Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/coxB5WI6YvFfAnTfItR7t60271w.roa
File:                     coxB5WI6YvFfAnTfItR7t60271w.roa (raw, json)
Hash identifier:          zBOT8IavwJqHHcHgBGQIHfNsK3LA+W0T8yzjC7IR3OA=
Subject key identifier:   72:8C:41:E5:62:3A:62:F1:5F:02:74:DF:22:D4:7B:B7:AD:36:EF:5C
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       018510E22245F787507EF20C1CCCFC6DFFD4
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/coxB5WI6YvFfAnTfItR7t60271w.roa
Signing time:             Wed 14 Dec 2022 13:45:33 +0000
ROA not before:           Wed 14 Dec 2022 13:45:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        77.37.92.0/24 maxlen: 24
                          77.37.95.0/24 maxlen: 24
                          77.37.40.0/24 maxlen: 24
                          77.37.43.0/24 maxlen: 24
                          77.37.58.0/24 maxlen: 24
                          77.37.60.0/24 maxlen: 24
                          93.127.203.0/24 maxlen: 24
                          93.127.164.0/24 maxlen: 24
                          93.127.167.0/24 maxlen: 24
                          93.127.171.0/24 maxlen: 24
                          93.127.179.0/24 maxlen: 24
                          93.127.188.0/24 maxlen: 24
                          93.127.190.0/24 maxlen: 24
                          93.127.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:10:e2:22:45:f7:87:50:7e:f2:0c:1c:cc:fc:6d:ff:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Dec 14 13:45:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=728c41e5623a62f15f0274df22d47bb7ad36ef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0a:87:52:e5:92:33:89:79:c8:59:ef:92:fe:
                    2f:5b:d2:60:b3:cd:db:15:a2:b5:0b:4d:c7:2f:24:
                    33:af:43:b2:b9:af:76:28:ee:7a:d3:3d:98:82:48:
                    1d:fd:5b:66:80:bc:f1:a6:1a:14:fd:af:b4:ad:0c:
                    fd:e6:de:23:15:2e:20:80:cc:28:59:b1:3c:24:ce:
                    8e:80:a0:e6:c8:d3:02:51:7c:97:47:1b:3a:e7:ec:
                    5e:ac:51:43:19:20:ff:01:ca:9e:38:e6:e2:38:76:
                    d4:d5:3c:e0:a4:23:e0:41:4e:e8:33:99:e1:ac:e2:
                    be:61:1f:fe:7c:02:d4:80:f3:36:99:ef:2d:4a:f0:
                    c7:98:4a:68:96:e5:12:e7:3c:9d:df:70:a2:20:35:
                    78:d1:ca:e9:24:2b:cc:b6:62:a2:ec:3e:ca:bc:00:
                    56:77:6f:1a:76:86:e5:75:d7:64:15:55:e2:a4:92:
                    96:6c:4b:d2:48:6b:8c:bd:fd:2a:01:10:04:0a:6c:
                    01:3a:26:29:b5:9d:1f:63:0a:14:54:64:28:93:91:
                    32:d5:01:66:ed:9b:22:cf:14:09:ca:2b:b1:a4:ae:
                    d8:01:17:82:2b:13:51:d3:6a:ff:1b:d8:01:1c:b9:
                    96:ad:b4:8e:7f:ec:ba:c2:bd:fc:95:b1:35:96:cf:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:41:E5:62:3A:62:F1:5F:02:74:DF:22:D4:7B:B7:AD:36:EF:5C
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/coxB5WI6YvFfAnTfItR7t60271w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.40.0/24
                  77.37.43.0/24
                  77.37.58.0/24
                  77.37.60.0/24
                  77.37.92.0/24
                  77.37.95.0/24
                  93.127.164.0/24
                  93.127.167.0/24
                  93.127.171.0/24
                  93.127.179.0/24
                  93.127.188.0/24
                  93.127.190.0/23
                  93.127.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:14:81:cc:63:7d:ba:82:87:39:7d:d1:6d:78:5e:f5:24:e2:
         a9:af:cf:cc:37:93:43:3d:5b:be:49:34:ca:88:77:71:63:2e:
         54:30:5c:8f:4f:cc:29:6a:61:8b:10:e1:79:44:14:24:3b:dd:
         ec:f3:5f:d9:3a:39:cb:3b:29:5c:8e:0d:6a:34:5a:15:a0:42:
         8e:ce:8e:0a:e6:b5:a7:d6:a6:94:78:63:9a:38:81:f4:12:65:
         cc:48:7c:9d:82:e2:5c:ef:90:d0:44:ae:bf:b3:3e:8e:b7:6c:
         a7:a2:d8:b1:46:2e:ac:84:8b:36:47:16:e4:3e:98:3d:42:64:
         80:37:8f:90:b5:8d:10:b8:f4:ec:65:18:25:a7:ef:84:f5:94:
         b0:4f:d8:3e:20:6e:b8:30:ff:e4:99:13:2e:7a:9a:51:f3:bc:
         dd:8c:5b:23:c9:e1:47:b3:79:7d:0e:7d:de:46:ab:bd:88:c4:
         37:fd:1d:6a:71:8d:41:15:c9:ed:1f:56:bb:a5:fe:d7:0c:87:
         10:48:4d:90:4b:58:ff:59:b3:53:c0:b8:ed:70:06:14:2b:91:
         a9:7b:15:3d:db:5d:ae:e0:8f:fe:2c:8c:7a:8b:6f:2c:be:4c:
         ae:01:c1:36:c5:df:61:e5:b3:0c:2b:b1:7e:50:f0:37:07:1f:
         a3:e1:80:cb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYUQ4iJF94dQfvIMHMz8bf/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMjE0MTM0NTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjhjNDFlNTYyM2E2MmYxNWYwMjc0ZGYyMmQ0N2JiN2FkMzZlZjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQqHUuWSM4l5yFnvkv4vW9Jgs83b
FaK1C03HLyQzr0Oyua92KO560z2Ygkgd/VtmgLzxphoU/a+0rQz95t4jFS4ggMwo
WbE8JM6OgKDmyNMCUXyXRxs65+xerFFDGSD/AcqeOObiOHbU1TzgpCPgQU7oM5nh
rOK+YR/+fALUgPM2me8tSvDHmEpoluUS5zyd33CiIDV40crpJCvMtmKi7D7KvABW
d28adobldddkFVXipJKWbEvSSGuMvf0qARAECmwBOiYptZ0fYwoUVGQok5Ey1QFm
7ZsizxQJyiuxpK7YAReCKxNR02r/G9gBHLmWrbSOf+y6wr38lbE1ls+bqQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFHKMQeViOmLxXwJ03yLUe7etNu9cMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvY294QjVXSTZZdkZmQW5UZkl0Ujd0NjAyNzF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQATSUoAwQA
TSUrAwQATSU6AwQATSU8AwQATSVcAwQATSVfAwQAXX+kAwQAXX+nAwQAXX+rAwQA
XX+zAwQAXX+8AwQBXX++AwQAXX/LMA0GCSqGSIb3DQEBCwUAA4IBAQCTFIHMY326
goc5fdFteF71JOKpr8/MN5NDPVu+STTKiHdxYy5UMFyPT8wpamGLEOF5RBQkO93s
81/ZOjnLOylcjg1qNFoVoEKOzo4K5rWn1qaUeGOaOIH0EmXMSHydguJc75DQRK6/
sz6Ot2ynotixRi6shIs2RxbkPpg9QmSAN4+QtY0QuPTsZRglp++E9ZSwT9g+IG64
MP/kmRMueppR87zdjFsjyeFHs3l9Dn3eRqu9iMQ3/R1qcY1BFcntH1a7pf7XDIcQ
SE2QS1j/WbNTwLjtcAYUK5GpexU9212u4I/+LIx6i28svkyuAcE2xd9h5bMMK7F+
UPA3Bx+j4YDL
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:51 2025 by rpki-client