Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WtOYpjuPuVHv7v1vqSx5z9F7E3g.roa
File:                     WtOYpjuPuVHv7v1vqSx5z9F7E3g.roa (raw, json)
Hash identifier:          aXzg12VaGJC6LmSuPof9pbFnXUmxQlaM8I1n+GQcmUE=
Subject key identifier:   5A:D3:98:A6:3B:8F:B9:51:EF:EE:FD:6F:A9:2C:79:CF:D1:7B:13:78
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184F12721B5E3B57A08A5A93CAD0D57C08C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WtOYpjuPuVHv7v1vqSx5z9F7E3g.roa
Signing time:             Thu 08 Dec 2022 09:53:04 +0000
ROA not before:           Thu 08 Dec 2022 09:53:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31208
IP address blocks:        109.188.0.0/16 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          178.178.84.0/22 maxlen: 22
                          178.178.82.0/24 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          178.178.80.0/23 maxlen: 23
                          178.178.130.0/24 maxlen: 24
                          178.178.129.0/24 maxlen: 24
                          178.178.132.0/24 maxlen: 24
                          178.178.131.0/24 maxlen: 24
                          178.23.144.0/21 maxlen: 24
                          178.178.128.0/24 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          94.25.128.0/17 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          178.176.230.0/23 maxlen: 23
                          212.119.160.0/19 maxlen: 24
                          37.28.186.0/24 maxlen: 24
                          188.170.50.0/24 maxlen: 24
                          37.28.184.0/24 maxlen: 24
                          37.28.185.0/24 maxlen: 24
                          188.170.49.0/24 maxlen: 24
                          188.170.48.0/24 maxlen: 24
                          188.170.55.0/24 maxlen: 24
                          188.170.52.0/24 maxlen: 24
                          188.170.57.0/24 maxlen: 24
                          188.170.54.0/24 maxlen: 24
                          37.28.187.0/24 maxlen: 24
                          188.170.56.0/24 maxlen: 24
                          188.170.53.0/24 maxlen: 24
                          188.170.63.0/24 maxlen: 24
                          188.170.60.0/24 maxlen: 24
                          188.170.62.0/24 maxlen: 24
                          188.170.59.0/24 maxlen: 24
                          188.170.61.0/24 maxlen: 24
                          37.29.74.0/24 maxlen: 24
                          37.29.73.0/24 maxlen: 24
                          37.29.75.0/24 maxlen: 24
                          37.29.72.0/24 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          95.137.0.0/17 maxlen: 24
                          178.176.56.0/24 maxlen: 24
                          178.176.58.0/24 maxlen: 24
                          178.176.57.0/24 maxlen: 24
                          178.176.62.0/24 maxlen: 24
                          178.176.59.0/24 maxlen: 24
                          178.176.61.0/24 maxlen: 24
                          178.176.63.0/24 maxlen: 24
                          178.176.60.0/24 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          83.149.41.0/24 maxlen: 24
                          83.149.44.0/23 maxlen: 23
                          83.149.42.0/23 maxlen: 23
                          83.149.40.0/24 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          83.149.46.0/23 maxlen: 23
                          83.169.212.0/24 maxlen: 24
                          83.169.209.0/24 maxlen: 24
                          83.169.210.0/24 maxlen: 24
                          83.169.208.0/24 maxlen: 24
                          83.169.213.0/24 maxlen: 24
                          83.169.211.0/24 maxlen: 24
                          83.169.215.0/24 maxlen: 24
                          83.169.214.0/24 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          178.178.135.0/24 maxlen: 24
                          178.178.137.0/24 maxlen: 24
                          178.178.134.0/24 maxlen: 24
                          178.178.133.0/24 maxlen: 24
                          178.178.136.0/24 maxlen: 24
                          178.178.143.0/24 maxlen: 24
                          178.178.142.0/24 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          46.229.136.0/22 maxlen: 22
                          46.229.140.0/24 maxlen: 24
                          46.229.143.0/24 maxlen: 24
                          46.229.141.0/24 maxlen: 24
                          46.229.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:27:21:b5:e3:b5:7a:08:a5:a9:3c:ad:0d:57:c0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  8 09:53:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ad398a63b8fb951efeefd6fa92c79cfd17b1378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:a3:1b:82:71:8d:5c:ad:73:63:02:f7:3c:
                    b4:e3:ee:50:bd:fa:63:13:0d:c9:e1:32:4d:c8:43:
                    1d:ad:01:72:b1:7e:2c:a4:60:a8:f4:db:d8:03:04:
                    e5:74:4f:00:9c:7f:3c:47:62:9f:31:46:14:4d:5f:
                    fc:08:6f:c3:a2:bc:06:66:ad:c5:7c:b1:30:1c:63:
                    2c:7f:f2:ec:67:e3:af:aa:25:16:80:ba:a8:48:a9:
                    e4:7a:c7:91:16:33:b0:de:76:81:f7:42:92:0c:45:
                    bd:07:bb:72:dd:d3:d3:44:69:70:39:e9:35:14:30:
                    7c:59:d6:28:f6:14:08:2e:41:f6:d5:5e:6f:06:39:
                    1d:4d:4b:9f:52:b4:73:b3:78:5f:4f:a8:4b:c7:09:
                    af:76:6e:b6:21:16:5e:dd:31:73:9a:7a:4f:10:55:
                    fc:57:7e:46:03:ac:86:41:ad:3a:de:50:f7:76:c8:
                    7e:b7:0e:77:2f:11:c1:21:03:48:f8:79:d2:37:45:
                    be:5a:4a:70:8a:af:04:8a:23:a4:34:87:97:2f:35:
                    2d:05:a3:5e:b6:ba:40:2c:b6:bb:cd:04:32:0e:15:
                    16:f6:79:c3:37:94:ff:0f:20:be:e7:5f:15:4d:55:
                    f1:95:b7:80:b7:61:07:11:f3:0c:c0:78:d3:f0:b4:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:98:A6:3B:8F:B9:51:EF:EE:FD:6F:A9:2C:79:CF:D1:7B:13:78
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WtOYpjuPuVHv7v1vqSx5z9F7E3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.28.184.0/22
                  37.29.72.0/22
                  46.229.136.0/21
                  83.149.40.0/21
                  83.169.208.0/21
                  94.25.128.0/17
                  95.137.0.0/17
                  109.74.112.0/20
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.56.0/21
                  178.176.230.0/23
                  178.178.80.0-178.178.82.255
                  178.178.84.0/22
                  178.178.128.0-178.178.137.255
                  178.178.142.0/23
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.48.0-188.170.50.255
                  188.170.52.0-188.170.57.255
                  188.170.59.0-188.170.63.255
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:36:00:91:a4:d9:fb:ef:4a:3b:b4:b1:44:b2:27:72:11:
         8c:8a:5c:42:b4:fd:13:32:67:10:7c:3e:03:bd:cf:44:6c:34:
         d4:97:bb:cc:9a:aa:2e:de:8f:19:12:85:9c:37:af:4b:59:cc:
         a3:51:fd:d3:a0:db:c7:cc:ae:7f:af:d4:62:d2:ac:64:8f:0a:
         55:34:a9:78:79:ac:6b:37:c5:a5:40:4a:55:c2:ac:e4:ec:a2:
         4a:15:06:24:38:b3:77:3b:d3:a7:5d:84:de:d0:b2:d6:58:93:
         98:9d:97:c6:7b:e8:15:ec:33:7a:d7:6c:25:12:06:9d:52:03:
         0e:7f:14:62:7f:2c:e1:f9:e8:6a:39:05:2c:2b:81:34:78:28:
         52:35:4d:f1:06:e9:a7:3d:cd:7e:bd:47:12:33:4c:5e:75:db:
         16:69:eb:7c:a6:26:a6:48:d6:54:db:a2:0f:9c:9d:21:4b:5f:
         f3:69:60:9c:d3:83:e8:6a:7f:4c:78:00:c9:a5:e9:18:7a:bf:
         aa:99:d5:74:f8:05:57:f3:73:c3:cc:42:a3:4e:c7:56:08:02:
         4c:d8:cd:5c:e9:bd:75:de:98:c1:15:d0:75:a7:e9:2d:e6:59:
         07:ee:06:4f:82:11:bf:e2:4e:1d:cd:10:37:f2:07:80:69:71:
         b4:22:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:52 2025 by rpki-client