Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/qvpe1CgZPsoN593wTG-k07LEjzI.roa
File:                     qvpe1CgZPsoN593wTG-k07LEjzI.roa (raw, json)
Hash identifier:          reHGMsyJAdw5t7d1CdLGiOlH7s+tLITk+5mSuKYbIgk=
Subject key identifier:   AA:FA:5E:D4:28:19:3E:CA:0D:E7:DD:F0:4C:6F:A4:D3:B2:C4:8F:32
Certificate issuer:       /CN=2f8675457594d7e740aaeef2e7d7efd02239c617
Certificate serial:       019421B19CC947A9AF6018C4719CF5A6A8C3
Authority key identifier: 2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/qvpe1CgZPsoN593wTG-k07LEjzI.roa
Signing time:             Wed 01 Jan 2025 11:47:55 +0000
ROA not before:           Wed 01 Jan 2025 11:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47583
IP address blocks:        2.57.88.0/23 maxlen: 24
                          2.57.90.0/24 maxlen: 24
                          2.57.91.0/24 maxlen: 24
                          31.170.160.0/22 maxlen: 24
                          31.170.164.0/23 maxlen: 24
                          31.170.164.0/24 maxlen: 24
                          31.170.165.0/24 maxlen: 24
                          31.170.166.0/23 maxlen: 24
                          31.220.16.0/24 maxlen: 24
                          31.220.17.0/24 maxlen: 24
                          31.220.18.0/24 maxlen: 24
                          31.220.19.0/24 maxlen: 24
                          31.220.20.0/23 maxlen: 24
                          31.220.20.0/24 maxlen: 24
                          31.220.21.0/24 maxlen: 24
                          31.220.22.0/24 maxlen: 24
                          31.220.23.0/24 maxlen: 24
                          31.220.48.0/20 maxlen: 24
                          31.220.104.0/24 maxlen: 24
                          31.220.105.0/24 maxlen: 24
                          31.220.106.0/24 maxlen: 24
                          31.220.107.0/24 maxlen: 24
                          31.220.108.0/24 maxlen: 24
                          31.220.109.0/24 maxlen: 24
                          31.220.110.0/24 maxlen: 24
                          31.220.111.0/24 maxlen: 24
                          45.13.132.0/23 maxlen: 24
                          45.13.134.0/23 maxlen: 24
                          45.13.252.0/23 maxlen: 24
                          45.13.254.0/23 maxlen: 24
                          45.87.80.0/22 maxlen: 24
                          45.93.136.0/22 maxlen: 24
                          93.188.160.0/21 maxlen: 24
                          141.136.33.0/24 maxlen: 24
                          141.136.34.0/24 maxlen: 24
                          141.136.35.0/24 maxlen: 24
                          141.136.36.0/24 maxlen: 24
                          141.136.39.0/24 maxlen: 24
                          141.136.41.0/24 maxlen: 24
                          141.136.42.0/24 maxlen: 24
                          141.136.43.0/24 maxlen: 24
                          141.136.44.0/24 maxlen: 24
                          141.136.45.0/24 maxlen: 24
                          141.136.46.0/24 maxlen: 24
                          141.136.47.0/24 maxlen: 24
                          153.92.0.0/24 maxlen: 24
                          153.92.1.0/24 maxlen: 24
                          153.92.2.0/24 maxlen: 24
                          153.92.3.0/24 maxlen: 24
                          153.92.4.0/23 maxlen: 24
                          153.92.6.0/23 maxlen: 24
                          153.92.6.0/24 maxlen: 24
                          153.92.7.0/24 maxlen: 24
                          153.92.8.0/21 maxlen: 24
                          153.92.8.0/24 maxlen: 24
                          153.92.9.0/24 maxlen: 24
                          153.92.10.0/24 maxlen: 24
                          153.92.11.0/24 maxlen: 24
                          153.92.12.0/24 maxlen: 24
                          153.92.13.0/24 maxlen: 24
                          153.92.14.0/24 maxlen: 24
                          153.92.15.0/24 maxlen: 24
                          153.92.208.0/22 maxlen: 24
                          153.92.212.0/22 maxlen: 24
                          153.92.216.0/21 maxlen: 24
                          156.67.64.0/20 maxlen: 24
                          156.67.208.0/20 maxlen: 24
                          185.28.20.0/24 maxlen: 24
                          185.28.21.0/24 maxlen: 24
                          185.28.22.0/24 maxlen: 24
                          185.28.23.0/24 maxlen: 24
                          185.77.96.0/24 maxlen: 24
                          185.77.97.0/24 maxlen: 24
                          194.11.154.0/23 maxlen: 24
                          194.11.214.0/23 maxlen: 24
                          195.110.58.0/23 maxlen: 24
                          212.1.208.0/21 maxlen: 24
                          212.1.208.0/24 maxlen: 24
                          212.1.210.0/24 maxlen: 24
                          212.1.211.0/24 maxlen: 24
                          212.1.212.0/22 maxlen: 24
                          212.1.212.0/24 maxlen: 24
                          212.1.215.0/24 maxlen: 24
                          2a02:4780::/48 maxlen: 48
                          2a02:4780:1::/48 maxlen: 48
                          2a02:4780:2::/48 maxlen: 48
                          2a02:4780:3::/48 maxlen: 48
                          2a02:4780:4::/48 maxlen: 48
                          2a02:4780:5::/48 maxlen: 48
                          2a02:4780:6::/48 maxlen: 48
                          2a02:4780:8::/48 maxlen: 48
                          2a02:4780:9::/48 maxlen: 48
                          2a02:4780:a::/48 maxlen: 48
                          2a02:4780:b::/48 maxlen: 48
                          2a02:4780:c::/48 maxlen: 48
                          2a02:4780:d::/48 maxlen: 48
                          2a02:4780:e::/48 maxlen: 48
                          2a02:4780:f::/48 maxlen: 48
                          2a02:4780:10::/48 maxlen: 48
                          2a02:4780:11::/48 maxlen: 48
                          2a02:4780:12::/48 maxlen: 48
                          2a02:4780:13::/48 maxlen: 48
                          2a02:4780:14::/48 maxlen: 48
                          2a02:4780:15::/48 maxlen: 48
                          2a02:4780:16::/48 maxlen: 48
                          2a02:4780:17::/48 maxlen: 48
                          2a02:4780:18::/48 maxlen: 48
                          2a02:4780:19::/48 maxlen: 48
                          2a02:4780:1a::/48 maxlen: 48
                          2a02:4780:1b::/48 maxlen: 48
                          2a02:4780:1c::/48 maxlen: 48
                          2a02:4780:1d::/48 maxlen: 48
                          2a02:4780:1e::/48 maxlen: 48
                          2a02:4780:1f::/48 maxlen: 48
                          2a02:4780:20::/48 maxlen: 48
                          2a02:4780:21::/48 maxlen: 48
                          2a02:4780:22::/48 maxlen: 48
                          2a02:4780:23::/48 maxlen: 48
                          2a02:4780:24::/48 maxlen: 48
                          2a02:4780:25::/48 maxlen: 48
                          2a02:4780:26::/48 maxlen: 48
                          2a02:4780:27::/48 maxlen: 48
                          2a02:4780:28::/48 maxlen: 48
                          2a02:4780:29::/48 maxlen: 48
                          2a02:4780:2a::/48 maxlen: 48
                          2a02:4780:2b::/48 maxlen: 48
                          2a02:4780:2c::/48 maxlen: 48
                          2a02:4780:2d::/48 maxlen: 48
                          2a02:4780:2e::/48 maxlen: 48
                          2a02:4780:2f::/48 maxlen: 48
                          2a02:4780:30::/48 maxlen: 48
                          2a02:4780:31::/48 maxlen: 48
                          2a02:4780:32::/48 maxlen: 48
                          2a02:4780:33::/48 maxlen: 48
                          2a02:4780:34::/48 maxlen: 48
                          2a02:4780:35::/48 maxlen: 48
                          2a02:4780:36::/48 maxlen: 48
                          2a02:4780:37::/48 maxlen: 48
                          2a02:4780:38::/48 maxlen: 48
                          2a02:4780:39::/48 maxlen: 48
                          2a02:4780:3a::/48 maxlen: 48
                          2a02:4780:3b::/48 maxlen: 48
                          2a02:4780:3c::/48 maxlen: 48
                          2a02:4780:3d::/48 maxlen: 48
                          2a02:4780:3e::/48 maxlen: 48
                          2a02:4780:3f::/48 maxlen: 48
                          2a02:4780:40::/48 maxlen: 48
                          2a02:4780:41::/48 maxlen: 48
                          2a02:4780:42::/48 maxlen: 48
                          2a02:4780:43::/48 maxlen: 48
                          2a02:4780:44::/48 maxlen: 48
                          2a02:4780:45::/48 maxlen: 48
                          2a02:4780:46::/48 maxlen: 48
                          2a02:4780:47::/48 maxlen: 48
                          2a02:4780:48::/48 maxlen: 48
                          2a02:4780:49::/48 maxlen: 48
                          2a02:4780:4a::/48 maxlen: 48
                          2a02:4780:4b::/48 maxlen: 48
                          2a02:4780:4c::/48 maxlen: 48
                          2a02:4780:4d::/48 maxlen: 48
                          2a02:4780:4e::/48 maxlen: 48
                          2a02:4780:4f::/48 maxlen: 48
                          2a02:4780:50::/48 maxlen: 48
                          2a02:4780:51::/48 maxlen: 48
                          2a02:4780:84::/48 maxlen: 48
                          2a02:4780:85::/48 maxlen: 48
                          2a02:4780:dead::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:9c:c9:47:a9:af:60:18:c4:71:9c:f5:a6:a8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8675457594d7e740aaeef2e7d7efd02239c617
        Validity
            Not Before: Jan  1 11:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aafa5ed428193eca0de7ddf04c6fa4d3b2c48f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:5b:97:65:32:b9:da:d8:56:b2:97:83:12:
                    eb:73:61:bb:65:22:41:6b:c2:97:91:0b:39:86:23:
                    f6:9e:1e:a2:b6:82:a8:13:47:a3:3c:da:78:a5:2b:
                    1a:20:38:ed:b1:05:c6:f8:13:14:48:65:ea:26:dc:
                    4b:f3:94:c2:70:f3:44:e3:bf:84:39:49:80:88:a6:
                    0d:33:a8:be:23:71:bf:87:ad:6b:c6:9c:4b:a8:71:
                    0f:35:ec:fa:a1:c5:93:61:ae:66:af:35:26:ad:bf:
                    9b:90:e3:4e:c6:90:b1:f2:0c:8e:97:8b:93:36:a3:
                    cc:bc:de:28:a2:80:9d:03:da:f3:45:0a:7a:16:88:
                    cc:76:fe:2f:e7:ce:b7:d0:a6:4a:17:16:38:bd:97:
                    ee:a9:a8:e2:ea:95:4d:9f:b2:26:b9:69:04:fa:10:
                    09:26:64:0b:56:95:4f:c3:f2:8c:d7:8f:06:35:be:
                    83:9a:f3:61:b7:e0:bb:fe:81:92:3b:1a:a5:71:ee:
                    ea:f1:bc:49:b6:04:c8:37:be:60:18:e0:55:ae:dd:
                    d2:1b:95:50:7e:ac:d0:ec:13:7f:27:bb:24:bd:57:
                    6e:ca:58:eb:9a:ed:4f:47:31:33:4b:4c:14:ea:46:
                    06:09:b8:08:e4:10:cb:ae:2f:cd:22:61:a5:c0:4d:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FA:5E:D4:28:19:3E:CA:0D:E7:DD:F0:4C:6F:A4:D3:B2:C4:8F:32
            X509v3 Authority Key Identifier:
                keyid:2F:86:75:45:75:94:D7:E7:40:AA:EE:F2:E7:D7:EF:D0:22:39:C6:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4Z1RXWU1-dAqu7y59fv0CI5xhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/qvpe1CgZPsoN593wTG-k07LEjzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4cd4ca-c195-4bc4-bb9f-1031ae1eb032/1/L4Z1RXWU1-dAqu7y59fv0CI5xhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.88.0/22
                  31.170.160.0/21
                  31.220.16.0/21
                  31.220.48.0/20
                  31.220.104.0/21
                  45.13.132.0/22
                  45.13.252.0/22
                  45.87.80.0/22
                  45.93.136.0/22
                  93.188.160.0/21
                  141.136.33.0-141.136.36.255
                  141.136.39.0/24
                  141.136.41.0-141.136.47.255
                  153.92.0.0/20
                  153.92.208.0/20
                  156.67.64.0/20
                  156.67.208.0/20
                  185.28.20.0/22
                  185.77.96.0/23
                  194.11.154.0/23
                  194.11.214.0/23
                  195.110.58.0/23
                  212.1.208.0/21
                IPv6:
                  2a02:4780::-2a02:4780:6:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:8::-2a02:4780:51:ffff:ffff:ffff:ffff:ffff
                  2a02:4780:84::/47
                  2a02:4780:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:a8:68:72:98:36:7a:d4:06:f2:d7:69:75:4e:0e:b2:c5:
         b4:ce:66:99:6a:24:71:d6:2e:b0:f4:bf:c4:fe:73:ed:f6:c8:
         a7:20:8d:32:06:ef:89:48:65:e1:f4:4d:91:78:a1:00:8e:e4:
         07:8d:84:1b:3f:e8:83:b3:f6:b3:35:64:95:7c:87:3a:80:11:
         27:76:c3:b3:bf:5c:00:49:b9:de:dd:cc:da:d3:17:09:c1:86:
         a4:80:99:1f:d2:d4:25:9d:e7:4c:ef:89:a0:85:f6:15:b6:6e:
         88:4b:a0:b2:a9:e3:78:a6:8d:51:c3:0e:b3:85:d4:4c:12:af:
         69:d8:b6:1e:7a:a8:93:06:ab:1b:6b:26:ef:0c:d8:09:38:77:
         7e:e7:80:85:67:8f:24:cb:c1:5c:ce:b0:dc:8f:6d:e3:17:7d:
         ba:5e:fc:2f:d1:b2:30:b7:59:79:d0:d8:4f:5b:f5:c6:85:8f:
         b5:43:4e:02:b0:75:31:aa:7c:5b:34:53:01:e8:36:34:02:40:
         b6:76:e4:24:f5:1c:1f:c1:f3:d7:7b:67:03:e5:30:4b:8c:3b:
         52:bb:63:8c:1f:f5:99:38:69:1e:4d:b9:38:3b:03:60:e8:38:
         09:61:55:2c:f1:a0:52:70:6b:28:20:0e:2e:05:60:05:fe:3e:
         b8:d1:90:ba
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgISAZQhsZzJR6mvYBjEcZz1pqjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODY3NTQ1NzU5NGQ3ZTc0MGFhZWVmMmU3ZDdlZmQwMjIz
OWM2MTcwHhcNMjUwMTAxMTE0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWZhNWVkNDI4MTkzZWNhMGRlN2RkZjA0YzZmYTRkM2IyYzQ4ZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArztbl2UyudrYVrKXgxLrc2G7ZSJB
a8KXkQs5hiP2nh6itoKoE0ejPNp4pSsaIDjtsQXG+BMUSGXqJtxL85TCcPNE47+E
OUmAiKYNM6i+I3G/h61rxpxLqHEPNez6ocWTYa5mrzUmrb+bkONOxpCx8gyOl4uT
NqPMvN4oooCdA9rzRQp6FojMdv4v58630KZKFxY4vZfuqaji6pVNn7ImuWkE+hAJ
JmQLVpVPw/KM148GNb6DmvNht+C7/oGSOxqlce7q8bxJtgTIN75gGOBVrt3SG5VQ
fqzQ7BN/J7skvVduyljrmu1PRzEzS0wU6kYGCbgI5BDLri/NImGlwE3nFQIDAQAB
o4IC4jCCAt4wHQYDVR0OBBYEFKr6XtQoGT7KDefd8ExvpNOyxI8yMB8GA1UdIwQY
MBaAFC+GdUV1lNfnQKru8ufX79AiOcYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYt
MTAzMWFlMWViMDMyLzEvcXZwZTFDZ1pQc29ONTkzd1RHLWswN0xFanpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2Q0Y2EtYzE5NS00YmM0LWJiOWYtMTAzMWFlMWViMDMy
LzEvTDRaMVJYV1UxLWRBcXU3eTU5ZnYwQ0k1eGhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCBoQQCAAEwgZoDBAIC
OVgDBAMfqqADBAMf3BADBAQf3DADBAMf3GgDBAItDYQDBAItDfwDBAItV1ADBAIt
XYgDBANdvKAwDAMEAI2IIQMEAI2IJAMEAI2IJzAMAwQAjYgpAwQEjYggAwQEmVwA
AwQEmVzQAwQEnENAAwQEnEPQAwQCuRwUAwQBuU1gAwQBwguaAwQBwgvWAwQBw246
AwQD1AHQMD4EAgACMDgwEAMFByoCR4ADBwAqAkeAAAYwEgMHAyoCR4AACAMHASoC
R4AAUAMHASoCR4AAhAMHACoCR4DerTANBgkqhkiG9w0BAQsFAAOCAQEAUtyoaHKY
NnrUBvLXaXVODrLFtM5mmWokcdYusPS/xP5z7fbIpyCNMgbviUhl4fRNkXihAI7k
B42EGz/og7P2szVklXyHOoARJ3bDs79cAEm53t3M2tMXCcGGpICZH9LUJZ3nTO+J
oIX2FbZuiEugsqnjeKaNUcMOs4XUTBKvadi2HnqokwarG2sm7wzYCTh3fueAhWeP
JMvBXM6w3I9t4xd9ul78L9GyMLdZedDYT1v1xoWPtUNOArB1Map8WzRTAeg2NAJA
tnbkJPUcH8Hz13tnA+UwS4w7UrtjjB/1mThpHk25ODsDYOg4CWFVLPGgUnBrKCAO
LgVgBf4+uNGQug==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:09 2025 by rpki-client