Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O0M752qxEatMtcdaBg6wn8srIcc.roa
File:                     O0M752qxEatMtcdaBg6wn8srIcc.roa (raw, json)
Hash identifier:          LibwcQI+XQboTNEDB4oCtpiVNX8E3x9dv55OmA0od6Y=
Subject key identifier:   3B:43:3B:E7:6A:B1:11:AB:4C:B5:C7:5A:06:0E:B0:9F:CB:2B:21:C7
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       01841D9C92E0AC317899EE8C3AC0FFE2A2B1
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O0M752qxEatMtcdaBg6wn8srIcc.roa
Signing time:             Fri 28 Oct 2022 08:01:51 +0000
ROA not before:           Fri 28 Oct 2022 08:01:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31133
IP address blocks:        109.188.0.0/16 maxlen: 24
                          85.26.128.0/17 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          31.173.174.0/24 maxlen: 24
                          31.173.178.0/24 maxlen: 24
                          31.173.177.0/24 maxlen: 24
                          31.173.175.0/24 maxlen: 24
                          31.173.181.0/24 maxlen: 24
                          31.173.182.0/24 maxlen: 24
                          31.173.186.0/24 maxlen: 24
                          31.173.185.0/24 maxlen: 24
                          93.153.128.0/17 maxlen: 24
                          31.173.180.0/24 maxlen: 24
                          31.173.184.0/24 maxlen: 24
                          31.173.183.0/24 maxlen: 24
                          94.25.128.0/17 maxlen: 24
                          31.173.190.0/24 maxlen: 24
                          31.173.189.0/24 maxlen: 24
                          31.173.188.0/24 maxlen: 24
                          31.173.187.0/24 maxlen: 24
                          31.173.191.0/24 maxlen: 24
                          31.173.224.0/24 maxlen: 24
                          78.25.64.0/18 maxlen: 24
                          31.173.130.0/23 maxlen: 23
                          31.173.129.0/24 maxlen: 24
                          31.173.128.0/24 maxlen: 24
                          31.173.138.0/24 maxlen: 24
                          31.173.137.0/24 maxlen: 24
                          212.119.160.0/19 maxlen: 24
                          31.173.136.0/24 maxlen: 24
                          31.173.139.0/24 maxlen: 24
                          31.173.142.0/24 maxlen: 24
                          31.173.141.0/24 maxlen: 24
                          31.173.140.0/24 maxlen: 24
                          31.173.150.0/24 maxlen: 24
                          80.247.176.0/20 maxlen: 24
                          31.173.149.0/24 maxlen: 24
                          31.173.152.0/24 maxlen: 24
                          31.173.148.0/24 maxlen: 24
                          31.173.147.0/24 maxlen: 24
                          31.173.151.0/24 maxlen: 24
                          31.173.154.0/24 maxlen: 24
                          31.173.158.0/24 maxlen: 24
                          31.173.153.0/24 maxlen: 24
                          91.193.212.0/22 maxlen: 24
                          31.173.157.0/24 maxlen: 24
                          31.173.156.0/24 maxlen: 24
                          31.173.159.0/24 maxlen: 24
                          31.173.155.0/24 maxlen: 24
                          31.173.166.0/24 maxlen: 24
                          31.173.165.0/24 maxlen: 24
                          31.173.164.0/24 maxlen: 24
                          31.173.160.0/22 maxlen: 22
                          31.173.170.0/24 maxlen: 24
                          31.173.169.0/24 maxlen: 24
                          31.173.168.0/24 maxlen: 24
                          31.173.167.0/24 maxlen: 24
                          31.173.171.0/24 maxlen: 24
                          109.106.192.0/19 maxlen: 19
                          195.5.128.0/19 maxlen: 24
                          31.173.234.0/24 maxlen: 24
                          77.233.160.0/19 maxlen: 24
                          31.173.0.0/16 maxlen: 16
                          81.24.128.0/20 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          46.232.200.0/21 maxlen: 24
                          62.64.0.0/19 maxlen: 24
                          79.171.208.0/24 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          46.29.192.0/21 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          79.171.8.0/21 maxlen: 24
                          178.178.96.0/24 maxlen: 24
                          178.178.100.0/23 maxlen: 23
                          178.178.104.0/24 maxlen: 24
                          178.178.102.0/23 maxlen: 23
                          178.178.108.0/24 maxlen: 24
                          178.178.111.0/24 maxlen: 24
                          178.178.110.0/24 maxlen: 24
                          178.178.106.0/24 maxlen: 24
                          178.178.127.0/24 maxlen: 24
                          178.23.144.0/21 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          84.204.0.0/16 maxlen: 16
                          86.109.192.0/19 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          37.29.0.0/17 maxlen: 24
                          37.28.160.0/19 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          62.89.194.0/24 maxlen: 24
                          95.137.0.0/17 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          83.149.17.0/24 maxlen: 24
                          83.149.16.0/22 maxlen: 22
                          83.149.16.0/24 maxlen: 24
                          83.149.21.0/24 maxlen: 24
                          83.149.18.0/24 maxlen: 24
                          83.149.22.0/23 maxlen: 23
                          83.149.19.0/24 maxlen: 24
                          83.149.20.0/22 maxlen: 22
                          83.149.20.0/24 maxlen: 24
                          78.41.100.0/22 maxlen: 24
                          83.149.54.0/24 maxlen: 24
                          83.149.53.0/24 maxlen: 24
                          178.176.50.0/23 maxlen: 23
                          178.176.160.0/20 maxlen: 20
                          178.176.176.0/21 maxlen: 21
                          178.176.184.0/22 maxlen: 22
                          178.176.191.0/24 maxlen: 24
                          178.176.190.0/24 maxlen: 24
                          178.176.189.0/24 maxlen: 24
                          83.169.192.0/18 maxlen: 24
                          178.176.132.0/23 maxlen: 23
                          178.176.128.0/24 maxlen: 24
                          178.176.131.0/24 maxlen: 24
                          178.176.130.0/24 maxlen: 24
                          178.176.136.0/24 maxlen: 24
                          178.176.135.0/24 maxlen: 24
                          178.176.139.0/24 maxlen: 24
                          178.176.134.0/23 maxlen: 23
                          178.176.137.0/24 maxlen: 24
                          178.176.133.0/24 maxlen: 24
                          178.176.144.0/24 maxlen: 24
                          178.176.143.0/24 maxlen: 24
                          178.176.142.0/24 maxlen: 24
                          178.176.145.0/24 maxlen: 24
                          178.176.141.0/24 maxlen: 24
                          178.176.152.0/24 maxlen: 24
                          178.176.150.0/24 maxlen: 24
                          178.176.149.0/24 maxlen: 24
                          178.176.156.0/24 maxlen: 24
                          178.176.158.0/24 maxlen: 24
                          178.176.153.0/24 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24
                          83.222.192.0/19 maxlen: 24
                          46.229.128.0/20 maxlen: 24
                          83.229.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1d:9c:92:e0:ac:31:78:99:ee:8c:3a:c0:ff:e2:a2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Oct 28 08:01:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b433be76ab111ab4cb5c75a060eb09fcb2b21c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ec:75:37:8c:20:80:9a:42:29:59:02:bb:94:
                    4c:42:4f:d8:9a:ba:5a:8c:8b:b8:d1:d6:aa:5a:50:
                    75:8c:19:37:fb:c3:14:df:3f:aa:59:2d:89:78:fe:
                    28:12:a6:64:4d:f0:c2:ef:26:ee:a0:07:a9:10:47:
                    41:d2:ae:7a:6e:97:8a:38:10:67:92:af:b4:18:19:
                    05:a5:29:83:7d:7a:39:4b:29:81:3b:40:ad:44:fd:
                    25:07:b9:aa:f0:97:7d:04:9d:cf:b2:ec:6e:6a:43:
                    8a:aa:29:64:22:18:09:0a:36:3c:a3:c0:d2:ce:22:
                    ea:94:c5:31:65:e6:a9:71:e2:e6:86:86:fa:ea:8e:
                    cb:e7:dc:7e:22:b7:7f:4b:5f:b1:2a:0b:95:13:93:
                    9e:ca:f4:54:24:6c:c7:7a:85:28:f7:0d:ee:0d:6e:
                    63:18:3e:a5:f4:36:2f:23:3a:6a:7c:80:c3:73:fb:
                    22:d3:a5:66:a0:75:e6:b7:eb:d2:b1:4f:77:39:61:
                    43:a9:68:96:51:e5:59:d0:c7:9d:bc:84:dd:4f:44:
                    ff:34:a2:51:94:e6:55:78:27:bd:37:8a:83:2f:5e:
                    d6:aa:3e:fb:c8:63:98:4a:fa:3b:3c:49:71:0f:59:
                    5e:54:0e:0c:d1:41:d9:03:fe:39:36:c7:41:c8:c7:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:3B:E7:6A:B1:11:AB:4C:B5:C7:5A:06:0E:B0:9F:CB:2B:21:C7
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O0M752qxEatMtcdaBg6wn8srIcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.0.0/16
                  37.28.160.0/19
                  37.29.0.0/17
                  46.29.192.0/21
                  46.229.128.0/20
                  46.232.200.0/21
                  62.64.0.0/19
                  62.89.194.0/24
                  77.233.160.0/19
                  78.25.64.0/18
                  78.41.100.0/22
                  79.171.8.0/21
                  79.171.208.0/24
                  80.247.176.0/20
                  81.24.128.0/20
                  83.149.16.0/21
                  83.149.53.0-83.149.54.255
                  83.169.192.0/18
                  83.222.192.0/19
                  83.229.128.0/17
                  84.204.0.0/16
                  85.26.128.0/17
                  86.109.192.0/19
                  91.193.212.0/22
                  93.153.128.0/17
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.106.192.0/19
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.50.0/23
                  178.176.128.0/24
                  178.176.130.0-178.176.137.255
                  178.176.139.0/24
                  178.176.141.0-178.176.145.255
                  178.176.149.0-178.176.150.255
                  178.176.152.0/23
                  178.176.156.0/24
                  178.176.158.0/24
                  178.176.160.0-178.176.187.255
                  178.176.189.0-178.176.191.255
                  178.178.96.0/24
                  178.178.100.0-178.178.104.255
                  178.178.106.0/24
                  178.178.108.0/24
                  178.178.110.0/23
                  178.178.127.0/24
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:f9:ac:db:06:d0:75:b6:ec:b8:fc:cd:7a:b8:d7:02:f8:
         a6:bf:c1:81:21:65:c6:6e:e1:fd:4d:8d:10:cb:d7:7e:ce:b1:
         6f:81:b6:fc:ea:66:75:fd:64:83:16:02:26:fd:32:79:74:bc:
         09:ed:81:a4:6f:16:ce:f6:a2:d3:91:b6:3d:4b:87:71:b5:08:
         b4:b1:76:4c:be:8b:4b:46:63:0a:1f:ef:05:bc:14:00:f9:65:
         56:c5:e4:09:95:5a:c6:bc:72:d8:cf:e5:f1:9b:27:69:6f:6e:
         52:d3:d7:20:fb:7c:62:61:1d:7c:de:78:79:18:fa:f7:ec:db:
         f7:a4:e4:11:1b:98:96:26:c9:b0:86:2a:5f:8d:4e:a7:8d:27:
         9d:f0:84:ac:50:15:b4:2d:38:52:7b:11:04:e8:ac:e3:00:a3:
         55:28:c3:78:4a:44:11:36:2e:2e:be:7b:54:03:65:db:db:10:
         f2:a6:7d:95:3e:d2:3e:4a:1d:95:ab:21:be:02:d3:24:6a:27:
         7f:a0:50:36:92:53:ee:ad:db:15:67:4a:8d:0f:6f:bd:10:b4:
         76:84:05:f5:50:3d:c6:e9:f8:e6:89:b2:d5:ae:9c:43:12:cf:
         d9:b6:24:97:eb:ea:fc:b2:c7:ce:b3:9e:e9:9e:99:60:4c:70:
         28:9d:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:50 2025 by rpki-client