6d:3d:02:ac:88:67:4b:
                    fb:7b:51:7a:25:4c:f1:2a:92:0d:11:36:0b:c7:17:
                    9f:45:9b:da:a3:4d:82:0a:0a:d8:ff:d2:3c:01:58:
                    ad:98:2f:a9:06:34:0e:85:34:a9:aa:ca:69:47:1c:
                    26:3d:ad:69:6d:5e:17:76:15:cb:f6:fa:e5:df:ab:
                    7c:4a:5c:83:81:1b:1f:d4:8b:99:86:82:1b:53:6e:
                    ab:0e:98:e1:6c:a8:c9:74:90:24:59:ca:00:51:3b:
                    e1:ba:b2:ff:64:eb:43:86:6d:eb:e6:61:98:58:83:
                    e8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9E:22:FD:E6:7A:27:65:0E:1B:AF:47:3C:65:41:EA:49:A1:16:78
            X509v3 Authority Key Identifier:
                keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/qp4i_eZ6J2UOG69HPGVB6kmhFng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.64.0/18
                  37.75.16.0/20
                  37.75.64.0/18
                  46.55.0.0/17
                  85.204.176.0/21
                  86.104.196.0/22
                  86.105.56.0/21
                  86.105.80.0/21
                  86.105.172.0/22
                  86.105.208.0/22
                  86.106.144.0/21
                  86.106.208.0/20
                  86.107.64.0/22
                  86.107.160.0/21
                  89.32.56.0/21
                  89.32.136.0/21
                  89.32.172.0/22
                  89.32.252.0/22
                  89.34.64.0/21
                  89.34.112.0/21
                  89.34.192.0/21
                  89.34.204.0/22
                  89.34.232.0/22
                  89.35.8.0/21
                  89.35.40.0/21
                  89.35.84.0/22
                  89.35.200.0/22
                  89.36.156.0/22
                  89.37.44.0/22
                  89.37.104.0/24
                  89.38.32.0/22
                  89.38.64.0/22
                  89.38.76.0/22
                  89.39.76.0/22
                  89.39.84.0/22
                  89.39.96.0/21
                  89.39.112.0/21
                  89.40.228.0/22
                  89.41.64.0/18
                  89.42.64.0/22
                  89.42.72.0/21
                  89.42.104.0/22
                  89.42.128.0/22
                  89.42.180.0/22
                  89.42.224.0/22
                  89.43.128.0/22
                  89.43.168.0/22
                  89.44.152.0/22
                  89.45.40.0/22
                  89.46.164.0/22
                  92.114.128.0/17
                  93.113.64.0/21
                  93.113.80.0/21
                  93.113.92.0/22
                  93.113.244.0/22
                  93.115.136.0/21
                  93.116.0.0/16
                  93.117.48.0/20
                  93.117.68.0-93.117.79.255
                  93.117.128.0/21
                  93.117.140.0-93.117.151.255
                  93.117.156.0-93.117.171.255
                  93.118.176.0/22
                  93.118.188.0/22
                  93.119.96.0/21
                  93.119.108.0/22
                  93.119.128.0/21
                  93.119.140.0-93.119.151.255
                  93.119.160.0/21
                  93.119.196.0-93.119.207.255
                  93.119.228.0-93.119.239.255
                  94.176.64.0/20
                  109.185.0.0/16
                  178.132.112.0-178.132.159.255
                  185.28.104.0/22
                  188.208.96.0/22
                  188.208.104.0/22
                  188.208.112.0/22
                  188.208.120.0/21
                  188.208.192.0/22
                  188.208.204.0/22
                  188.209.216.0/21
                  188.210.240.0-188.210.251.255
                  188.212.0.0/22
                  188.212.8.0/21
                  188.212.24.0/21
                  188.212.40.0/21
                  188.213.36.0/22
                  188.213.52.0/22
                  188.213.220.0/22
                  188.213.236.0/22
                  188.213.244.0/22
                  188.214.60.0/22
                  188.214.136.0/22
                  188.214.144.0/22
                  188.214.200.0/21
                  188.215.252.0/22
                  188.237.0.0/16
                  212.0.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:4c:9d:51:13:2d:1b:4b:f3:be:5a:e4:36:15:28:fc:ce:
         f3:8f:df:d8:1c:a9:b8:f6:b8:8d:2d:30:0a:4d:81:c7:12:50:
         c8:47:e4:97:a8:95:91:ac:08:3f:3d:54:90:33:04:41:f7:01:
         87:c5:68:fc:df:e8:91:20:11:c5:16:ae:84:c6:dd:69:bd:bf:
         e4:60:68:ee:87:dc:02:d1:c7:7c:83:d0:a3:af:97:6a:d0:67:
         ee:6c:9e:8f:f1:78:53:25:e2:80:38:e6:5b:1f:06:c4:82:59:
         84:7a:58:8f:9d:fe:e9:fd:41:4f:f1:3b:07:d9:e2:a3:4a:9e:
         be:8e:6f:bf:94:11:b6:77:cc:e3:0a:04:94:f1:e9:5f:bd:f9:
         9b:68:7b:f3:e2:97:0e:83:d9:21:7b:1e:b9:e6:86:81:6e:8d:
         80:72:29:e8:4d:6d:8c:d2:24:db:76:5f:40:50:48:23:08:87:
         3c:35:d9:19:cb:eb:81:39:d5:c4:ac:aa:9b:2c:66:d5:26:d7:
         f4:27:d4:85:c9:fa:62:23:8d:84:fc:1c:8e:28:81:e0:a0:7b:
         39:c0:4f:f2:e7:18:6d:6d:71:50:d7:b4:ee:d0:3b:96:f2:bc:
         73:c3:90:83:5b:64:ce:97:73:78:e4:a6:3c:8a:08:86:e6:80:
         8c:99:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:29 2025 by rpki-client