Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/CKmFpzLtBLCn_NNA-kjLjYSqoQQ.roa
File:                     CKmFpzLtBLCn_NNA-kjLjYSqoQQ.roa (raw, json)
Hash identifier:          XS5c/3Fp/k2cQ+BjaGp3LfDqsrjuxq8arHZvAi7l+M4=
Subject key identifier:   08:A9:85:A7:32:ED:04:B0:A7:FC:D3:40:FA:48:CB:8D:84:AA:A1:04
Certificate issuer:       /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial:       0194B6F7E51D60B65C91D7ECC34BFF822B00
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/CKmFpzLtBLCn_NNA-kjLjYSqoQQ.roa
Signing time:             Thu 30 Jan 2025 11:28:06 +0000
ROA not before:           Thu 30 Jan 2025 11:28:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15502
IP address blocks:        5.150.144.0/21 maxlen: 21
                          5.253.124.0/22 maxlen: 22
                          37.110.216.0/21 maxlen: 21
                          51.37.0.0/16 maxlen: 16
                          51.37.0.0/17 maxlen: 17
                          51.37.128.0/17 maxlen: 17
                          64.43.0.0/18 maxlen: 18
                          64.43.0.0/20 maxlen: 20
                          64.43.0.0/21 maxlen: 21
                          64.43.0.0/22 maxlen: 22
                          64.43.4.0/22 maxlen: 22
                          64.43.8.0/21 maxlen: 21
                          64.43.8.0/22 maxlen: 22
                          64.43.12.0/22 maxlen: 22
                          64.43.16.0/20 maxlen: 20
                          64.43.16.0/21 maxlen: 21
                          64.43.24.0/21 maxlen: 21
                          64.43.24.0/22 maxlen: 22
                          64.43.28.0/22 maxlen: 22
                          64.43.32.0/20 maxlen: 20
                          64.43.32.0/21 maxlen: 21
                          64.43.40.0/21 maxlen: 21
                          64.43.40.0/22 maxlen: 22
                          64.43.44.0/22 maxlen: 22
                          64.43.48.0/20 maxlen: 20
                          64.43.128.0/18 maxlen: 24
                          64.43.128.0/19 maxlen: 19
                          64.43.160.0/19 maxlen: 19
                          78.152.192.0/18 maxlen: 18
                          78.152.192.0/20 maxlen: 20
                          78.152.192.0/21 maxlen: 21
                          78.152.192.0/22 maxlen: 22
                          78.152.196.0/22 maxlen: 22
                          78.152.200.0/21 maxlen: 21
                          78.152.200.0/22 maxlen: 22
                          78.152.204.0/22 maxlen: 22
                          78.152.208.0/20 maxlen: 20
                          78.152.208.0/21 maxlen: 21
                          78.152.216.0/21 maxlen: 21
                          78.152.224.0/20 maxlen: 20
                          78.152.224.0/21 maxlen: 21
                          78.152.224.0/22 maxlen: 22
                          78.152.228.0/22 maxlen: 22
                          78.152.232.0/21 maxlen: 21
                          78.152.232.0/22 maxlen: 22
                          78.152.236.0/22 maxlen: 22
                          78.152.240.0/20 maxlen: 20
                          78.152.240.0/21 maxlen: 21
                          78.152.248.0/21 maxlen: 21
                          82.198.128.0/19 maxlen: 19
                          85.208.36.0/22 maxlen: 22
                          89.19.64.0/19 maxlen: 19
                          89.19.67.0/24 maxlen: 24
                          89.19.79.0/24 maxlen: 24
                          89.19.85.0/24 maxlen: 24
                          89.19.86.0/24 maxlen: 24
                          89.19.88.0/24 maxlen: 24
                          89.19.89.0/24 maxlen: 24
                          93.94.112.0/21 maxlen: 21
                          93.107.0.0/16 maxlen: 24
                          93.107.52.0/23 maxlen: 23
                          93.107.54.0/23 maxlen: 23
                          93.107.62.0/23 maxlen: 23
                          93.107.62.0/24 maxlen: 24
                          93.107.63.0/24 maxlen: 24
                          93.107.64.0/19 maxlen: 19
                          93.107.64.0/20 maxlen: 20
                          93.107.80.0/20 maxlen: 20
                          93.107.112.0/23 maxlen: 23
                          93.107.180.0/23 maxlen: 23
                          93.107.182.0/23 maxlen: 23
                          93.107.192.0/19 maxlen: 19
                          93.107.192.0/20 maxlen: 20
                          93.107.208.0/20 maxlen: 20
                          93.107.240.0/23 maxlen: 23
                          109.70.208.0/21 maxlen: 21
                          109.76.0.0/15 maxlen: 24
                          109.76.0.0/17 maxlen: 17
                          109.76.0.0/19 maxlen: 19
                          109.76.0.0/20 maxlen: 20
                          109.76.16.0/20 maxlen: 20
                          109.76.32.0/20 maxlen: 20
                          109.76.32.0/21 maxlen: 21
                          109.76.40.0/21 maxlen: 21
                          109.76.52.0/22 maxlen: 22
                          109.76.52.0/23 maxlen: 23
                          109.76.54.0/23 maxlen: 23
                          109.76.56.0/21 maxlen: 21
                          109.76.56.0/22 maxlen: 22
                          109.76.60.0/22 maxlen: 22
                          109.76.64.0/20 maxlen: 20
                          109.76.80.0/21 maxlen: 21
                          109.76.88.0/21 maxlen: 21
                          109.76.88.0/22 maxlen: 22
                          109.76.92.0/22 maxlen: 22
                          109.76.96.0/19 maxlen: 19
                          109.76.128.0/21 maxlen: 21
                          109.76.136.0/22 maxlen: 22
                          109.76.140.0/22 maxlen: 22
                          109.76.144.0/22 maxlen: 22
                          109.76.148.0/22 maxlen: 22
                          109.76.152.0/22 maxlen: 22
                          109.76.152.0/23 maxlen: 23
                          109.76.154.0/23 maxlen: 23
                          109.76.156.0/22 maxlen: 22
                          109.76.160.0/19 maxlen: 19
                          109.76.160.0/20 maxlen: 20
                          109.76.176.0/20 maxlen: 20
                          109.76.192.0/21 maxlen: 21
                          109.76.200.0/22 maxlen: 22
                          109.76.204.0/22 maxlen: 22
                          109.76.208.0/22 maxlen: 22
                          109.76.212.0/22 maxlen: 22
                          109.76.216.0/22 maxlen: 22
                          109.76.216.0/23 maxlen: 23
                          109.76.218.0/23 maxlen: 23
                          109.76.220.0/22 maxlen: 22
                          109.76.224.0/19 maxlen: 19
                          109.77.0.0/17 maxlen: 17
                          109.77.0.0/20 maxlen: 20
                          109.77.0.0/21 maxlen: 21
                          109.77.8.0/21 maxlen: 21
                          109.77.16.0/20 maxlen: 20
                          109.77.32.0/19 maxlen: 19
                          109.77.32.0/20 maxlen: 20
                          109.77.48.0/20 maxlen: 20
                          109.77.64.0/19 maxlen: 19
                          109.77.64.0/20 maxlen: 20
                          109.77.80.0/20 maxlen: 20
                          109.77.96.0/20 maxlen: 20
                          109.77.112.0/21 maxlen: 21
                          109.77.120.0/21 maxlen: 21
                          109.77.120.0/22 maxlen: 22
                          109.77.124.0/22 maxlen: 22
                          109.77.128.0/17 maxlen: 17
                          109.77.128.0/20 maxlen: 20
                          109.77.144.0/20 maxlen: 20
                          109.77.160.0/22 maxlen: 22
                          109.77.160.0/23 maxlen: 23
                          109.77.162.0/23 maxlen: 23
                          109.77.164.0/22 maxlen: 22
                          109.77.164.0/23 maxlen: 23
                          109.77.166.0/23 maxlen: 23
                          109.77.168.0/22 maxlen: 22
                          109.77.168.0/23 maxlen: 23
                          109.77.170.0/23 maxlen: 23
                          109.77.172.0/22 maxlen: 22
                          109.77.176.0/20 maxlen: 20
                          109.77.192.0/21 maxlen: 21
                          109.77.200.0/22 maxlen: 22
                          109.77.204.0/22 maxlen: 22
                          109.77.208.0/22 maxlen: 22
                          109.77.212.0/22 maxlen: 22
                          109.77.216.0/22 maxlen: 22
                          109.77.216.0/23 maxlen: 23
                          109.77.218.0/23 maxlen: 23
                          109.77.220.0/22 maxlen: 22
                          109.77.224.0/20 maxlen: 20
                          109.77.240.0/20 maxlen: 20
                          109.77.240.0/21 maxlen: 21
                          109.77.248.0/21 maxlen: 21
                          109.78.0.0/15 maxlen: 24
                          109.78.0.0/20 maxlen: 20
                          109.78.16.0/21 maxlen: 21
                          109.78.24.0/21 maxlen: 21
                          109.78.24.0/22 maxlen: 22
                          109.78.28.0/22 maxlen: 22
                          109.78.32.0/20 maxlen: 20
                          109.78.32.0/21 maxlen: 21
                          109.78.40.0/21 maxlen: 21
                          109.78.48.0/20 maxlen: 20
                          109.78.48.0/21 maxlen: 21
                          109.78.56.0/21 maxlen: 21
                          109.78.64.0/19 maxlen: 19
                          109.78.96.0/20 maxlen: 20
                          109.78.112.0/20 maxlen: 20
                          109.78.128.0/17 maxlen: 17
                          109.78.128.0/19 maxlen: 19
                          109.78.128.0/20 maxlen: 20
                          109.78.144.0/20 maxlen: 20
                          109.78.160.0/20 maxlen: 20
                          109.78.160.0/21 maxlen: 21
                          109.78.168.0/21 maxlen: 21
                          109.78.176.0/20 maxlen: 20
                          109.78.176.0/21 maxlen: 21
                          109.78.184.0/21 maxlen: 21
                          109.78.192.0/21 maxlen: 21
                          109.78.200.0/22 maxlen: 22
                          109.78.204.0/22 maxlen: 22
                          109.78.208.0/22 maxlen: 22
                          109.78.212.0/22 maxlen: 22
                          109.78.216.0/22 maxlen: 22
                          109.78.220.0/22 maxlen: 22
                          109.78.220.0/23 maxlen: 23
                          109.78.222.0/23 maxlen: 23
                          109.78.224.0/20 maxlen: 20
                          109.78.224.0/21 maxlen: 21
                          109.78.232.0/21 maxlen: 21
                          109.78.240.0/20 maxlen: 20
                          109.78.240.0/21 maxlen: 21
                          109.78.248.0/21 maxlen: 21
                          109.79.0.0/17 maxlen: 17
                          109.79.0.0/19 maxlen: 19
                          109.79.0.0/20 maxlen: 20
                          109.79.16.0/20 maxlen: 20
                          109.79.32.0/20 maxlen: 20
                          109.79.48.0/20 maxlen: 20
                          109.79.64.0/21 maxlen: 21
                          109.79.72.0/22 maxlen: 22
                          109.79.76.0/22 maxlen: 22
                          109.79.80.0/22 maxlen: 22
                          109.79.84.0/22 maxlen: 22
                          109.79.88.0/22 maxlen: 22
                          109.79.92.0/22 maxlen: 22
                          109.79.92.0/23 maxlen: 23
                          109.79.94.0/23 maxlen: 23
                          109.79.96.0/19 maxlen: 19
                          109.79.96.0/20 maxlen: 20
                          109.79.112.0/20 maxlen: 20
                          109.79.128.0/17 maxlen: 17
                          109.79.128.0/19 maxlen: 19
                          109.79.128.0/20 maxlen: 20
                          109.79.144.0/20 maxlen: 20
                          109.79.160.0/21 maxlen: 21
                          109.79.168.0/22 maxlen: 22
                          109.79.172.0/22 maxlen: 22
                          109.79.176.0/22 maxlen: 22
                          109.79.180.0/22 maxlen: 22
                          109.79.184.0/22 maxlen: 22
                          109.79.188.0/22 maxlen: 22
                          109.79.188.0/23 maxlen: 23
                          109.79.190.0/23 maxlen: 23
                          109.79.192.0/20 maxlen: 20
                          109.79.192.0/21 maxlen: 21
                          109.79.200.0/21 maxlen: 21
                          109.79.208.0/20 maxlen: 20
                          109.79.224.0/19 maxlen: 19
                          109.79.224.0/20 maxlen: 20
                          109.79.240.0/20 maxlen: 20
                          185.8.192.0/22 maxlen: 22
                          193.38.236.0/22 maxlen: 22
                          194.61.12.0/22 maxlen: 22
                          202.146.96.0/19 maxlen: 19
                          213.233.128.0/19 maxlen: 19
                          213.233.128.0/22 maxlen: 22
                          213.233.135.0/24 maxlen: 24
                          213.233.142.0/24 maxlen: 24
                          213.233.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:b6:f7:e5:1d:60:b6:5c:91:d7:ec:c3:4b:ff:82:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
        Validity
            Not Before: Jan 30 11:28:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=08a985a732ed04b0a7fcd340fa48cb8d84aaa104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:f4:98:22:e7:90:63:ed:8c:7f:3a:16:5b:
                    50:f9:c6:1f:e8:74:50:56:19:54:7b:51:ab:db:98:
                    fb:d5:94:97:72:e2:d1:94:95:4b:dd:4a:06:6f:b1:
                    f8:a4:e3:db:b7:06:ef:f3:25:11:2c:9b:0a:20:d9:
                    6d:c7:ca:18:e4:22:cf:03:87:ba:a3:35:6d:91:30:
                    7c:8a:38:47:8b:b6:13:11:4a:c7:4b:33:e1:e4:70:
                    a1:0e:46:ce:50:dc:6a:a4:a7:9c:ea:a4:10:c7:e5:
                    7a:c9:46:c0:72:6c:f6:50:35:17:f6:1a:d9:b4:69:
                    fd:ae:4a:2d:f2:ad:22:a6:ad:8c:21:34:9b:b4:b8:
                    10:95:7e:4c:75:e8:19:66:d5:1b:64:0b:64:31:03:
                    93:a3:07:8f:fb:da:d3:ac:cb:51:67:ea:65:09:2d:
                    7f:57:6f:2b:03:3d:dd:a2:4b:73:c4:cf:48:25:5c:
                    04:56:53:83:39:be:b3:bf:fb:87:df:d5:d2:71:9d:
                    c3:4a:91:01:68:88:35:a2:40:6e:c8:cc:2e:b5:80:
                    81:0e:e4:6c:a0:70:cf:f2:3a:02:cd:4e:62:01:6c:
                    74:8d:62:fa:ae:86:66:51:dd:bf:61:85:a0:42:0d:
                    61:03:24:b2:0f:3b:cd:52:fc:62:35:41:46:df:66:
                    46:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A9:85:A7:32:ED:04:B0:A7:FC:D3:40:FA:48:CB:8D:84:AA:A1:04
            X509v3 Authority Key Identifier:
                keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/CKmFpzLtBLCn_NNA-kjLjYSqoQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.150.144.0/21
                  5.253.124.0/22
                  37.110.216.0/21
                  51.37.0.0/16
                  64.43.0.0/18
                  64.43.128.0/18
                  78.152.192.0/18
                  82.198.128.0/19
                  85.208.36.0/22
                  89.19.64.0/19
                  93.94.112.0/21
                  93.107.0.0/16
                  109.70.208.0/21
                  109.76.0.0/14
                  185.8.192.0/22
                  193.38.236.0/22
                  194.61.12.0/22
                  202.146.96.0/19
                  213.233.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:dc:6a:a0:8c:4c:6f:d2:ab:28:ab:7b:a0:b5:5e:9a:a2:
         56:3e:52:a5:69:73:61:00:d0:e1:13:09:2a:08:02:2b:90:f0:
         96:98:5b:5e:35:24:79:4a:d7:41:5f:50:f3:13:7e:e8:ac:35:
         79:56:af:95:57:40:f1:4a:ea:5e:86:d9:cc:d4:9c:f4:06:3b:
         7e:c3:87:7b:36:9d:0b:2d:b2:c5:56:d0:28:18:da:52:3b:6f:
         14:4b:24:f2:d1:a1:58:7e:3a:26:c7:b4:af:15:74:80:5a:af:
         cd:f0:a3:e1:fd:0f:d0:77:30:1d:7a:41:15:44:03:86:fd:a1:
         5c:f0:85:7e:0b:94:fc:84:f8:68:ad:e3:7e:f8:8b:15:df:07:
         6e:d9:b7:3a:e8:59:b0:e0:d4:09:ea:9a:d2:4a:9b:f1:27:86:
         13:de:bf:f2:01:2a:f3:ba:cc:d5:49:96:d0:8b:43:59:05:a1:
         7b:ff:c9:a1:4b:74:cf:78:9d:f3:69:f1:18:ea:1b:6e:c4:40:
         d5:06:e4:73:b1:fe:19:5e:b8:90:56:ef:f9:8b:01:2a:29:6f:
         e1:01:ee:65:93:ab:78:a0:2f:fa:de:04:e9:34:f9:af:2f:15:
         9c:ac:20:5a:3f:b9:9d:c5:55:d9:a1:a6:24:66:dc:8b:e3:9e:
         d7:24:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:16 2025 by rpki-client