Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/3LhpG8D2YuL0HbdvrNfv3Tsi_nw.roa
File:                     3LhpG8D2YuL0HbdvrNfv3Tsi_nw.roa (raw, json)
Hash identifier:          EJ//GHHAkmCemvFssOXszX0Lnm4SrmG9bzbubFOqRYA=
Subject key identifier:   DC:B8:69:1B:C0:F6:62:E2:F4:1D:B7:6F:AC:D7:EF:DD:3B:22:FE:7C
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       0193AEEB1756D54A00BA0CED30911ED544A7
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/3LhpG8D2YuL0HbdvrNfv3Tsi_nw.roa
Signing time:             Tue 10 Dec 2024 04:54:22 +0000
ROA not before:           Tue 10 Dec 2024 04:54:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8895
IP address blocks:        45.94.15.0/24 maxlen: 24
                          91.229.52.0/22 maxlen: 22
                          212.26.0.0/17 maxlen: 17
                          212.26.6.0/23 maxlen: 24
                          212.26.7.0/24 maxlen: 24
                          212.26.8.0/22 maxlen: 24
                          212.26.16.0/24 maxlen: 24
                          212.26.17.0/24 maxlen: 24
                          212.26.18.0/24 maxlen: 24
                          212.26.19.0/24 maxlen: 24
                          212.26.19.20/30 maxlen: 30
                          212.26.20.0/24 maxlen: 24
                          212.26.21.0/24 maxlen: 24
                          212.26.22.0/24 maxlen: 24
                          212.26.23.0/24 maxlen: 24
                          212.26.24.0/21 maxlen: 24
                          212.26.32.0/24 maxlen: 24
                          212.26.36.0/24 maxlen: 25
                          212.26.37.0/24 maxlen: 25
                          212.26.38.0/24 maxlen: 25
                          212.26.39.0/24 maxlen: 25
                          212.26.40.0/24 maxlen: 24
                          212.26.41.0/24 maxlen: 24
                          212.26.42.0/24 maxlen: 24
                          212.26.43.0/24 maxlen: 24
                          212.26.44.0/24 maxlen: 24
                          212.26.45.0/24 maxlen: 24
                          212.26.46.0/23 maxlen: 24
                          212.26.48.0/24 maxlen: 24
                          212.26.50.0/23 maxlen: 24
                          212.26.52.0/24 maxlen: 24
                          212.26.53.0/24 maxlen: 24
                          212.26.54.0/24 maxlen: 24
                          212.26.56.0/24 maxlen: 24
                          212.26.58.0/24 maxlen: 24
                          212.26.60.0/24 maxlen: 24
                          212.26.63.0/24 maxlen: 24
                          212.26.64.0/24 maxlen: 24
                          212.26.65.0/24 maxlen: 24
                          212.26.68.0/23 maxlen: 24
                          212.26.71.0/24 maxlen: 24
                          212.26.72.0/24 maxlen: 25
                          212.26.74.0/24 maxlen: 25
                          212.26.78.0/24 maxlen: 24
                          212.138.0.0/16 maxlen: 16
                          212.138.41.0/24 maxlen: 25
                          212.138.42.0/24 maxlen: 25
                          212.138.43.0/24 maxlen: 24
                          212.138.52.0/22 maxlen: 24
                          212.138.56.0/21 maxlen: 24
                          212.138.64.0/22 maxlen: 24
                          212.138.70.0/24 maxlen: 24
                          212.138.71.0/24 maxlen: 24
                          212.138.72.0/22 maxlen: 24
                          212.138.76.0/22 maxlen: 24
                          212.138.80.0/23 maxlen: 23
                          212.138.82.0/24 maxlen: 24
                          212.138.83.0/24 maxlen: 24
                          212.138.84.0/23 maxlen: 24
                          212.138.86.0/24 maxlen: 24
                          212.138.88.0/24 maxlen: 25
                          212.138.92.0/24 maxlen: 24
                          212.138.94.0/24 maxlen: 24
                          212.138.96.0/21 maxlen: 24
                          212.138.97.0/24 maxlen: 24
                          212.138.98.0/23 maxlen: 23
                          212.138.104.0/24 maxlen: 24
                          212.138.108.0/24 maxlen: 24
                          212.138.115.0/24 maxlen: 24
                          212.138.116.0/24 maxlen: 24
                          212.138.117.0/24 maxlen: 24
                          212.138.118.0/24 maxlen: 24
                          212.138.119.0/24 maxlen: 24
                          212.138.120.0/24 maxlen: 24
                          212.138.121.0/24 maxlen: 24
                          212.138.125.0/24 maxlen: 25
                          212.138.126.0/24 maxlen: 25
                          212.138.127.0/24 maxlen: 25
                          212.138.128.0/24 maxlen: 24
                          212.138.130.0/24 maxlen: 24
                          212.138.132.0/24 maxlen: 24
                          212.138.134.0/24 maxlen: 24
                          212.138.139.0/24 maxlen: 24
                          212.138.140.0/24 maxlen: 24
                          212.138.147.0/24 maxlen: 24
                          212.138.150.0/24 maxlen: 24
                          212.138.153.0/24 maxlen: 24
                          212.138.155.0/24 maxlen: 25
                          212.138.157.0/24 maxlen: 24
                          212.138.160.0/24 maxlen: 24
                          212.138.162.0/24 maxlen: 24
                          212.138.164.0/24 maxlen: 25
                          212.138.166.0/24 maxlen: 24
                          212.138.168.0/24 maxlen: 24
                          212.138.170.0/24 maxlen: 25
                          212.138.172.0/24 maxlen: 24
                          212.138.175.0/24 maxlen: 25
                          212.138.176.0/24 maxlen: 24
                          212.138.177.0/24 maxlen: 24
                          212.138.180.0/24 maxlen: 24
                          212.138.181.0/24 maxlen: 25
                          212.138.183.0/24 maxlen: 25
                          212.138.185.0/24 maxlen: 24
                          212.138.187.0/24 maxlen: 24
                          212.138.188.0/24 maxlen: 25
                          212.138.190.0/24 maxlen: 24
                          212.138.194.0/24 maxlen: 24
                          212.138.196.0/24 maxlen: 24
                          212.138.201.0/24 maxlen: 24
                          212.138.202.0/24 maxlen: 24
                          212.138.203.0/24 maxlen: 24
                          212.138.206.0/24 maxlen: 24
                          212.138.250.0/24 maxlen: 24
                          2001:1490::/32 maxlen: 32
                          2001:1490::/48 maxlen: 48
                          2001:1490:0:800::/64 maxlen: 64
                          2001:1490:0:a00::/64 maxlen: 64
                          2001:1490:0:c00::/64 maxlen: 64
                          2001:1490:0:1000::/64 maxlen: 64
                          2001:1490:1::/48 maxlen: 48
                          2001:1490:1:800::/64 maxlen: 64
                          2001:1490:1:a00::/64 maxlen: 64
                          2001:1490:1:c00::/64 maxlen: 64
                          2001:1490:1:e00::/64 maxlen: 64
                          2001:1490:1:1000::/64 maxlen: 64
                          2001:1490:1:1200::/64 maxlen: 64
                          2001:1490:1:1600::/64 maxlen: 64
                          2001:1490:1:1a00::/64 maxlen: 64
                          2001:1490:1:2000::/64 maxlen: 64
                          2001:1490:103::/48 maxlen: 48
                          2001:1490:106::/48 maxlen: 48
                          2001:1490:107::/48 maxlen: 48
                          2001:1490:110::/48 maxlen: 49
                          2001:1490:110:8000::/49 maxlen: 49
                          2001:1490:111::/48 maxlen: 48
                          2001:1490:112::/48 maxlen: 48
                          2001:1490:113::/48 maxlen: 48
                          2001:1490:114::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ae:eb:17:56:d5:4a:00:ba:0c:ed:30:91:1e:d5:44:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Dec 10 04:54:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dcb8691bc0f662e2f41db76facd7efdd3b22fe7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:5c:1b:ee:11:b5:6b:77:3e:88:48:a1:e1:
                    93:51:67:88:db:05:8f:8b:cf:1e:40:39:d2:c4:7b:
                    e4:58:43:61:f2:44:c5:3e:2b:91:da:2f:8e:13:78:
                    24:6e:43:5d:d0:51:5a:40:5c:f4:0a:ae:a4:b1:46:
                    f3:8f:a7:56:77:2f:d1:02:a4:63:f2:fe:f9:a0:45:
                    53:aa:2e:2a:14:38:8c:05:52:93:e8:93:9d:85:79:
                    34:c6:36:be:9f:0c:25:e2:71:4c:57:e6:dc:ff:6a:
                    c6:67:46:b7:4a:a9:b0:61:18:74:f8:6b:48:73:5a:
                    4d:2e:b1:ad:b9:2a:39:15:98:c8:ef:9f:c7:a0:2c:
                    ec:60:3d:54:9d:17:d3:17:25:94:22:14:37:6b:e1:
                    fa:83:59:ab:a7:c7:8f:1c:f6:8a:01:cf:a3:b5:63:
                    3a:39:91:d6:21:c6:41:4d:a7:7d:23:98:db:10:58:
                    a1:4d:e6:3c:80:f9:a8:c2:dc:1b:32:4c:04:10:97:
                    12:ce:8f:c3:58:18:58:f7:64:48:d7:87:26:ac:4a:
                    fd:87:46:50:25:74:2e:f4:db:6d:9b:90:25:9e:e5:
                    2a:06:01:0e:f2:2e:84:e5:ea:eb:cc:a3:fa:fb:28:
                    64:ff:f0:63:16:ad:0b:63:fa:2b:ac:e3:46:9e:1d:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B8:69:1B:C0:F6:62:E2:F4:1D:B7:6F:AC:D7:EF:DD:3B:22:FE:7C
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/3LhpG8D2YuL0HbdvrNfv3Tsi_nw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.15.0/24
                  91.229.52.0/22
                  212.26.0.0/17
                  212.138.0.0/16
                IPv6:
                  2001:1490::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:9f:6f:f4:1e:ed:24:9e:3a:10:c1:1a:83:fb:34:5b:3c:1d:
         c2:49:d4:00:46:34:e1:9b:1d:ca:c6:17:15:cc:2d:1c:db:97:
         ef:8b:20:8f:45:ae:42:d3:1a:f3:21:bf:c3:b3:88:d2:37:2f:
         96:a6:44:1e:9b:08:ff:dd:aa:60:b8:23:3e:3f:e0:d3:0e:85:
         2a:99:d1:cc:95:b4:eb:55:b2:95:06:2b:5e:ce:28:b4:fb:4b:
         82:64:57:d3:c9:fb:08:bd:09:41:2a:98:c0:3a:5a:0f:e7:f6:
         b7:a4:e1:a0:dc:90:19:00:a0:10:c8:bd:f8:4c:f9:c4:04:e4:
         6c:37:09:ae:96:98:7c:32:32:62:22:8e:75:95:a9:57:77:e9:
         44:78:98:d4:5c:92:9f:5d:da:79:79:6d:b2:3f:3c:67:64:f2:
         53:68:1c:5a:c3:3d:09:28:51:73:66:61:0e:2c:e1:d6:6b:e4:
         40:15:9d:51:aa:fc:73:69:6f:26:79:d9:cc:5c:9f:b6:c1:af:
         9d:68:38:bd:69:45:58:e9:9d:b7:08:60:da:96:6b:a8:4c:01:
         c1:6f:5d:7d:75:a9:53:b0:a1:8f:ef:f2:02:23:8d:be:c5:83:
         8e:bd:86:c3:d9:20:a0:6c:97:13:57:d0:11:db:c7:4f:eb:2b:
         67:06:ff:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:27:20 2025 by rpki-client