Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J_FW6C53GNA1eZgfBxqmfj1GnHk.roa
File:                     J_FW6C53GNA1eZgfBxqmfj1GnHk.roa (raw, json)
Hash identifier:          2FVTaWaI6Pa7rkvw9aYDp7sxlvCorspj3xme17atTXY=
Subject key identifier:   27:F1:56:E8:2E:77:18:D0:35:79:98:1F:07:1A:A6:7E:3D:46:9C:79
Certificate issuer:       /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial:       019421B1CCF2F4A2765AF45F0B47F83B0558
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J_FW6C53GNA1eZgfBxqmfj1GnHk.roa
Signing time:             Wed 01 Jan 2025 11:48:07 +0000
ROA not before:           Wed 01 Jan 2025 11:48:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60781
IP address blocks:        5.79.64.0/18 maxlen: 18
                          37.48.64.0/18 maxlen: 18
                          62.212.64.0/19 maxlen: 19
                          81.17.47.0/24 maxlen: 24
                          81.17.49.0/24 maxlen: 24
                          81.17.50.0/24 maxlen: 24
                          81.17.51.0/24 maxlen: 24
                          81.17.52.0/24 maxlen: 24
                          81.17.53.0/24 maxlen: 24
                          81.17.54.0/24 maxlen: 24
                          81.17.55.0/24 maxlen: 24
                          81.171.0.0/19 maxlen: 19
                          82.192.64.0/19 maxlen: 19
                          83.149.64.0/18 maxlen: 18
                          85.17.0.0/16 maxlen: 16
                          89.149.192.0/18 maxlen: 18
                          89.149.192.0/20 maxlen: 20
                          94.75.192.0/18 maxlen: 18
                          95.168.160.0/20 maxlen: 20
                          95.211.0.0/16 maxlen: 16
                          95.211.51.0/24 maxlen: 24
                          95.211.85.0/24 maxlen: 24
                          173.234.68.0/22 maxlen: 22
                          178.162.128.0/18 maxlen: 18
                          178.162.162.0/23 maxlen: 23
                          178.162.164.0/22 maxlen: 22
                          178.162.168.0/22 maxlen: 22
                          178.162.176.0/20 maxlen: 20
                          185.17.184.0/22 maxlen: 22
                          212.7.192.0/20 maxlen: 20
                          212.7.208.0/22 maxlen: 22
                          212.32.224.0/19 maxlen: 19
                          213.227.128.0/19 maxlen: 19
                          2001:1af8::/32 maxlen: 32
                          2001:1af8:8000::/36 maxlen: 36
                          2001:1af8:8000::/40 maxlen: 40
                          2001:1af8:8100::/44 maxlen: 44
                          2001:1af8:8110::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:cc:f2:f4:a2:76:5a:f4:5f:0b:47:f8:3b:05:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
        Validity
            Not Before: Jan  1 11:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=27f156e82e7718d03579981f071aa67e3d469c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:b6:cb:46:56:f4:84:59:91:00:34:ae:11:
                    c0:17:c7:4c:89:e6:02:93:02:6f:65:fe:d6:ee:b1:
                    9b:40:88:f7:4f:b3:56:14:d0:21:8f:90:bc:eb:c0:
                    47:d0:8c:a7:08:5d:a3:1a:4a:0c:55:b0:ae:55:97:
                    81:68:5b:10:e7:d5:43:31:c0:11:8d:26:03:b3:7b:
                    e5:46:92:9f:e8:e3:87:39:21:f8:97:21:08:92:7e:
                    b9:fa:5b:f6:74:55:3c:97:ea:59:39:ae:ec:7f:28:
                    80:db:38:c8:a1:0b:aa:34:44:7f:51:41:1b:5c:63:
                    ac:5a:0c:14:51:0f:12:dd:69:ff:78:15:b4:1b:29:
                    32:19:da:10:98:5d:e2:99:a0:3d:81:1e:73:b1:f5:
                    1f:98:91:64:be:6b:16:1a:09:a9:36:aa:b8:6f:7b:
                    52:ce:00:cc:a5:d2:83:e0:9e:1d:00:38:8a:cb:3f:
                    20:80:b3:01:0c:ce:c1:b5:70:b9:99:40:be:b0:0b:
                    51:1c:b0:96:04:27:bb:9d:59:2e:2a:80:62:d9:1c:
                    2b:b2:7f:73:b8:4e:a3:b2:69:3d:23:10:d3:ce:1a:
                    b4:ad:59:67:ba:0b:cd:2f:11:ed:59:a8:25:4a:64:
                    38:36:bc:7b:70:57:2e:f2:a4:a0:e9:d6:2c:69:7b:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F1:56:E8:2E:77:18:D0:35:79:98:1F:07:1A:A6:7E:3D:46:9C:79
            X509v3 Authority Key Identifier:
                keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J_FW6C53GNA1eZgfBxqmfj1GnHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.79.64.0/18
                  37.48.64.0/18
                  62.212.64.0/19
                  81.17.47.0/24
                  81.17.49.0-81.17.55.255
                  81.171.0.0/19
                  82.192.64.0/19
                  83.149.64.0/18
                  85.17.0.0/16
                  89.149.192.0/18
                  94.75.192.0/18
                  95.168.160.0/20
                  95.211.0.0/16
                  173.234.68.0/22
                  178.162.128.0/18
                  185.17.184.0/22
                  212.7.192.0-212.7.211.255
                  212.32.224.0/19
                  213.227.128.0/19
                IPv6:
                  2001:1af8::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:3b:de:0a:79:e8:c2:a1:86:61:f5:82:65:bd:ef:e1:5b:
         d9:16:a6:a0:83:05:90:62:bd:bf:06:df:4d:fc:5e:00:00:98:
         0d:01:5a:ae:6a:2d:88:3e:4a:7a:3a:c1:76:8f:6f:89:55:51:
         4a:68:90:2e:f7:d2:79:da:41:59:27:2a:ea:75:e1:47:10:7c:
         a7:df:1c:f8:46:46:9f:c1:61:96:0d:b0:6a:78:ae:dd:4b:70:
         0f:86:9a:9c:65:b3:6f:cc:06:75:ae:c4:f7:a9:e8:1f:df:62:
         86:10:93:81:2a:12:cb:e4:80:c3:e6:a8:9b:ad:c3:23:52:71:
         99:17:41:e2:ce:39:5f:5e:85:e1:d8:f1:f6:89:5f:bd:05:db:
         81:20:61:ac:98:ae:bd:3e:df:0d:97:88:82:1c:b2:6d:48:d0:
         1d:f8:c8:e2:98:3c:9c:55:cb:69:d8:91:75:5a:2c:18:c8:75:
         57:8b:d4:87:42:b2:12:35:c2:80:40:63:4d:ad:6c:51:89:ae:
         d9:be:19:61:59:11:5f:69:08:df:dc:ff:70:54:f2:c9:6b:45:
         f0:fe:93:04:9b:93:ab:17:78:26:32:6e:7a:d1:44:8e:d7:ec:
         af:d0:9e:b4:8e:26:22:11:0b:cc:fb:5f:89:d5:d1:af:3b:13:
         67:80:90:02
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISAZQhsczy9KJ2WvRfC0f4OwVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDczMDRjMWI1OWRjMjI3MzFiYjUzZWZmNWE4NGVkOWEz
MDYxNGMwHhcNMjUwMTAxMTE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2YxNTZlODJlNzcxOGQwMzU3OTk4MWYwNzFhYTY3ZTNkNDY5Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7K2y0ZW9IRZkQA0rhHAF8dMieYC
kwJvZf7W7rGbQIj3T7NWFNAhj5C868BH0IynCF2jGkoMVbCuVZeBaFsQ59VDMcAR
jSYDs3vlRpKf6OOHOSH4lyEIkn65+lv2dFU8l+pZOa7sfyiA2zjIoQuqNER/UUEb
XGOsWgwUUQ8S3Wn/eBW0GykyGdoQmF3imaA9gR5zsfUfmJFkvmsWGgmpNqq4b3tS
zgDMpdKD4J4dADiKyz8ggLMBDM7BtXC5mUC+sAtRHLCWBCe7nVkuKoBi2Rwrsn9z
uE6jsmk9IxDTzhq0rVlnugvNLxHtWaglSmQ4Nrx7cFcu8qSg6dYsaXus/wIDAQAB
o4IClzCCApMwHQYDVR0OBBYEFCfxVugudxjQNXmYHwcapn49Rpx5MB8GA1UdIwQY
MBaAFCfXMEwbWdwicxu1Pv9ahO2aMGFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt
ZmZmYjVhNGU3NjJhLzEvSl9GVzZDNTNHTkExZVpnZkJ4cW1majFHbkhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh
LzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBhwQCAAEwgYADBAYF
T0ADBAYlMEADBAU+1EADBABRES8wDAMEAFERMQMEA1ERMAMEBVGrAAMEBVLAQAME
BlOVQAMDAFURAwQGWZXAAwQGXkvAAwQEX6igAwMAX9MDBAKt6kQDBAayooADBAK5
EbgwDAMEBtQHwAMEAtQH0AMEBdQg4AMEBdXjgDANBAIAAjAHAwUAIAEa+DANBgkq
hkiG9w0BAQsFAAOCAQEABu073gp56MKhhmH1gmW97+Fb2RamoIMFkGK9vwbfTfxe
AACYDQFarmotiD5KejrBdo9viVVRSmiQLvfSedpBWScq6nXhRxB8p98c+EZGn8Fh
lg2waniu3UtwD4aanGWzb8wGda7E96noH99ihhCTgSoSy+SAw+aom63DI1JxmRdB
4s45X16F4djx9olfvQXbgSBhrJiuvT7fDZeIghyybUjQHfjI4pg8nFXLadiRdVos
GMh1V4vUh0KyEjXCgEBjTa1sUYmu2b4ZYVkRX2kI39z/cFTyyWtF8P6TBJuTqxd4
JjJuetFEjtfsr9CetI4mIhELzPtfidXRrzsTZ4CQAg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:21 2025 by rpki-client