Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ong7qexufhh6eveyhbi48jae8P0.roa
File:                     ong7qexufhh6eveyhbi48jae8P0.roa (raw, json)
Hash identifier:          noH0JGbtBIyBH/42/tnwyi+zMaP47fWnK0mHAOVIzG0=
Subject key identifier:   A2:78:3B:A9:EC:6E:7E:18:7A:7A:F7:B2:85:B8:B8:F2:36:9E:F0:FD
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       0184F146391EFB45C77BD19106951EF572E2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ong7qexufhh6eveyhbi48jae8P0.roa
Signing time:             Thu 08 Dec 2022 10:27:01 +0000
ROA not before:           Thu 08 Dec 2022 10:27:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29648
IP address blocks:        109.188.0.0/16 maxlen: 24
                          193.201.228.0/22 maxlen: 24
                          213.154.160.0/19 maxlen: 24
                          213.168.32.0/19 maxlen: 24
                          31.173.119.0/24 maxlen: 24
                          212.119.160.0/19 maxlen: 24
                          195.5.128.0/19 maxlen: 24
                          77.233.160.0/19 maxlen: 19
                          77.233.161.0/24 maxlen: 24
                          77.233.164.0/24 maxlen: 24
                          77.233.160.0/24 maxlen: 24
                          77.233.162.0/24 maxlen: 24
                          77.233.166.0/24 maxlen: 24
                          77.233.167.0/24 maxlen: 24
                          77.233.170.0/24 maxlen: 24
                          195.78.116.0/23 maxlen: 24
                          31.173.104.0/24 maxlen: 24
                          31.173.105.0/24 maxlen: 24
                          31.173.112.0/24 maxlen: 24
                          31.173.108.0/24 maxlen: 24
                          31.173.109.0/24 maxlen: 24
                          31.173.110.0/24 maxlen: 24
                          31.173.106.0/24 maxlen: 24
                          31.173.111.0/24 maxlen: 24
                          31.173.107.0/24 maxlen: 24
                          31.173.116.0/24 maxlen: 24
                          31.173.113.0/24 maxlen: 24
                          31.173.117.0/24 maxlen: 24
                          31.173.114.0/24 maxlen: 24
                          31.173.118.0/24 maxlen: 24
                          31.173.115.0/24 maxlen: 24
                          77.233.173.0/24 maxlen: 24
                          77.233.178.0/24 maxlen: 24
                          77.233.185.0/24 maxlen: 24
                          77.233.181.0/24 maxlen: 24
                          77.233.180.0/24 maxlen: 24
                          77.233.186.0/24 maxlen: 24
                          77.233.182.0/24 maxlen: 24
                          77.233.188.0/24 maxlen: 24
                          77.233.191.0/24 maxlen: 24
                          77.233.190.0/24 maxlen: 24
                          212.44.64.0/19 maxlen: 24
                          195.16.96.0/19 maxlen: 24
                          178.23.144.0/21 maxlen: 24
                          109.124.64.0/18 maxlen: 24
                          185.3.32.0/22 maxlen: 24
                          188.170.98.0/24 maxlen: 24
                          86.109.192.0/19 maxlen: 19
                          86.109.192.0/20 maxlen: 20
                          188.170.96.0/24 maxlen: 24
                          188.170.97.0/24 maxlen: 24
                          188.170.102.0/24 maxlen: 24
                          86.109.193.0/24 maxlen: 24
                          188.170.103.0/24 maxlen: 24
                          188.170.99.0/24 maxlen: 24
                          188.170.100.0/24 maxlen: 24
                          188.170.104.0/24 maxlen: 24
                          86.109.195.0/24 maxlen: 24
                          188.170.101.0/24 maxlen: 24
                          188.170.105.0/24 maxlen: 24
                          188.170.110.0/24 maxlen: 24
                          188.170.106.0/24 maxlen: 24
                          188.170.111.0/24 maxlen: 24
                          188.170.107.0/24 maxlen: 24
                          86.109.200.0/23 maxlen: 23
                          188.170.108.0/24 maxlen: 24
                          212.69.96.0/19 maxlen: 24
                          188.170.109.0/24 maxlen: 24
                          188.170.112.0/24 maxlen: 24
                          188.170.114.0/24 maxlen: 24
                          86.109.213.0/24 maxlen: 24
                          188.170.115.0/24 maxlen: 24
                          188.170.116.0/24 maxlen: 24
                          86.109.212.0/24 maxlen: 24
                          86.109.208.0/24 maxlen: 24
                          188.170.118.0/24 maxlen: 24
                          188.170.117.0/24 maxlen: 24
                          188.170.113.0/24 maxlen: 24
                          86.109.210.0/24 maxlen: 24
                          188.170.119.0/24 maxlen: 24
                          188.170.123.0/24 maxlen: 24
                          86.109.216.0/24 maxlen: 24
                          188.170.122.0/24 maxlen: 24
                          86.109.215.0/24 maxlen: 24
                          86.109.218.0/23 maxlen: 23
                          188.170.125.0/24 maxlen: 24
                          188.170.121.0/24 maxlen: 24
                          188.170.120.0/24 maxlen: 24
                          86.109.214.0/24 maxlen: 24
                          188.170.124.0/24 maxlen: 24
                          188.170.127.0/24 maxlen: 24
                          86.109.220.0/24 maxlen: 24
                          188.170.126.0/24 maxlen: 24
                          86.109.223.0/24 maxlen: 24
                          86.109.222.0/24 maxlen: 24
                          78.109.120.0/24 maxlen: 24
                          78.109.121.0/24 maxlen: 24
                          185.210.140.0/22 maxlen: 24
                          128.204.64.0/18 maxlen: 24
                          212.14.160.0/19 maxlen: 24
                          195.230.64.0/19 maxlen: 24
                          178.176.98.0/24 maxlen: 24
                          195.149.111.0/24 maxlen: 24
                          178.176.96.0/24 maxlen: 24
                          178.176.97.0/24 maxlen: 24
                          178.176.102.0/24 maxlen: 24
                          178.176.103.0/24 maxlen: 24
                          178.176.99.0/24 maxlen: 24
                          178.176.100.0/24 maxlen: 24
                          178.176.101.0/24 maxlen: 24
                          178.176.118.0/24 maxlen: 24
                          178.176.114.0/24 maxlen: 24
                          178.176.115.0/24 maxlen: 24
                          178.176.116.0/24 maxlen: 24
                          178.176.117.0/24 maxlen: 24
                          178.176.122.0/24 maxlen: 24
                          178.176.123.0/24 maxlen: 24
                          178.176.119.0/24 maxlen: 24
                          178.176.124.0/24 maxlen: 24
                          178.176.120.0/24 maxlen: 24
                          178.176.125.0/24 maxlen: 24
                          178.176.121.0/24 maxlen: 24
                          178.176.126.0/24 maxlen: 24
                          178.176.127.0/24 maxlen: 24
                          83.169.217.0/24 maxlen: 24
                          83.169.218.0/24 maxlen: 24
                          83.169.219.0/24 maxlen: 24
                          83.169.220.0/24 maxlen: 24
                          83.169.221.0/24 maxlen: 24
                          83.169.222.0/24 maxlen: 24
                          83.169.223.0/24 maxlen: 24
                          188.94.168.0/21 maxlen: 24
                          109.74.112.0/20 maxlen: 24
                          188.162.0.0/16 maxlen: 24
                          213.243.64.0/18 maxlen: 24
                          217.115.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f1:46:39:1e:fb:45:c7:7b:d1:91:06:95:1e:f5:72:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Dec  8 10:27:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a2783ba9ec6e7e187a7af7b285b8b8f2369ef0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:7e:bb:bc:f7:b8:71:32:fa:79:b4:c1:b1:
                    d7:a6:01:7b:f2:a0:18:91:0f:e0:fd:42:7e:e3:d3:
                    e4:fe:39:e4:a7:6c:28:be:28:84:7b:5f:db:0d:ff:
                    5f:a3:7d:22:30:71:b7:d0:72:62:02:f0:89:72:b0:
                    f7:ad:48:40:23:da:33:cc:a6:95:10:7d:1f:cd:02:
                    22:e6:fa:30:fc:28:63:61:3b:10:68:dd:e6:64:a4:
                    6a:54:d1:54:f5:8a:90:0e:f9:ec:77:70:cf:d4:5f:
                    c0:45:21:6e:05:4a:ff:d6:d0:9a:a6:68:e1:c8:cf:
                    e8:ff:5e:b2:2d:98:ce:ea:e7:81:d5:a3:c4:90:50:
                    67:2f:94:18:df:5d:63:70:a7:2c:02:4f:08:f7:64:
                    47:95:d0:a1:c8:ef:42:76:55:37:41:f8:34:2f:c4:
                    1e:2a:83:f7:c0:43:7c:eb:e9:c4:17:b6:3f:bb:a6:
                    a3:2a:82:ad:48:f9:a3:c8:cf:32:f3:d6:42:d7:a6:
                    0f:a5:64:0c:d3:af:da:06:3b:32:76:8e:f5:67:58:
                    78:4c:77:cb:df:2d:3a:72:6a:0f:ad:be:49:63:88:
                    4a:66:3c:01:df:a2:37:16:8b:87:75:29:3b:8e:2e:
                    da:7e:87:cd:59:a5:b2:91:3d:5a:1d:45:1c:94:d4:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:78:3B:A9:EC:6E:7E:18:7A:7A:F7:B2:85:B8:B8:F2:36:9E:F0:FD
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ong7qexufhh6eveyhbi48jae8P0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.173.104.0-31.173.119.255
                  77.233.160.0/19
                  78.109.120.0/23
                  83.169.217.0-83.169.223.255
                  86.109.192.0/19
                  109.74.112.0/20
                  109.124.64.0/18
                  109.188.0.0/16
                  128.204.64.0/18
                  178.23.144.0/21
                  178.176.96.0/21
                  178.176.114.0-178.176.127.255
                  185.3.32.0/22
                  185.210.140.0/22
                  188.94.168.0/21
                  188.162.0.0/16
                  188.170.96.0/19
                  193.201.228.0/22
                  195.5.128.0/19
                  195.16.96.0/19
                  195.78.116.0/23
                  195.149.111.0/24
                  195.230.64.0/19
                  212.14.160.0/19
                  212.44.64.0/19
                  212.69.96.0/19
                  212.119.160.0/19
                  213.154.160.0/19
                  213.168.32.0/19
                  213.243.64.0/18
                  217.115.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:77:4c:43:39:41:b6:18:b6:9d:4b:26:6c:a5:c0:56:98:9c:
         4f:c9:3d:79:26:80:5b:b0:bd:29:25:8e:ae:ed:fb:b3:50:96:
         87:3e:42:ea:92:4a:05:ad:77:7a:21:8d:97:5e:52:d7:2f:12:
         46:80:d7:38:b0:d7:c7:17:dc:e4:3b:50:93:52:5a:b0:b5:26:
         8a:0c:16:d0:87:0a:a4:d1:a9:9a:8d:1e:10:9d:1a:c5:ab:35:
         cd:78:82:95:21:76:ec:27:a6:3c:c1:de:6c:cd:22:3b:d0:23:
         96:99:8a:01:48:c5:38:4b:c6:ef:68:eb:b3:26:e5:32:d5:64:
         9c:8e:cb:00:67:85:b5:d7:1b:7f:67:a7:77:b2:a2:c3:0a:f7:
         ff:e4:fb:32:c9:81:bf:47:23:dc:40:6b:03:83:f7:2e:e3:cf:
         ec:62:9f:16:d3:8e:61:ef:9f:57:44:52:5d:b4:1a:84:95:63:
         2f:78:9f:39:1b:df:d2:1f:9f:b4:94:05:ef:c8:fb:63:19:a0:
         0d:e0:0d:3d:39:86:e2:3a:18:85:cb:c3:28:52:53:d9:8e:ae:
         e0:58:7c:00:9c:f2:2e:ea:bb:5a:fc:e4:4d:4b:17:06:ed:34:
         3b:7d:28:20:24:cc:1b:0a:ee:2c:80:68:ac:8f:f3:11:24:3a:
         a4:6c:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:17 2025 by rpki-client