Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/yqjBS0NvbqDN_15W2wrntOQZvcc.roa
File:                     yqjBS0NvbqDN_15W2wrntOQZvcc.roa (raw, json)
Hash identifier:          EfUCEq8NY7KlCPiTzmDzY+CpuzyxDk3ZhSYXEStfNGA=
Subject key identifier:   CA:A8:C1:4B:43:6F:6E:A0:CD:FF:5E:56:DB:0A:E7:B4:E4:19:BD:C7
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019573ACCF5B50005991AB672C99F254F491
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/yqjBS0NvbqDN_15W2wrntOQZvcc.roa
Signing time:             Sat 08 Mar 2025 02:54:19 +0000
ROA not before:           Sat 08 Mar 2025 02:54:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25369
IP address blocks:        5.226.136.0/21 maxlen: 21
                          31.14.102.0/24 maxlen: 24
                          31.14.254.0/24 maxlen: 24
                          37.10.113.0/24 maxlen: 24
                          37.10.114.0/24 maxlen: 24
                          46.102.155.0/24 maxlen: 24
                          46.247.142.0/23 maxlen: 24
                          46.247.143.0/24 maxlen: 24
                          64.239.236.0/22 maxlen: 22
                          77.81.124.0/22 maxlen: 22
                          77.81.191.0/24 maxlen: 24
                          79.139.84.0/22 maxlen: 22
                          80.240.108.0/23 maxlen: 23
                          81.19.208.0/20 maxlen: 20
                          81.19.208.0/23 maxlen: 23
                          81.19.211.0/24 maxlen: 24
                          81.19.215.0/24 maxlen: 24
                          81.19.216.0/24 maxlen: 24
                          82.97.192.0/23 maxlen: 23
                          84.247.0.0/24 maxlen: 24
                          84.247.40.0/23 maxlen: 24
                          84.247.42.0/23 maxlen: 24
                          85.204.70.0/24 maxlen: 24
                          86.54.136.0/22 maxlen: 22
                          86.104.20.0/22 maxlen: 22
                          86.104.20.0/23 maxlen: 24
                          86.104.22.0/23 maxlen: 24
                          86.104.248.0/22 maxlen: 22
                          86.104.248.0/24 maxlen: 24
                          86.104.249.0/24 maxlen: 24
                          86.106.89.0/24 maxlen: 24
                          86.106.112.0/24 maxlen: 24
                          86.106.135.0/24 maxlen: 24
                          86.106.157.0/24 maxlen: 24
                          86.106.158.0/24 maxlen: 24
                          86.107.241.0/24 maxlen: 24
                          89.21.64.0/22 maxlen: 22
                          89.21.64.0/24 maxlen: 24
                          89.21.66.0/24 maxlen: 24
                          89.21.67.0/24 maxlen: 24
                          89.32.127.0/24 maxlen: 24
                          89.34.96.0/22 maxlen: 22
                          89.34.96.0/24 maxlen: 24
                          89.34.97.0/24 maxlen: 24
                          89.35.25.0/24 maxlen: 24
                          89.35.28.0/22 maxlen: 22
                          89.37.64.0/22 maxlen: 22
                          89.37.172.0/22 maxlen: 22
                          89.37.173.0/24 maxlen: 24
                          89.38.68.0/23 maxlen: 24
                          89.38.68.0/24 maxlen: 24
                          89.38.69.0/24 maxlen: 24
                          89.40.212.0/24 maxlen: 24
                          89.46.222.0/23 maxlen: 23
                          89.46.223.0/24 maxlen: 24
                          89.46.248.0/22 maxlen: 22
                          93.113.175.0/24 maxlen: 24
                          93.114.83.0/24 maxlen: 24
                          93.114.129.0/24 maxlen: 24
                          93.118.40.0/22 maxlen: 22
                          109.69.104.0/21 maxlen: 21
                          109.69.110.0/24 maxlen: 24
                          109.70.144.0/21 maxlen: 21
                          109.70.145.0/24 maxlen: 24
                          109.70.148.0/24 maxlen: 24
                          109.70.149.0/24 maxlen: 24
                          109.230.203.0/24 maxlen: 24
                          109.230.209.0/24 maxlen: 24
                          109.230.215.0/24 maxlen: 24
                          109.230.218.0/24 maxlen: 24
                          109.230.220.0/24 maxlen: 24
                          128.127.148.0/22 maxlen: 22
                          134.255.243.0/24 maxlen: 24
                          176.223.172.0/22 maxlen: 22
                          176.223.172.0/23 maxlen: 24
                          176.223.174.0/23 maxlen: 24
                          178.239.160.0/20 maxlen: 20
                          178.239.165.0/24 maxlen: 24
                          178.239.167.0/24 maxlen: 24
                          178.239.170.0/24 maxlen: 24
                          178.239.173.0/24 maxlen: 24
                          185.3.236.0/22 maxlen: 22
                          185.16.204.0/22 maxlen: 22
                          185.38.148.0/22 maxlen: 22
                          185.44.76.0/22 maxlen: 22
                          185.61.156.0/22 maxlen: 22
                          185.61.156.0/24 maxlen: 24
                          185.61.157.0/24 maxlen: 24
                          185.114.224.0/24 maxlen: 24
                          185.121.136.0/22 maxlen: 22
                          185.125.204.0/22 maxlen: 22
                          185.134.20.0/22 maxlen: 22
                          185.137.36.0/22 maxlen: 24
                          185.158.240.0/22 maxlen: 24
                          185.158.241.0/24 maxlen: 24
                          185.158.242.0/24 maxlen: 24
                          185.200.204.0/22 maxlen: 22
                          185.216.144.0/22 maxlen: 22
                          185.223.232.0/22 maxlen: 22
                          185.223.235.0/24 maxlen: 24
                          185.242.80.0/22 maxlen: 22
                          188.212.154.0/24 maxlen: 24
                          188.240.56.0/21 maxlen: 21
                          188.240.56.0/24 maxlen: 24
                          188.240.57.0/24 maxlen: 24
                          188.240.58.0/24 maxlen: 24
                          188.240.60.0/24 maxlen: 24
                          188.240.71.0/24 maxlen: 24
                          188.241.120.0/24 maxlen: 24
                          188.241.144.0/24 maxlen: 24
                          188.241.156.0/23 maxlen: 23
                          188.241.157.0/24 maxlen: 24
                          188.241.246.0/24 maxlen: 24
                          193.32.208.0/22 maxlen: 22
                          193.32.208.0/24 maxlen: 24
                          193.124.20.0/23 maxlen: 24
                          193.176.28.0/22 maxlen: 22
                          193.176.31.0/24 maxlen: 24
                          194.50.234.0/23 maxlen: 23
                          194.88.96.0/21 maxlen: 24
                          194.88.98.0/23 maxlen: 24
                          195.20.108.0/23 maxlen: 23
                          195.20.108.0/24 maxlen: 24
                          195.140.212.0/22 maxlen: 24
                          195.206.165.0/24 maxlen: 24
                          195.206.166.0/23 maxlen: 23
                          195.206.169.0/24 maxlen: 24
                          195.206.170.0/23 maxlen: 23
                          195.206.180.0/22 maxlen: 22
                          195.234.124.0/23 maxlen: 24
                          195.234.124.0/24 maxlen: 24
                          195.234.127.0/24 maxlen: 24
                          212.237.224.0/22 maxlen: 22
                          213.166.84.0/22 maxlen: 24
                          217.146.80.0/20 maxlen: 20
                          217.146.87.0/24 maxlen: 24
                          217.146.92.0/24 maxlen: 24
                          2a00:1a30::/32 maxlen: 32
                          2a01:4020::/32 maxlen: 32
                          2a01:4020:2::/48 maxlen: 48
                          2a01:4020:3::/48 maxlen: 48
                          2a01:4020:30::/48 maxlen: 48
                          2a01:4020:32::/48 maxlen: 48
                          2a01:4020:33::/48 maxlen: 48
                          2a01:4020:34::/48 maxlen: 48
                          2a01:4020:35::/48 maxlen: 48
                          2a01:4020:100::/40 maxlen: 40
                          2a01:4020:200::/40 maxlen: 40
                          2a01:4020:300::/40 maxlen: 48
                          2a0b:b840::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:73:ac:cf:5b:50:00:59:91:ab:67:2c:99:f2:54:f4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Mar  8 02:54:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=caa8c14b436f6ea0cdff5e56db0ae7b4e419bdc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:d8:b4:03:db:8a:9c:46:f1:d4:fa:84:06:
                    1d:b6:04:77:d3:28:0f:b1:35:7f:9c:ef:0b:26:81:
                    7d:77:e4:13:f5:d1:77:2f:39:9d:be:37:5e:94:b5:
                    2b:e7:fd:33:db:1f:22:26:6d:ab:22:81:24:e4:6e:
                    58:5b:ee:4d:fa:e4:65:ab:e9:b0:4d:41:13:32:5d:
                    2b:e7:b2:18:3d:e0:ab:f9:96:e8:64:da:ca:f3:a7:
                    de:22:98:e6:40:56:78:ec:01:23:42:0f:11:6c:f1:
                    bc:48:14:1e:8c:6e:69:41:42:95:17:3b:45:c9:c5:
                    72:10:85:2a:6c:5e:d1:f2:2a:70:ee:1c:eb:1d:fc:
                    4d:36:22:6e:d3:dc:95:13:7c:69:93:10:7e:92:5a:
                    da:8c:08:37:4d:b5:26:e9:9e:a8:4b:06:40:3d:7a:
                    74:86:2f:6b:4b:9e:a0:b3:1e:89:f8:e5:98:44:d5:
                    90:c2:36:4c:84:57:d9:b1:3a:b8:33:ec:f2:a6:3a:
                    c2:39:2c:41:5b:77:63:2f:0d:76:85:43:a4:56:9f:
                    c9:53:47:b6:3f:3e:70:37:e9:5e:6e:ee:0a:c5:b7:
                    be:0a:87:42:74:2d:74:cc:15:3c:ac:69:2a:c5:8c:
                    e1:9f:fc:47:07:c3:a2:b2:99:9e:8d:96:d4:48:0a:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A8:C1:4B:43:6F:6E:A0:CD:FF:5E:56:DB:0A:E7:B4:E4:19:BD:C7
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/yqjBS0NvbqDN_15W2wrntOQZvcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.226.136.0/21
                  31.14.102.0/24
                  31.14.254.0/24
                  37.10.113.0-37.10.114.255
                  46.102.155.0/24
                  46.247.142.0/23
                  64.239.236.0/22
                  77.81.124.0/22
                  77.81.191.0/24
                  79.139.84.0/22
                  80.240.108.0/23
                  81.19.208.0/20
                  82.97.192.0/23
                  84.247.0.0/24
                  84.247.40.0/22
                  85.204.70.0/24
                  86.54.136.0/22
                  86.104.20.0/22
                  86.104.248.0/22
                  86.106.89.0/24
                  86.106.112.0/24
                  86.106.135.0/24
                  86.106.157.0-86.106.158.255
                  86.107.241.0/24
                  89.21.64.0/22
                  89.32.127.0/24
                  89.34.96.0/22
                  89.35.25.0/24
                  89.35.28.0/22
                  89.37.64.0/22
                  89.37.172.0/22
                  89.38.68.0/23
                  89.40.212.0/24
                  89.46.222.0/23
                  89.46.248.0/22
                  93.113.175.0/24
                  93.114.83.0/24
                  93.114.129.0/24
                  93.118.40.0/22
                  109.69.104.0/21
                  109.70.144.0/21
                  109.230.203.0/24
                  109.230.209.0/24
                  109.230.215.0/24
                  109.230.218.0/24
                  109.230.220.0/24
                  128.127.148.0/22
                  134.255.243.0/24
                  176.223.172.0/22
                  178.239.160.0/20
                  185.3.236.0/22
                  185.16.204.0/22
                  185.38.148.0/22
                  185.44.76.0/22
                  185.61.156.0/22
                  185.114.224.0/24
                  185.121.136.0/22
                  185.125.204.0/22
                  185.134.20.0/22
                  185.137.36.0/22
                  185.158.240.0/22
                  185.200.204.0/22
                  185.216.144.0/22
                  185.223.232.0/22
                  185.242.80.0/22
                  188.212.154.0/24
                  188.240.56.0/21
                  188.240.71.0/24
                  188.241.120.0/24
                  188.241.144.0/24
                  188.241.156.0/23
                  188.241.246.0/24
                  193.32.208.0/22
                  193.124.20.0/23
                  193.176.28.0/22
                  194.50.234.0/23
                  194.88.96.0/21
                  195.20.108.0/23
                  195.140.212.0/22
                  195.206.165.0-195.206.167.255
                  195.206.169.0-195.206.171.255
                  195.206.180.0/22
                  195.234.124.0/23
                  195.234.127.0/24
                  212.237.224.0/22
                  213.166.84.0/22
                  217.146.80.0/20
                IPv6:
                  2a00:1a30::/32
                  2a01:4020::/32
                  2a0b:b840::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:ae:a6:2b:30:f6:fb:ed:75:24:3b:4e:8a:25:2a:92:a1:
         47:c0:73:69:14:f6:96:d6:d9:66:73:3e:a8:71:9e:c5:5c:45:
         c9:4c:a7:72:98:a6:e2:74:4b:6b:62:a6:97:d8:54:cb:4c:fc:
         18:ca:6a:23:f4:3d:8d:09:a4:c3:45:3b:a8:db:40:b2:d9:f0:
         64:b3:25:48:ca:8d:69:45:8d:81:91:80:33:be:0f:f9:ad:20:
         94:5d:6c:98:fe:48:7e:9f:e8:ae:7b:60:4b:4f:7a:0f:67:1d:
         e9:0e:c5:5b:6e:67:b9:0a:22:17:6d:9b:1f:af:c4:37:5b:8f:
         0d:0c:a3:25:c8:33:49:16:57:08:8e:c6:4e:7f:22:7c:52:04:
         8b:13:7f:22:49:38:e3:fe:85:14:bd:f8:0e:ee:ba:7f:08:3c:
         ef:23:b5:0e:a8:54:42:34:30:be:6d:fb:ec:5a:fc:70:20:8f:
         8e:d5:49:2a:fc:7e:1b:37:32:48:ae:5b:45:1d:8e:92:01:ef:
         4e:d4:34:5a:26:74:21:b1:71:02:30:36:fd:95:23:94:3f:2e:
         c1:4c:6d:93:ac:42:35:19:f6:95:a5:48:f0:2d:17:f8:30:b2:
         74:0b:cb:e8:bc:03:82:d5:cd:65:64:fe:31:21:7d:ea:bd:1b:
         45:97:89:c6
-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgISAZVzrM9bUABZkatnLJnyVPSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjUwMzA4MDI1NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWE4YzE0YjQzNmY2ZWEwY2RmZjVlNTZkYjBhZTdiNGU0MTliZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/7YtAPbipxG8dT6hAYdtgR30ygP
sTV/nO8LJoF9d+QT9dF3LzmdvjdelLUr5/0z2x8iJm2rIoEk5G5YW+5N+uRlq+mw
TUETMl0r57IYPeCr+ZboZNrK86feIpjmQFZ47AEjQg8RbPG8SBQejG5pQUKVFztF
ycVyEIUqbF7R8ipw7hzrHfxNNiJu09yVE3xpkxB+klrajAg3TbUm6Z6oSwZAPXp0
hi9rS56gsx6J+OWYRNWQwjZMhFfZsTq4M+zypjrCOSxBW3djLw12hUOkVp/JU0e2
Pz5wN+lebu4Kxbe+CodCdC10zBU8rGkqxYzhn/xHB8OispmejZbUSArcgQIDAQAB
o4IEVDCCBFAwHQYDVR0OBBYEFMqowUtDb26gzf9eVtsK57TkGb3HMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEveXFqQlMwTnZicUROXzE1VzJ3cm50T1FadmNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICaAYIKwYBBQUHAQcBAf8EggJXMIICUzCCAjIEAgABMIIC
KgMEAwXiiAMEAB8OZgMEAB8O/jAMAwQAJQpxAwQAJQpyAwQALmabAwQBLveOAwQC
QO/sAwQCTVF8AwQATVG/AwQCT4tUAwQBUPBsAwQEURPQAwQBUmHAAwQAVPcAAwQC
VPcoAwQAVcxGAwQCVjaIAwQCVmgUAwQCVmj4AwQAVmpZAwQAVmpwAwQAVmqHMAwD
BABWap0DBABWap4DBABWa/EDBAJZFUADBABZIH8DBAJZImADBABZIxkDBAJZIxwD
BAJZJUADBAJZJawDBAFZJkQDBABZKNQDBAFZLt4DBAJZLvgDBABdca8DBABdclMD
BABdcoEDBAJddigDBANtRWgDBANtRpADBABt5ssDBABt5tEDBABt5tcDBABt5toD
BABt5twDBAKAf5QDBACG//MDBAKw36wDBASy76ADBAK5A+wDBAK5EMwDBAK5JpQD
BAK5LEwDBAK5PZwDBAC5cuADBAK5eYgDBAK5fcwDBAK5hhQDBAK5iSQDBAK5nvAD
BAK5yMwDBAK52JADBAK53+gDBAK58lADBAC81JoDBAO88DgDBAC88EcDBAC88XgD
BAC88ZADBAG88ZwDBAC88fYDBALBINADBAHBfBQDBALBsBwDBAHCMuoDBAPCWGAD
BAHDFGwDBALDjNQwDAMEAMPOpQMEA8POoDAMAwQAw86pAwQCw86oAwQCw860AwQB
w+p8AwQAw+p/AwQC1O3gAwQC1aZUAwQE2ZJQMBsEAgACMBUDBQAqABowAwUAKgFA
IAMFAyoLuEAwDQYJKoZIhvcNAQELBQADggEBAGz4rqYrMPb77XUkO06KJSqSoUfA
c2kU9pbW2WZzPqhxnsVcRclMp3KYpuJ0S2tippfYVMtM/BjKaiP0PY0JpMNFO6jb
QLLZ8GSzJUjKjWlFjYGRgDO+D/mtIJRdbJj+SH6f6K57YEtPeg9nHekOxVtuZ7kK
Ihdtmx+vxDdbjw0MoyXIM0kWVwiOxk5/InxSBIsTfyJJOOP+hRS9+A7uun8IPO8j
tQ6oVEI0ML5t++xa/HAgj47VSSr8fhs3MkiuW0UdjpIB707UNFomdCGxcQIwNv2V
I5Q/LsFMbZOsQjUZ9pWlSPAtF/gwsnQLy+i8A4LVzWVk/jEhfeq9G0WXicY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:19 2025 by rpki-client