Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6to9fVf_vHedE6hGdAf7bS48nEs.roa
File:                     6to9fVf_vHedE6hGdAf7bS48nEs.roa (raw, json)
Hash identifier:          pyj/nuEQOc2JIcnSou5pEalrGA8rkbPHRZMbu8dTPts=
Subject key identifier:   EA:DA:3D:7D:57:FF:BC:77:9D:13:A8:46:74:07:FB:6D:2E:3C:9C:4B
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       018505A07D190B3FA32C902A3AB6357B691D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6to9fVf_vHedE6hGdAf7bS48nEs.roa
Signing time:             Mon 12 Dec 2022 09:18:01 +0000
ROA not before:           Mon 12 Dec 2022 09:18:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29648
IP address blocks:        193.201.228.0/22 maxlen: 24
                          31.173.119.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          77.233.160.0/19 maxlen: 19
                          77.233.161.0/24 maxlen: 24
                          77.233.164.0/24 maxlen: 24
                          77.233.160.0/24 maxlen: 24
                          77.233.162.0/24 maxlen: 24
                          77.233.166.0/24 maxlen: 24
                          77.233.167.0/24 maxlen: 24
                          77.233.170.0/24 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          31.173.104.0/24 maxlen: 24
                          31.173.105.0/24 maxlen: 24
                          31.173.112.0/24 maxlen: 24
                          31.173.108.0/24 maxlen: 24
                          31.173.109.0/24 maxlen: 24
                          31.173.110.0/24 maxlen: 24
                          31.173.106.0/24 maxlen: 24
                          31.173.111.0/24 maxlen: 24
                          31.173.107.0/24 maxlen: 24
                          31.173.116.0/24 maxlen: 24
                          31.173.113.0/24 maxlen: 24
                          31.173.117.0/24 maxlen: 24
                          31.173.114.0/24 maxlen: 24
                          31.173.118.0/24 maxlen: 24
                          31.173.115.0/24 maxlen: 24
                          77.233.173.0/24 maxlen: 24
                          77.233.178.0/24 maxlen: 24
                          77.233.185.0/24 maxlen: 24
                          77.233.181.0/24 maxlen: 24
                          77.233.180.0/24 maxlen: 24
                          77.233.186.0/24 maxlen: 24
                          77.233.182.0/24 maxlen: 24
                          77.233.188.0/24 maxlen: 24
                          77.233.191.0/24 maxlen: 24
                          77.233.190.0/24 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          188.170.98.0/24 maxlen: 24
                          86.109.192.0/19 maxlen: 19
                          86.109.192.0/20 maxlen: 20
                          188.170.96.0/24 maxlen: 24
                          188.170.97.0/24 maxlen: 24
                          188.170.102.0/24 maxlen: 24
                          86.109.193.0/24 maxlen: 24
                          188.170.103.0/24 maxlen: 24
                          188.170.99.0/24 maxlen: 24
                          188.170.100.0/24 maxlen: 24
                          188.170.104.0/24 maxlen: 24
                          86.109.195.0/24 maxlen: 24
                          188.170.101.0/24 maxlen: 24
                          188.170.105.0/24 maxlen: 24
                          188.170.110.0/24 maxlen: 24
                          188.170.106.0/24 maxlen: 24
                          188.170.111.0/24 maxlen: 24
                          188.170.107.0/24 maxlen: 24
                          86.109.200.0/23 maxlen: 23
                          188.170.108.0/24 maxlen: 24
                          188.170.109.0/24 maxlen: 24
                          188.170.112.0/24 maxlen: 24
                          188.170.114.0/24 maxlen: 24
                          86.109.213.0/24 maxlen: 24
                          188.170.115.0/24 maxlen: 24
                          188.170.116.0/24 maxlen: 24
                          86.109.212.0/24 maxlen: 24
                          86.109.208.0/24 maxlen: 24
                          188.170.118.0/24 maxlen: 24
                          188.170.117.0/24 maxlen: 24
                          188.170.113.0/24 maxlen: 24
                          86.109.210.0/24 maxlen: 24
                          188.170.119.0/24 maxlen: 24
                          188.170.123.0/24 maxlen: 24
                          86.109.216.0/24 maxlen: 24
                          188.170.122.0/24 maxlen: 24
                          86.109.215.0/24 maxlen: 24
                          86.109.218.0/23 maxlen: 23
                          188.170.125.0/24 maxlen: 24
                          188.170.121.0/24 maxlen: 24
                          188.170.120.0/24 maxlen: 24
                          86.109.214.0/24 maxlen: 24
                          188.170.124.0/24 maxlen: 24
                          188.170.127.0/24 maxlen: 24
                          86.109.220.0/24 maxlen: 24
                          188.170.126.0/24 maxlen: 24
                          86.109.223.0/24 maxlen: 24
                          86.109.222.0/24 maxlen: 24
                          78.109.120.0/24 maxlen: 24
                          78.109.121.0/24 maxlen: 24
                          178.176.98.0/24 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          178.176.96.0/24 maxlen: 24
                          178.176.97.0/24 maxlen: 24
                          178.176.102.0/24 maxlen: 24
                          178.176.103.0/24 maxlen: 24
                          178.176.99.0/24 maxlen: 24
                          178.176.100.0/24 maxlen: 24
                          178.176.101.0/24 maxlen: 24
                          178.176.118.0/24 maxlen: 24
                          178.176.114.0/24 maxlen: 24
                          178.176.115.0/24 maxlen: 24
                          178.176.116.0/24 maxlen: 24
                          178.176.117.0/24 maxlen: 24
                          178.176.122.0/24 maxlen: 24
                          178.176.123.0/24 maxlen: 24
                          178.176.119.0/24 maxlen: 24
                          178.176.124.0/24 maxlen: 24
                          178.176.120.0/24 maxlen: 24
                          178.176.125.0/24 maxlen: 24
                          178.176.121.0/24 maxlen: 24
                          178.176.126.0/24 maxlen: 24
                          178.176.127.0/24 maxlen: 24
                          83.169.217.0/24 maxlen: 24
                          83.169.218.0/24 maxlen: 24
                          83.169.219.0/24 maxlen: 24
                          83.169.220.0/24 maxlen: 24
                          83.169.221.0/24 maxlen: 24
                          83.169.222.0/24 maxlen: 24
                          83.169.223.0/24 maxlen: 24
                          188.94.168.0/24 maxlen: 24
                          188.94.172.0/24 maxlen: 24
                          188.94.169.0/24 maxlen: 24
                          188.94.170.0/24 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          188.94.171.0/24 maxlen: 24
                          188.94.173.0/24 maxlen: 24
                          188.94.174.0/24 maxlen: 24
                          188.94.175.0/24 maxlen: 24
                          217.115.80.0/20 maxlen: 20
                          217.115.81.0/24 maxlen: 24
                          217.115.80.0/24 maxlen: 24
                          217.115.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:05:a0:7d:19:0b:3f:a3:2c:90:2a:3a:b6:35:7b:69:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec 12 09:18:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eada3d7d57ffbc779d13a8467407fb6d2e3c9c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:ad:af:79:70:d5:fc:4a:97:a8:66:03:2f:
                    8e:92:b6:3f:ce:4f:51:98:a2:9c:12:bc:d0:28:fb:
                    cc:43:58:4b:b1:59:8c:ca:1b:84:ef:62:43:12:a1:
                    1a:85:31:35:c6:c7:e1:51:1e:52:62:42:f1:4f:77:
                    82:e1:a3:cf:29:5f:6a:d2:a3:1a:f5:63:14:ef:c3:
                    ae:09:93:d6:85:33:18:4f:84:d3:95:d4:b4:eb:cc:
                    be:d2:3a:56:2d:bc:a5:b7:a3:b8:08:2f:b1:c3:75:
                    c9:6e:db:4b:20:d5:56:e3:52:01:25:1c:3e:2f:3d:
                    57:4c:01:27:d9:87:d6:90:f0:7a:3e:18:f7:45:47:
                    b2:88:71:58:ab:39:47:0d:a9:2e:8e:73:87:e1:e7:
                    ae:66:d2:a5:50:24:2e:3d:46:f8:93:66:00:89:4c:
                    1e:f3:83:14:f1:9e:6c:d7:9d:a0:6c:cd:19:2a:bf:
                    d5:1e:b4:58:49:81:99:7b:c0:fd:a8:37:69:6b:40:
                    56:01:15:2c:53:54:de:2e:7e:06:dc:ac:b1:9e:f3:
                    56:59:96:b6:36:00:0a:30:22:99:bc:a5:c7:20:df:
                    c7:f6:de:00:fe:31:39:cc:19:9a:d6:e6:83:0f:7d:
                    9f:02:33:71:62:91:12:9b:8f:33:98:55:c1:3d:35:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DA:3D:7D:57:FF:BC:77:9D:13:A8:46:74:07:FB:6D:2E:3C:9C:4B
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6to9fVf_vHedE6hGdAf7bS48nEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.104.0-31.173.119.255
                  77.233.160.0/19
                  78.109.120.0/23
                  83.169.217.0-83.169.223.255
                  86.109.192.0/19
                  178.176.96.0/21
                  178.176.114.0-178.176.127.255
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.96.0/19
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:c4:ec:f0:73:fe:81:ce:a6:c1:72:fd:3e:51:83:b9:d7:
         a0:eb:76:c5:b8:1e:47:27:0c:96:9c:93:9e:1f:19:e6:48:8d:
         05:5a:84:74:6b:97:34:ba:b3:e8:08:50:44:3e:23:9b:63:58:
         77:11:e4:16:64:04:1d:ed:b2:36:e4:51:99:be:d3:61:b2:b4:
         b1:10:be:c9:a8:e5:82:77:9c:ce:a5:de:89:28:5d:ea:82:b5:
         56:a4:d1:0a:22:2a:e4:32:79:cf:49:5b:f6:36:82:c2:6c:a8:
         aa:00:78:93:55:6d:0d:bf:09:06:67:01:83:7c:09:81:43:58:
         0d:22:5e:da:97:cd:0b:c5:73:bd:b9:10:99:78:b5:13:f0:bb:
         58:01:0c:ff:8c:6c:6c:5b:27:40:35:20:96:e4:c5:f1:c3:36:
         05:b2:cd:c6:3e:aa:d0:62:91:63:1b:0e:c9:2b:91:c8:62:bf:
         80:a7:96:96:d5:70:d4:2d:d1:10:07:8e:d7:7c:55:72:01:fd:
         d9:cf:8f:4f:a0:7f:72:8b:ac:aa:dd:17:0c:10:cb:fd:9c:d6:
         c7:4e:eb:41:18:5b:52:e1:81:e9:5d:d7:35:2d:76:a0:72:22:
         47:54:bd:84:62:d8:f3:db:b4:48:64:26:5e:67:7d:ad:da:14:
         9a:bb:9c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:06 2025 by rpki-client