Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ygddd6RGzFU4XUzuctD8_0s6XNI.roa
File:                     ygddd6RGzFU4XUzuctD8_0s6XNI.roa (raw, json)
Hash identifier:          N0QiwSnUbF2lzCDgt2hDa8GFHrMNAqsfE5+zZVouoXs=
Subject key identifier:   CA:07:5D:77:A4:46:CC:55:38:5D:4C:EE:72:D0:FC:FF:4B:3A:5C:D2
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       019179B3A7B19E023D330D2158AA851DE276
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ygddd6RGzFU4XUzuctD8_0s6XNI.roa
Signing time:             Thu 22 Aug 2024 10:48:22 +0000
ROA not before:           Thu 22 Aug 2024 10:48:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15723
IP address blocks:        5.178.10.0/24 maxlen: 24
                          5.178.12.0/24 maxlen: 24
                          5.178.13.0/24 maxlen: 24
                          5.178.15.0/24 maxlen: 24
                          46.23.100.0/22 maxlen: 22
                          62.217.129.0/24 maxlen: 24
                          62.217.130.0/24 maxlen: 24
                          62.217.131.0/24 maxlen: 24
                          62.217.134.0/24 maxlen: 24
                          62.217.136.0/24 maxlen: 24
                          62.217.138.0/24 maxlen: 24
                          62.217.140.0/24 maxlen: 24
                          62.217.141.0/24 maxlen: 24
                          62.217.142.0/24 maxlen: 24
                          62.217.146.0/24 maxlen: 24
                          62.217.147.0/24 maxlen: 24
                          62.217.148.0/24 maxlen: 24
                          62.217.149.0/24 maxlen: 24
                          62.217.151.0/24 maxlen: 24
                          62.217.156.0/24 maxlen: 24
                          62.217.157.0/24 maxlen: 24
                          62.217.158.0/24 maxlen: 24
                          62.217.159.0/24 maxlen: 24
                          188.64.8.0/24 maxlen: 24
                          188.64.9.0/24 maxlen: 24
                          188.64.10.0/24 maxlen: 24
                          188.64.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:79:b3:a7:b1:9e:02:3d:33:0d:21:58:aa:85:1d:e2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Aug 22 10:48:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ca075d77a446cc55385d4cee72d0fcff4b3a5cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:15:af:a8:8e:8e:33:ff:17:90:25:d4:5c:
                    de:f5:39:0a:7f:e7:8b:79:03:bf:d3:ad:d4:06:37:
                    a8:e4:d2:fc:ba:52:37:40:aa:31:58:9b:97:5d:40:
                    8c:73:0f:2e:fc:99:55:36:e8:a7:d1:56:96:40:39:
                    2f:26:b9:02:36:fa:4e:d8:b7:bf:91:58:8f:90:cd:
                    6a:7a:04:ee:2c:cf:ae:fb:37:f0:5b:6c:db:65:5f:
                    af:d5:0e:29:bd:87:a1:67:25:91:85:3f:5e:90:aa:
                    17:0f:39:61:04:8a:d6:54:26:3e:0e:3d:f3:8a:a8:
                    49:9a:05:bf:c8:ce:4a:2c:88:db:20:72:71:b4:c4:
                    72:e0:a7:90:d1:92:e0:e8:3c:59:6b:b1:19:da:c7:
                    53:d6:9e:28:15:6f:73:73:d5:85:1b:c3:dd:7a:37:
                    a7:12:0e:8b:9e:86:ec:62:06:83:0e:62:19:ab:9e:
                    d7:c4:0d:54:36:6f:de:d9:1a:39:a9:21:e6:f7:50:
                    cf:27:5c:46:a6:08:3e:ae:4b:fd:86:db:25:9e:99:
                    c4:71:a7:49:d6:7c:82:60:81:85:5f:48:82:61:45:
                    24:19:fc:a0:fc:34:0c:2e:ed:80:d1:3d:20:6f:b9:
                    6f:36:73:22:04:dc:5d:1f:d9:37:9b:77:e2:77:1f:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:07:5D:77:A4:46:CC:55:38:5D:4C:EE:72:D0:FC:FF:4B:3A:5C:D2
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ygddd6RGzFU4XUzuctD8_0s6XNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.10.0/24
                  5.178.12.0/23
                  5.178.15.0/24
                  46.23.100.0/22
                  62.217.129.0-62.217.131.255
                  62.217.134.0/24
                  62.217.136.0/24
                  62.217.138.0/24
                  62.217.140.0-62.217.142.255
                  62.217.146.0-62.217.149.255
                  62.217.151.0/24
                  62.217.156.0/22
                  188.64.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:38:56:bc:3f:bc:69:7d:fe:20:6b:5c:dd:13:03:7b:b2:d8:
         d8:ef:53:f5:0f:49:fb:d0:0a:95:44:81:02:b6:33:b2:c3:5d:
         9c:4a:27:13:b6:d7:5d:2c:f9:ed:f3:f6:4b:78:d0:40:04:a9:
         45:8e:9f:85:61:2c:9e:c1:a7:72:9c:b4:e7:82:31:f1:49:a9:
         15:2d:46:9b:a8:fc:b4:a6:a5:6d:70:f6:29:2f:f9:73:ab:13:
         f4:fe:77:f7:45:df:ae:97:50:73:0c:2e:18:8f:02:e4:41:5b:
         25:af:7d:2a:83:c8:e1:36:2c:0a:e6:ff:3c:37:45:13:c6:64:
         cf:f5:9f:c7:33:04:80:55:98:51:ea:71:85:d8:9c:cb:6d:4f:
         ef:11:04:66:99:31:42:d2:ef:6b:29:75:32:66:14:3e:89:eb:
         33:52:8e:40:7a:41:5b:5d:71:15:46:cb:f9:eb:bc:e7:85:54:
         f5:96:6d:5f:26:bf:e0:dc:e3:b5:2e:95:82:62:c1:ed:90:8a:
         c2:68:0c:70:91:f1:f9:d4:e6:e3:71:ea:fc:fe:49:8c:91:1b:
         fa:1e:91:31:e5:f0:9c:5a:4e:af:e1:14:5f:4d:81:2b:98:27:
         91:72:eb:9b:c8:e3:d9:68:08:a4:f2:75:08:c6:4d:79:7a:c6:
         7b:66:87:bf
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAZF5s6exngI9Mw0hWKqFHeJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjQwODIyMTA0ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTA3NWQ3N2E0NDZjYzU1Mzg1ZDRjZWU3MmQwZmNmZjRiM2E1Y2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TMVr6iOjjP/F5Al1Fze9TkKf+eL
eQO/063UBjeo5NL8ulI3QKoxWJuXXUCMcw8u/JlVNuin0VaWQDkvJrkCNvpO2Le/
kViPkM1qegTuLM+u+zfwW2zbZV+v1Q4pvYehZyWRhT9ekKoXDzlhBIrWVCY+Dj3z
iqhJmgW/yM5KLIjbIHJxtMRy4KeQ0ZLg6DxZa7EZ2sdT1p4oFW9zc9WFG8Pdejen
Eg6LnobsYgaDDmIZq57XxA1UNm/e2Ro5qSHm91DPJ1xGpgg+rkv9htslnpnEcadJ
1nyCYIGFX0iCYUUkGfyg/DQMLu2A0T0gb7lvNnMiBNxdH9k3m3fidx+WRwIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFMoHXXekRsxVOF1M7nLQ/P9LOlzSMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEveWdkZGQ2Ukd6RlU0WFV6dWN0RDhfMHM2WE5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQABbIKAwQB
BbIMAwQABbIPAwQCLhdkMAwDBAA+2YEDBAI+2YADBAA+2YYDBAA+2YgDBAA+2Yow
DAMEAj7ZjAMEAD7ZjjAMAwQBPtmSAwQBPtmUAwQAPtmXAwQCPtmcAwQCvEAIMA0G
CSqGSIb3DQEBCwUAA4IBAQDIOFa8P7xpff4ga1zdEwN7stjY71P1D0n70AqVRIEC
tjOyw12cSicTttddLPnt8/ZLeNBABKlFjp+FYSyewadynLTngjHxSakVLUabqPy0
pqVtcPYpL/lzqxP0/nf3Rd+ul1BzDC4YjwLkQVslr30qg8jhNiwK5v88N0UTxmTP
9Z/HMwSAVZhR6nGF2JzLbU/vEQRmmTFC0u9rKXUyZhQ+ieszUo5AekFbXXEVRsv5
67znhVT1lm1fJr/g3OO1LpWCYsHtkIrCaAxwkfH51Objcer8/kmMkRv6HpEx5fCc
Wk6v4RRfTYErmCeRcuubyOPZaAik8nUIxk15esZ7Zoe/
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:51 2025 by rpki-client