Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/oB4Hvw5vmEElhrThnMcakEunRCg.roa
File:                     oB4Hvw5vmEElhrThnMcakEunRCg.roa (raw, json)
Hash identifier:          nId0s+wjDZ0nICKMNBZ+neYFpH9jncGX2ZtBrRkyaBI=
Subject key identifier:   A0:1E:07:BF:0E:6F:98:41:25:86:B4:E1:9C:C7:1A:90:4B:A7:44:28
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       01950D062C2CF646C23DF0CEC020BE104306
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/oB4Hvw5vmEElhrThnMcakEunRCg.roa
Signing time:             Sun 16 Feb 2025 04:31:02 +0000
ROA not before:           Sun 16 Feb 2025 04:31:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25369
IP address blocks:        5.226.136.0/21 maxlen: 21
                          31.14.102.0/24 maxlen: 24
                          31.14.254.0/24 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          77.81.124.0/22 maxlen: 22
                          77.81.191.0/24 maxlen: 24
                          79.139.84.0/22 maxlen: 22
                          80.240.108.0/23 maxlen: 23
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          82.97.192.0/23 maxlen: 23
                          84.247.0.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          85.204.70.0/24 maxlen: 24
                          86.104.20.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.22.0/23 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          86.104.248.0/24 maxlen: 24
                          86.104.249.0/24 maxlen: 24
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          86.106.135.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          89.34.96.0/22 maxlen: 22
                          89.34.96.0/24 maxlen: 24
                          89.34.97.0/24 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          89.37.64.0/22 maxlen: 22
                          89.37.172.0/22 maxlen: 22
                          89.37.173.0/24 maxlen: 24
                          89.38.68.0/24 maxlen: 24
                          89.38.69.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          89.46.223.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          93.113.175.0/24 maxlen: 24
                          93.114.83.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          93.118.40.0/22 maxlen: 22
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.172.0/23 maxlen: 24
                          176.223.174.0/23 maxlen: 24
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          178.239.170.0/24 maxlen: 24
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.16.204.0/22 maxlen: 22
                          185.38.148.0/22 maxlen: 22
                          185.44.76.0/22 maxlen: 22
                          185.61.156.0/22 maxlen: 22
                          185.61.156.0/24 maxlen: 24
                          185.61.157.0/24 maxlen: 24
                          185.114.224.0/24 maxlen: 24
                          185.121.136.0/22 maxlen: 22
                          185.125.204.0/22 maxlen: 22
                          185.134.20.0/22 maxlen: 22
                          185.137.36.0/22 maxlen: 24
                          185.158.240.0/22 maxlen: 24
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          185.216.144.0/22 maxlen: 22
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          185.242.80.0/22 maxlen: 22
                          188.212.154.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          188.241.246.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          193.32.208.0/24 maxlen: 24
                          193.124.20.0/23 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          194.88.96.0/21 maxlen: 24
                          194.88.98.0/23 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          195.20.108.0/24 maxlen: 24
                          195.140.212.0/22 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          195.234.124.0/23 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.127.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          213.166.84.0/22 maxlen: 24
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          217.146.92.0/24 maxlen: 24
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:35::/48 maxlen: 48
                          2a01:4020:100::/40 maxlen: 40
                          2a01:4020:200::/40 maxlen: 40
                          2a01:4020:300::/40 maxlen: 48
                          2a0b:b840::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0d:06:2c:2c:f6:46:c2:3d:f0:ce:c0:20:be:10:43:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Feb 16 04:31:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a01e07bf0e6f98412586b4e19cc71a904ba74428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:05:61:6d:73:35:86:0f:c2:58:e7:69:e7:
                    1b:fb:39:03:f7:87:58:56:2e:c9:79:d9:94:0c:73:
                    3e:3b:c7:92:30:77:2a:e4:6b:12:a4:de:13:f6:12:
                    6d:08:cc:0e:e4:36:13:ae:a9:6a:af:4a:cb:59:71:
                    30:cb:e6:5b:25:bb:fb:34:cc:e0:52:3b:af:23:f1:
                    f3:ae:c2:99:2f:a1:ae:98:ef:96:b0:20:ec:44:ae:
                    ca:c4:6b:b7:86:f0:ec:35:88:b3:6b:1d:bd:d2:21:
                    8c:50:83:4e:22:7c:f5:46:83:4d:db:e8:0a:f2:46:
                    11:0d:c8:38:73:51:84:98:52:e0:96:91:30:e0:0b:
                    43:c4:66:7b:5a:0e:22:84:85:b3:b1:f7:f6:b5:51:
                    8d:d1:cb:4d:a1:93:6c:a5:c3:77:ac:49:4e:55:37:
                    3b:ef:e0:1d:36:42:30:77:81:2c:c3:1f:a2:72:61:
                    6f:fe:93:ce:41:9d:7d:9e:6e:b3:b1:8a:0d:fe:c3:
                    75:41:3b:df:ff:40:d1:3a:79:1a:4c:5c:ba:ad:0c:
                    1e:b8:df:01:7f:44:b9:45:09:81:12:1f:3e:3e:a2:
                    d8:41:a6:ac:a4:90:d3:ab:53:f0:e9:f1:f1:69:08:
                    52:23:5b:18:6b:a4:69:ec:fe:4a:89:54:59:8f:f6:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1E:07:BF:0E:6F:98:41:25:86:B4:E1:9C:C7:1A:90:4B:A7:44:28
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/oB4Hvw5vmEElhrThnMcakEunRCg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  80.240.108.0/23
                  81.19.208.0/20
                  82.97.192.0/23
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  93.118.40.0/22
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  185.242.80.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.124.20.0/23
                  193.176.28.0/22
                  194.50.234.0/23
                  194.88.96.0/21
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:7b:54:80:db:ec:1d:ec:d5:58:2e:9b:87:73:31:dd:de:4a:
         2e:59:05:ae:96:57:3b:b3:d5:31:44:7b:3d:ed:eb:25:43:43:
         34:41:bf:88:e5:3b:3e:ee:e8:f8:a0:64:35:7b:26:39:ca:86:
         0f:59:f5:a8:24:f7:86:61:5b:88:88:d5:d1:0d:cc:b7:5a:77:
         95:8e:49:6a:2d:f3:f4:a6:95:ce:be:d3:0d:c4:e6:54:2c:1d:
         7d:7e:6a:51:3d:77:93:ee:4a:3a:99:ac:e9:f6:d9:d0:c6:e4:
         7b:88:18:0d:e8:c1:19:7f:5a:b1:ce:a3:c5:b8:9e:df:c7:c3:
         5a:fa:31:dc:66:71:11:94:06:13:34:35:8c:c2:ed:a5:76:60:
         bc:62:f9:65:98:b2:37:cb:91:e9:70:6e:ba:16:04:02:24:6a:
         74:6f:5d:45:ec:54:2a:0e:32:80:63:f7:10:74:b6:18:a4:9e:
         43:54:6f:23:cb:fa:b8:bc:a3:4e:9d:69:ce:d2:60:fc:03:d4:
         28:bb:5e:cf:e7:6c:f2:de:9b:8d:37:2d:16:3b:c4:01:5e:c2:
         5f:ad:2d:69:bb:14:3d:52:f7:0c:a9:76:8f:66:1f:67:ed:af:
         ef:e2:b2:ef:77:f5:7e:79:ca:bf:00:b3:dd:07:8a:dc:82:48:
         fa:75:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:23 2025 by rpki-client