Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/GUW7yMHSxMWKPOxBZPmYfJyT23c.roa
File:                     GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (raw, json)
Hash identifier:          ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=
Subject key identifier:   19:45:BB:C8:C1:D2:C4:C5:8A:3C:EC:41:64:F9:98:7C:9C:93:DB:77
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       0194266B58D96BCD8EBD6A229C750AF8D69E
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/GUW7yMHSxMWKPOxBZPmYfJyT23c.roa
Signing time:             Thu 02 Jan 2025 09:49:16 +0000
ROA not before:           Thu 02 Jan 2025 09:49:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29622
IP address blocks:        83.222.176.0/24 maxlen: 24
                          83.222.177.0/24 maxlen: 24
                          109.160.14.0/24 maxlen: 24
                          109.160.15.0/24 maxlen: 24
                          109.160.72.0/24 maxlen: 24
                          109.160.73.0/24 maxlen: 24
                          109.160.74.0/24 maxlen: 24
                          109.160.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:58:d9:6b:cd:8e:bd:6a:22:9c:75:0a:f8:d6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jan  2 09:49:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1945bbc8c1d2c4c58a3cec4164f9987c9c93db77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:c1:0c:04:1c:3f:51:53:5c:a3:17:19:fb:
                    75:9c:b3:aa:de:e9:5f:54:93:2f:2c:be:a5:2d:c4:
                    b6:7c:5e:53:2d:1b:9b:5e:8b:63:39:d3:30:af:c9:
                    66:e9:c9:1c:4f:e8:67:dd:8d:10:64:b6:a6:b2:50:
                    a2:2e:60:fd:5f:30:c6:79:de:4a:87:2f:80:e0:1d:
                    d8:60:a7:62:fc:76:67:af:10:c8:c2:11:43:b3:f4:
                    ab:66:2f:79:44:c5:5c:32:db:de:12:42:c1:df:d3:
                    cc:13:d5:06:d2:08:e0:9f:d2:88:70:cb:1e:8d:03:
                    f4:e7:c6:6a:86:b6:81:85:1a:8b:1b:01:d7:85:f3:
                    a5:a0:86:6d:43:5a:ef:dd:ea:60:71:43:61:a8:7c:
                    21:2c:dc:43:1b:da:01:75:57:7a:c9:e6:c5:bc:1f:
                    eb:ab:60:53:16:43:1a:31:18:75:5f:65:10:78:ed:
                    ad:f3:3f:23:23:1c:b8:4a:b0:98:8c:3e:29:ad:c0:
                    a4:2a:2d:c0:7e:76:a6:87:ee:ee:57:43:eb:a8:0d:
                    f8:2b:22:7b:f5:a4:74:31:95:97:5e:2f:ab:29:f0:
                    2f:10:fc:68:24:bf:5b:6f:81:bd:f6:2a:db:be:ad:
                    24:30:24:9e:a5:98:97:09:ab:d1:5e:ab:f4:f2:30:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:45:BB:C8:C1:D2:C4:C5:8A:3C:EC:41:64:F9:98:7C:9C:93:DB:77
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/GUW7yMHSxMWKPOxBZPmYfJyT23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.222.176.0/23
                  109.160.14.0/23
                  109.160.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:8d:73:62:5e:e2:73:43:00:18:9e:21:4d:1b:0e:1f:23:87:
         1c:5f:1c:4d:b3:fc:bb:97:75:9e:0d:a9:28:4d:aa:19:41:5d:
         e3:58:c9:aa:04:a0:bd:25:a8:ed:f6:34:da:bf:de:e7:3f:a1:
         81:1b:f9:63:03:9c:14:7e:be:84:1c:a4:83:be:da:aa:50:5a:
         5f:bd:de:1e:2e:a2:54:eb:94:2a:a9:9e:a3:a9:51:7c:c6:61:
         c1:b5:6e:c7:9c:24:a2:84:ab:e6:ee:9f:a0:15:b4:c0:8b:e7:
         db:6f:f6:be:a0:16:50:29:3c:95:32:d6:7d:02:7b:0d:12:d2:
         d4:37:82:04:ae:89:8a:7f:ac:32:ca:17:15:04:83:fa:6d:c5:
         50:11:07:44:19:bc:34:36:60:a0:97:5d:0f:ba:c2:25:c4:04:
         70:54:fd:80:83:b5:7e:9f:16:88:d8:c3:a9:8a:8e:32:5e:56:
         f0:9f:82:5f:d1:40:af:46:00:4c:e0:e5:09:cf:d2:11:9d:88:
         ae:86:32:d0:13:91:dd:dc:3e:67:aa:f1:eb:c0:0e:ef:3d:42:
         46:b0:b0:b7:06:87:9c:d3:c5:a3:82:0c:4e:8f:0c:ec:f2:09:
         d9:c9:a7:4d:df:f4:aa:0f:8c:ce:19:5a:eb:d2:92:98:9e:9e:
         8c:84:7b:0a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQma1jZa82OvWoinHUK+NaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjUwMTAyMDk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTQ1YmJjOGMxZDJjNGM1OGEzY2VjNDE2NGY5OTg3YzljOTNkYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLLBDAQcP1FTXKMXGft1nLOq3ulf
VJMvLL6lLcS2fF5TLRubXotjOdMwr8lm6ckcT+hn3Y0QZLamslCiLmD9XzDGed5K
hy+A4B3YYKdi/HZnrxDIwhFDs/SrZi95RMVcMtveEkLB39PME9UG0gjgn9KIcMse
jQP058ZqhraBhRqLGwHXhfOloIZtQ1rv3epgcUNhqHwhLNxDG9oBdVd6yebFvB/r
q2BTFkMaMRh1X2UQeO2t8z8jIxy4SrCYjD4prcCkKi3Afnamh+7uV0PrqA34KyJ7
9aR0MZWXXi+rKfAvEPxoJL9bb4G99irbvq0kMCSepZiXCavRXqv08jDeMQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBlFu8jB0sTFijzsQWT5mHyck9t3MB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvR1VXN3lNSFN4TVdLUE94QlpQbVlmSnlUMjNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBU96wAwQB
baAOAwQCbaBIMA0GCSqGSIb3DQEBCwUAA4IBAQACjXNiXuJzQwAYniFNGw4fI4cc
XxxNs/y7l3WeDakoTaoZQV3jWMmqBKC9Jajt9jTav97nP6GBG/ljA5wUfr6EHKSD
vtqqUFpfvd4eLqJU65QqqZ6jqVF8xmHBtW7HnCSihKvm7p+gFbTAi+fbb/a+oBZQ
KTyVMtZ9AnsNEtLUN4IEromKf6wyyhcVBIP6bcVQEQdEGbw0NmCgl10PusIlxARw
VP2Ag7V+nxaI2MOpio4yXlbwn4Jf0UCvRgBM4OUJz9IRnYiuhjLQE5Hd3D5nqvHr
wA7vPUJGsLC3Boec08WjggxOjwzs8gnZyadN3/SqD4zOGVrr0pKYnp6MhHsK
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:33 2025 by rpki-client