Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-vrVGZ9-9RzsL8RSFQK0lV4kcwk.roa
File:                     1-vrVGZ9-9RzsL8RSFQK0lV4kcwk.roa (raw, json)
Hash identifier:          kUzzZILfdgyOYJoDad9ytUBF926wkHQmKj55nmX/LaQ=
Subject key identifier:   FA:FA:D5:19:9F:7E:F5:1C:EC:2F:C4:52:15:02:B4:95:5E:24:73:09
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       018505E1274F2521BB5276D5611E8E171B60
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-vrVGZ9-9RzsL8RSFQK0lV4kcwk.roa
Signing time:             Mon 12 Dec 2022 10:28:39 +0000
ROA not before:           Mon 12 Dec 2022 10:28:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31163
IP address blocks:        85.26.189.0/24 maxlen: 24
                          85.26.188.0/24 maxlen: 24
                          85.26.187.0/24 maxlen: 24
                          85.26.191.0/24 maxlen: 24
                          85.26.190.0/24 maxlen: 24
                          85.26.179.0/24 maxlen: 24
                          85.26.176.0/23 maxlen: 23
                          85.26.178.0/24 maxlen: 24
                          85.26.181.0/24 maxlen: 24
                          85.26.185.0/24 maxlen: 24
                          85.26.180.0/24 maxlen: 24
                          85.26.184.0/24 maxlen: 24
                          85.26.183.0/24 maxlen: 24
                          85.26.182.0/24 maxlen: 24
                          85.26.186.0/24 maxlen: 24
                          31.173.192.0/24 maxlen: 24
                          31.173.193.0/24 maxlen: 24
                          31.173.197.0/24 maxlen: 24
                          31.173.196.0/24 maxlen: 24
                          31.173.195.0/24 maxlen: 24
                          31.173.199.0/24 maxlen: 24
                          31.173.194.0/24 maxlen: 24
                          31.173.198.0/24 maxlen: 24
                          31.173.201.0/24 maxlen: 24
                          31.173.205.0/24 maxlen: 24
                          31.173.204.0/24 maxlen: 24
                          31.173.200.0/24 maxlen: 24
                          31.173.203.0/24 maxlen: 24
                          31.173.202.0/24 maxlen: 24
                          31.173.206.0/24 maxlen: 24
                          31.173.209.0/24 maxlen: 24
                          31.173.213.0/24 maxlen: 24
                          31.173.208.0/24 maxlen: 24
                          31.173.212.0/24 maxlen: 24
                          31.173.207.0/24 maxlen: 24
                          31.173.211.0/24 maxlen: 24
                          31.173.210.0/24 maxlen: 24
                          31.173.217.0/24 maxlen: 24
                          31.173.216.0/24 maxlen: 24
                          31.173.215.0/24 maxlen: 24
                          31.173.219.0/24 maxlen: 24
                          31.173.214.0/24 maxlen: 24
                          31.173.218.0/24 maxlen: 24
                          31.173.221.0/24 maxlen: 24
                          31.173.220.0/24 maxlen: 24
                          31.173.223.0/24 maxlen: 24
                          31.173.222.0/24 maxlen: 24
                          109.106.192.0/24 maxlen: 24
                          109.106.193.0/24 maxlen: 24
                          109.106.197.0/24 maxlen: 24
                          109.106.196.0/24 maxlen: 24
                          109.106.195.0/24 maxlen: 24
                          109.106.199.0/24 maxlen: 24
                          109.106.194.0/24 maxlen: 24
                          109.106.198.0/24 maxlen: 24
                          178.178.2.0/24 maxlen: 24
                          178.178.3.0/24 maxlen: 24
                          178.178.0.0/24 maxlen: 24
                          178.178.4.0/24 maxlen: 24
                          178.178.1.0/24 maxlen: 24
                          178.178.5.0/24 maxlen: 24
                          37.29.119.0/24 maxlen: 24
                          37.29.123.0/24 maxlen: 24
                          37.29.122.0/24 maxlen: 24
                          37.29.125.0/24 maxlen: 24
                          37.29.121.0/24 maxlen: 24
                          37.29.124.0/24 maxlen: 24
                          37.29.120.0/24 maxlen: 24
                          37.29.127.0/24 maxlen: 24
                          37.29.126.0/24 maxlen: 24
                          185.3.32.0/23 maxlen: 23
                          185.3.34.0/23 maxlen: 23
                          178.176.215.0/24 maxlen: 24
                          178.176.219.0/24 maxlen: 24
                          178.176.214.0/24 maxlen: 24
                          178.176.218.0/24 maxlen: 24
                          178.176.217.0/24 maxlen: 24
                          178.176.216.0/24 maxlen: 24
                          178.176.223.0/24 maxlen: 24
                          178.176.222.0/24 maxlen: 24
                          178.176.221.0/24 maxlen: 24
                          178.176.220.0/24 maxlen: 24
                          188.170.191.0/24 maxlen: 24
                          188.170.187.0/24 maxlen: 24
                          188.170.190.0/24 maxlen: 24
                          188.170.189.0/24 maxlen: 24
                          188.170.192.0/24 maxlen: 24
                          188.170.188.0/24 maxlen: 24
                          188.170.195.0/24 maxlen: 24
                          188.170.199.0/24 maxlen: 24
                          188.170.194.0/24 maxlen: 24
                          188.170.198.0/24 maxlen: 24
                          188.170.193.0/24 maxlen: 24
                          188.170.197.0/24 maxlen: 24
                          188.170.196.0/24 maxlen: 24
                          188.170.200.0/22 maxlen: 22
                          188.170.204.0/22 maxlen: 22
                          188.170.211.0/24 maxlen: 24
                          188.170.210.0/24 maxlen: 24
                          188.170.209.0/24 maxlen: 24
                          188.170.213.0/24 maxlen: 24
                          188.170.208.0/24 maxlen: 24
                          188.170.212.0/24 maxlen: 24
                          188.170.215.0/24 maxlen: 24
                          188.170.214.0/24 maxlen: 24
                          188.170.218.0/24 maxlen: 24
                          188.170.217.0/24 maxlen: 24
                          188.170.219.0/24 maxlen: 24
                          188.170.216.0/24 maxlen: 24
                          188.170.220.0/24 maxlen: 24
                          188.170.224.0/24 maxlen: 24
                          188.170.221.0/24 maxlen: 24
                          188.170.225.0/24 maxlen: 24
                          188.170.222.0/24 maxlen: 24
                          188.170.226.0/24 maxlen: 24
                          188.170.223.0/24 maxlen: 24
                          188.170.227.0/24 maxlen: 24
                          37.29.112.0/24 maxlen: 24
                          37.29.115.0/24 maxlen: 24
                          37.29.114.0/24 maxlen: 24
                          37.29.118.0/24 maxlen: 24
                          37.29.113.0/24 maxlen: 24
                          37.29.117.0/24 maxlen: 24
                          37.29.116.0/24 maxlen: 24
                          188.170.171.0/24 maxlen: 24
                          188.170.170.0/24 maxlen: 24
                          188.170.169.0/24 maxlen: 24
                          188.170.168.0/21 maxlen: 21
                          188.170.172.0/24 maxlen: 24
                          188.170.175.0/24 maxlen: 24
                          188.170.179.0/24 maxlen: 24
                          188.170.174.0/24 maxlen: 24
                          188.170.178.0/24 maxlen: 24
                          188.170.173.0/24 maxlen: 24
                          188.170.177.0/24 maxlen: 24
                          188.170.176.0/24 maxlen: 24
                          188.170.183.0/24 maxlen: 24
                          188.170.182.0/24 maxlen: 24
                          188.170.186.0/24 maxlen: 24
                          188.170.181.0/24 maxlen: 24
                          188.170.185.0/24 maxlen: 24
                          188.170.180.0/24 maxlen: 24
                          188.170.184.0/24 maxlen: 24
                          83.149.24.0/24 maxlen: 24
                          83.149.28.0/24 maxlen: 24
                          83.149.25.0/24 maxlen: 24
                          83.149.29.0/24 maxlen: 24
                          83.149.31.0/24 maxlen: 24
                          83.149.30.0/24 maxlen: 24
                          83.169.232.0/24 maxlen: 24
                          83.169.233.0/24 maxlen: 24
                          83.169.240.0/24 maxlen: 24
                          83.169.237.0/24 maxlen: 24
                          83.169.234.0/24 maxlen: 24
                          83.169.238.0/24 maxlen: 24
                          83.169.235.0/24 maxlen: 24
                          83.169.239.0/24 maxlen: 24
                          83.169.244.0/24 maxlen: 24
                          83.169.241.0/24 maxlen: 24
                          83.169.245.0/24 maxlen: 24
                          83.169.242.0/24 maxlen: 24
                          83.169.246.0/24 maxlen: 24
                          83.169.243.0/24 maxlen: 24
                          83.169.247.0/24 maxlen: 24
                          178.176.192.0/24 maxlen: 24
                          178.176.195.0/24 maxlen: 24
                          178.176.194.0/24 maxlen: 24
                          178.176.198.0/24 maxlen: 24
                          178.176.193.0/24 maxlen: 24
                          178.176.197.0/24 maxlen: 24
                          178.176.196.0/24 maxlen: 24
                          178.176.203.0/24 maxlen: 24
                          178.176.202.0/24 maxlen: 24
                          178.176.211.0/24 maxlen: 24
                          178.176.210.0/24 maxlen: 24
                          178.176.213.0/24 maxlen: 24
                          178.176.209.0/24 maxlen: 24
                          178.176.212.0/24 maxlen: 24
                          178.176.208.0/24 maxlen: 24
                          188.162.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:05:e1:27:4f:25:21:bb:52:76:d5:61:1e:8e:17:1b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec 12 10:28:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fafad5199f7ef51cec2fc4521502b4955e247309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:84:5c:e3:da:39:5f:8a:73:e6:86:67:d7:
                    29:b5:0a:72:1e:5f:5b:6f:31:98:43:4c:ee:40:64:
                    79:be:e9:77:f4:3a:19:1d:1d:5c:67:33:43:64:5f:
                    24:fb:0d:1b:39:d9:21:bf:45:4b:69:9b:84:32:9b:
                    15:27:4d:34:3b:7a:9b:e8:df:b0:1a:a0:9b:0d:f3:
                    70:53:3b:92:73:f4:01:54:27:ee:17:fb:ee:5b:51:
                    a9:61:d4:41:71:9d:c4:2d:b7:74:3f:ea:a2:e8:e8:
                    a0:6d:54:9e:39:de:a2:9f:93:e8:1f:71:40:97:3b:
                    f0:ea:bb:c9:00:de:11:83:be:73:e3:1d:04:63:24:
                    21:1e:ff:f2:ba:f2:5d:6f:3b:08:76:54:77:29:a4:
                    2d:1d:b8:5f:c5:1a:5a:ad:9c:34:f4:cb:31:84:e0:
                    f5:a7:ad:51:65:ca:b6:05:a5:de:57:9a:62:46:18:
                    8e:af:4e:10:3d:86:ae:6e:b6:5a:00:3e:51:06:53:
                    4b:e8:80:66:a3:de:c5:9c:19:e8:ab:1e:39:fa:05:
                    fc:97:e3:20:01:ca:c0:d6:ab:4d:74:fc:a7:b7:5f:
                    bd:94:4b:e2:d6:92:ce:67:f9:3c:f8:c2:c0:fc:28:
                    8d:8f:0b:ff:01:93:e8:73:b3:33:0f:11:13:e6:d7:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FA:D5:19:9F:7E:F5:1C:EC:2F:C4:52:15:02:B4:95:5E:24:73:09
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-vrVGZ9-9RzsL8RSFQK0lV4kcwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.192.0/19
                  37.29.112.0/20
                  83.149.24.0/23
                  83.149.28.0/22
                  83.169.232.0/22
                  83.169.237.0-83.169.247.255
                  85.26.176.0/20
                  109.106.192.0/21
                  178.176.192.0-178.176.198.255
                  178.176.202.0/23
                  178.176.208.0/20
                  178.178.0.0-178.178.5.255
                  185.3.32.0/22
                  188.162.0.0/16
                  188.170.168.0-188.170.227.255

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:b8:41:82:57:dc:45:33:3a:30:e0:94:be:a6:85:af:e7:
         6c:a4:83:c6:0e:96:91:d6:bc:11:48:f0:f3:0c:f6:d1:b7:3d:
         78:76:d3:f3:f1:5f:12:9f:88:09:af:b2:82:cc:62:21:3f:1c:
         f2:fd:10:0d:04:ee:ca:54:7a:a5:cb:c5:2a:f8:f5:e0:d7:03:
         a5:8f:2e:fa:71:fc:33:7a:94:7e:aa:02:a6:19:d2:96:b6:f7:
         f1:11:5d:00:f2:b6:19:8c:04:ae:e0:fa:1d:fc:71:f2:ed:01:
         6a:49:ba:74:08:0d:1c:a6:ea:40:a3:36:ad:a5:6d:a4:2e:a2:
         ce:61:0c:33:42:89:e2:63:c0:8e:ee:95:9c:28:96:9b:00:c2:
         ed:7a:c8:ac:09:dd:14:9e:2a:ed:e8:87:e0:2a:04:28:12:bc:
         d6:50:28:58:cc:b1:aa:70:c8:a5:e3:10:f3:c4:f0:82:b8:f2:
         3e:56:5b:d8:ce:58:fa:02:2e:08:33:9f:df:eb:6a:e5:3c:2d:
         15:bb:3a:23:59:cb:55:8a:30:ce:ef:a8:b8:e0:87:f5:96:8d:
         c3:e0:3c:13:5c:24:30:e7:bb:7e:c8:52:c1:9b:50:0e:9a:24:
         6f:95:33:c5:92:b5:19:5f:65:ef:73:bf:00:d9:df:d0:9d:b1:
         03:e4:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:24 2025 by rpki-client