Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1--FhHi2stlyl49Hav1HAnhtztWc.roa
File:                     1--FhHi2stlyl49Hav1HAnhtztWc.roa (raw, json)
Hash identifier:          UYw4YQTBeqS1blU9xogxNVZGqMSpitB0togPR86NcAA=
Subject key identifier:   FB:E1:61:1E:2D:AC:B6:5C:A5:E3:D1:DA:BF:51:C0:9E:1B:73:B5:67
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       0185B1BD8EC94BE817695A82D6C5DA46C67B
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1--FhHi2stlyl49Hav1HAnhtztWc.roa
Signing time:             Sat 14 Jan 2023 19:24:28 +0000
ROA not before:           Sat 14 Jan 2023 19:24:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        77.37.66.0/24 maxlen: 24
                          77.37.91.0/24 maxlen: 24
                          77.37.94.0/24 maxlen: 24
                          77.37.34.0/24 maxlen: 24
                          77.37.40.0/24 maxlen: 24
                          77.37.41.0/24 maxlen: 24
                          77.37.43.0/24 maxlen: 24
                          77.37.45.0/24 maxlen: 24
                          77.37.46.0/24 maxlen: 24
                          77.37.52.0/24 maxlen: 24
                          93.127.203.0/24 maxlen: 24
                          93.127.212.0/24 maxlen: 24
                          93.127.219.0/24 maxlen: 24
                          93.127.167.0/24 maxlen: 24
                          93.127.186.0/24 maxlen: 24
                          93.127.188.0/24 maxlen: 24
                          93.127.190.0/24 maxlen: 24
                          93.127.191.0/24 maxlen: 24
                          93.127.199.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:b1:bd:8e:c9:4b:e8:17:69:5a:82:d6:c5:da:46:c6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Jan 14 19:24:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fbe1611e2dacb65ca5e3d1dabf51c09e1b73b567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:cf:13:37:e9:c2:2a:77:23:2f:7a:47:9a:
                    69:5b:70:49:b2:23:ed:14:be:2d:80:d3:6e:65:7a:
                    f2:71:10:70:7c:ce:61:fb:da:49:4d:bb:ef:4e:73:
                    39:54:4e:61:66:c8:f8:0b:fd:6b:0f:98:f2:b0:e5:
                    c8:80:d8:7d:a8:a9:8a:52:b6:d3:b3:47:e1:ea:a7:
                    fe:55:ae:6b:1d:8a:cb:46:09:a9:35:7d:a4:c8:d8:
                    84:63:10:e1:1f:f6:ad:f3:ca:f0:8f:d9:80:2d:54:
                    67:ae:f3:67:e7:7e:da:4a:b1:fa:99:ac:86:64:4b:
                    bc:05:ab:cc:b4:8c:05:95:18:00:aa:38:cc:65:7e:
                    88:38:17:6c:e4:be:50:a7:d5:5b:dd:ce:4a:70:aa:
                    e9:67:50:37:3e:15:2e:ea:9f:5e:e9:47:b7:3e:ca:
                    88:3f:75:d4:59:be:f7:76:a2:5a:ea:de:6b:98:87:
                    a0:9f:84:2b:6b:06:1a:5b:d6:e1:c4:40:37:39:bc:
                    bb:0c:3d:f9:e1:4b:ba:26:03:6d:ec:71:2e:f6:89:
                    2f:4e:5b:9e:7a:ad:fd:6f:16:3c:1d:32:ea:52:0d:
                    c3:10:a8:4e:dd:02:94:b1:eb:72:7c:ad:0b:c5:a0:
                    97:e8:df:8a:b8:9f:13:b3:78:e7:71:dc:8c:b2:52:
                    11:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E1:61:1E:2D:AC:B6:5C:A5:E3:D1:DA:BF:51:C0:9E:1B:73:B5:67
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1--FhHi2stlyl49Hav1HAnhtztWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.34.0/24
                  77.37.40.0/23
                  77.37.43.0/24
                  77.37.45.0-77.37.46.255
                  77.37.52.0/24
                  77.37.66.0/24
                  77.37.91.0/24
                  77.37.94.0/24
                  93.127.167.0/24
                  93.127.186.0/24
                  93.127.188.0/24
                  93.127.190.0/23
                  93.127.199.0/24
                  93.127.203.0/24
                  93.127.212.0/24
                  93.127.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:ac:f3:e8:77:26:3f:5f:2a:75:71:f9:98:3a:d8:83:d0:
         fd:61:c0:4b:17:db:1e:ba:4d:a0:f3:7d:1c:b2:5b:2f:1d:8e:
         b2:6d:10:e5:2b:68:87:50:de:9f:67:b9:e2:a9:c6:55:e2:b3:
         1b:99:2f:f9:a6:b0:b8:04:bf:24:02:82:7b:31:6b:d3:d3:45:
         4a:7d:a9:10:a0:d6:45:33:50:2f:38:ce:6b:4c:0e:02:bf:69:
         52:79:fb:d5:e1:88:20:fa:0c:48:7d:40:39:a1:f2:5d:8a:93:
         16:74:f3:06:0e:0c:98:66:05:15:5e:4d:df:3d:4a:31:1f:41:
         45:fc:38:3c:73:f8:93:7e:c2:28:7e:92:eb:2a:d6:f8:8d:4f:
         c5:0b:f7:e7:e8:38:ad:67:bb:da:47:23:56:61:2a:03:f2:25:
         9d:95:23:54:06:01:7e:c2:ad:17:8c:c1:5e:ca:33:25:d4:c0:
         fa:36:04:25:ae:8b:f6:c0:fa:c1:93:22:1b:b2:68:3a:0e:5d:
         b4:47:76:cf:7e:cd:8a:6b:e9:3e:0e:e6:29:e6:cb:92:bb:a8:
         e3:58:1d:63:ad:99:84:7c:58:1c:79:80:c2:13:e6:fc:9a:d5:
         09:aa:c0:8d:8b:a8:cc:0f:93:8d:71:2d:f7:15:80:cd:10:12:
         ae:2f:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:44 2025 by rpki-client