Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QPK0cHXgqMFpET4S0UJFQvktXMQ.roa
File:                     QPK0cHXgqMFpET4S0UJFQvktXMQ.roa (raw, json)
Hash identifier:          2qAc8qzqvs1nnvdcvLbooPpOPNBAeP8buz/j2Ea5AgU=
Subject key identifier:   40:F2:B4:70:75:E0:A8:C1:69:11:3E:12:D1:42:45:42:F9:2D:5C:C4
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0194B9291C1511777FDF2E053DD5F6950052
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QPK0cHXgqMFpET4S0UJFQvktXMQ.roa
Signing time:             Thu 30 Jan 2025 21:41:06 +0000
ROA not before:           Thu 30 Jan 2025 21:41:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     28753
IP address blocks:        45.94.46.0/24 maxlen: 24
                          45.128.246.0/24 maxlen: 24
                          45.130.128.0/24 maxlen: 24
                          45.146.130.0/24 maxlen: 24
                          45.154.58.0/24 maxlen: 24
                          93.190.244.0/24 maxlen: 24
                          185.9.52.0/24 maxlen: 24
                          193.8.215.0/24 maxlen: 24
                          2a04:9f40::/29 maxlen: 29
                          2a06:1184:101::/48 maxlen: 48
                          2a06:3bc0::/29 maxlen: 29
                          2a07:8a40::/29 maxlen: 29
                          2a09:17c1:66::/48 maxlen: 48
                          2a09:17c1:77::/48 maxlen: 48
                          2a0a:2d06:102::/48 maxlen: 48
                          2a0a:2d06:103::/48 maxlen: 48
                          2a0c:7886:99::/48 maxlen: 48
                          2a0c:7886:100::/48 maxlen: 48
                          2a0e:15c7:88::/48 maxlen: 48
                          2a0e:15c7:99::/48 maxlen: 48
                          2a0e:1a83:77::/48 maxlen: 48
                          2a0e:f603:66::/48 maxlen: 48
                          2a0f:140::/29 maxlen: 29
                          2a0f:1206:55::/48 maxlen: 48
                          2a0f:1206:66::/48 maxlen: 48
                          2a0f:2500::/29 maxlen: 29
                          2a0f:3d86:88::/48 maxlen: 48
                          2a0f:3d86:99::/48 maxlen: 48
                          2a0f:7d06:88::/48 maxlen: 48
                          2a0f:7d06:99::/48 maxlen: 48
                          2a0f:cc00::/29 maxlen: 29
                          2a0f:d200::/29 maxlen: 29
                          2a0f:da40::/29 maxlen: 29
                          2a0f:dfc0::/29 maxlen: 29
                          2a0f:e040::/29 maxlen: 29
                          2a0f:e1c1:22::/48 maxlen: 48
                          2a0f:e202:44::/48 maxlen: 48
                          2a0f:e202:55::/48 maxlen: 48
                          2a0f:e202:100::/48 maxlen: 48
                          2a0f:e4c0::/29 maxlen: 29
                          2a0f:e6c6:100::/48 maxlen: 48
                          2a0f:e6c6:101::/48 maxlen: 48
                          2a0f:e7c6:66::/48 maxlen: 48
                          2a0f:e7c6:77::/48 maxlen: 48
                          2a0f:e7c6:88::/48 maxlen: 48
                          2a0f:e844:22::/48 maxlen: 48
                          2a0f:e844:33::/48 maxlen: 48
                          2a0f:ea44:66::/48 maxlen: 48
                          2a0f:ea44:77::/48 maxlen: 48
                          2a0f:fc00::/29 maxlen: 29
                          2a12:ac46:77::/48 maxlen: 48
                          2a12:ecc0:168::/48 maxlen: 48
                          2a12:ecc0:178::/48 maxlen: 48
                          2a13:18c6:55::/48 maxlen: 48
                          2a13:18c6:77::/48 maxlen: 48
                          2a13:18c6:88::/48 maxlen: 48
                          2a13:7d80::/29 maxlen: 29
                          2a13:8c86:10a::/48 maxlen: 48
                          2a13:8c86:120::/48 maxlen: 48
                          2a13:8c86:130::/48 maxlen: 48
                          2a13:c900:88::/48 maxlen: 48
                          2a13:c900:99::/48 maxlen: 48
                          2a13:e107:99::/48 maxlen: 48
                          2a13:e107:9c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:b9:29:1c:15:11:77:7f:df:2e:05:3d:d5:f6:95:00:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan 30 21:41:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=40f2b47075e0a8c169113e12d1424542f92d5cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:20:96:12:b3:f5:3e:01:ec:96:41:27:7e:
                    34:59:ad:a9:b2:11:7e:4d:92:ab:74:02:c2:53:74:
                    22:1b:9a:e5:f1:8b:3e:a9:da:df:1d:cd:da:3c:e7:
                    1d:ef:a5:0b:28:3b:5d:bd:5c:cf:79:38:59:c7:a8:
                    0c:5d:e6:f1:16:04:a7:16:a4:98:17:90:ec:cd:d7:
                    32:52:73:18:a3:d9:32:94:6e:d8:b6:24:9e:f2:08:
                    7c:5a:64:be:7c:52:d6:53:43:91:34:83:72:14:8a:
                    03:97:0f:7c:57:9a:dc:41:36:2a:ed:6c:ed:b7:21:
                    8a:29:a0:2a:38:37:36:2c:50:3a:7d:12:12:50:5e:
                    4c:b2:db:a8:de:df:17:8c:0a:6d:75:da:05:69:fa:
                    5e:cc:fa:29:b7:39:fc:f1:62:ee:69:b5:67:19:d6:
                    aa:08:08:6f:27:3c:f6:49:b3:00:58:3e:90:17:6f:
                    ec:81:d2:bb:dd:8f:31:59:2e:b5:8f:81:78:4c:9f:
                    08:41:bd:fb:4d:7d:33:a6:1c:34:67:a1:10:93:f6:
                    6c:22:60:ab:58:c1:2f:8b:21:3e:e0:0c:ca:83:42:
                    4f:33:66:9f:d5:2b:a9:da:ea:16:48:7c:5d:64:ec:
                    86:7a:cb:1d:84:68:ed:07:d4:36:b1:1f:af:82:72:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F2:B4:70:75:E0:A8:C1:69:11:3E:12:D1:42:45:42:F9:2D:5C:C4
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QPK0cHXgqMFpET4S0UJFQvktXMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.46.0/24
                  45.128.246.0/24
                  45.130.128.0/24
                  45.146.130.0/24
                  45.154.58.0/24
                  93.190.244.0/24
                  185.9.52.0/24
                  193.8.215.0/24
                IPv6:
                  2a04:9f40::/29
                  2a06:1184:101::/48
                  2a06:3bc0::/29
                  2a07:8a40::/29
                  2a09:17c1:66::/48
                  2a09:17c1:77::/48
                  2a0a:2d06:102::/47
                  2a0c:7886:99::/48
                  2a0c:7886:100::/48
                  2a0e:15c7:88::/48
                  2a0e:15c7:99::/48
                  2a0e:1a83:77::/48
                  2a0e:f603:66::/48
                  2a0f:140::/29
                  2a0f:1206:55::/48
                  2a0f:1206:66::/48
                  2a0f:2500::/29
                  2a0f:3d86:88::/48
                  2a0f:3d86:99::/48
                  2a0f:7d06:88::/48
                  2a0f:7d06:99::/48
                  2a0f:cc00::/29
                  2a0f:d200::/29
                  2a0f:da40::/29
                  2a0f:dfc0::/29
                  2a0f:e040::/29
                  2a0f:e1c1:22::/48
                  2a0f:e202:44::/48
                  2a0f:e202:55::/48
                  2a0f:e202:100::/48
                  2a0f:e4c0::/29
                  2a0f:e6c6:100::/47
                  2a0f:e7c6:66::/48
                  2a0f:e7c6:77::/48
                  2a0f:e7c6:88::/48
                  2a0f:e844:22::/48
                  2a0f:e844:33::/48
                  2a0f:ea44:66::/48
                  2a0f:ea44:77::/48
                  2a0f:fc00::/29
                  2a12:ac46:77::/48
                  2a12:ecc0:168::/48
                  2a12:ecc0:178::/48
                  2a13:18c6:55::/48
                  2a13:18c6:77::/48
                  2a13:18c6:88::/48
                  2a13:7d80::/29
                  2a13:8c86:10a::/48
                  2a13:8c86:120::/48
                  2a13:8c86:130::/48
                  2a13:c900:88::/48
                  2a13:c900:99::/48
                  2a13:e107:99::/48
                  2a13:e107:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:8c:ae:09:68:b8:2c:4b:bb:75:6a:43:ef:b0:33:3a:92:
         a2:96:83:0e:36:59:8c:ca:a8:7e:f7:2f:70:3c:df:02:be:74:
         c1:5b:56:47:03:37:47:2b:59:7f:2c:6e:04:61:63:e9:6f:6b:
         52:9c:87:7a:1f:46:74:e7:3e:91:ee:77:a1:7f:e2:8c:b0:ea:
         17:c8:e6:b1:44:54:c8:59:16:79:85:96:fa:e0:01:4f:5b:d7:
         9e:a0:db:d0:62:c5:75:bc:a2:6a:4f:0d:98:30:76:c1:00:2c:
         2f:f8:59:46:de:72:2a:15:76:0b:d2:7a:bf:e8:8e:31:e4:2f:
         ae:e8:df:f8:aa:2e:c9:5a:8b:d5:6a:4d:6e:06:e9:71:2b:c9:
         03:d9:af:3f:d4:b7:81:ce:2b:2c:46:4d:c2:c1:5a:0d:a1:57:
         e6:e0:e6:c5:1c:5c:cf:12:8d:09:8d:bf:17:95:83:d7:8b:88:
         34:1b:4e:e4:7c:d0:7e:aa:fd:48:c9:cc:68:0c:66:22:1f:9f:
         38:4f:d7:23:ce:8c:85:01:6d:bc:ed:80:f9:b3:3d:bf:c2:2f:
         f0:65:36:9b:56:8c:9a:80:96:6c:b4:58:b9:ef:97:40:98:db:
         f0:cc:5f:8b:53:9d:62:d3:5c:46:08:a5:9b:e4:11:7e:c0:9a:
         fd:4a:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:29:13 2025 by rpki-client