Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wZ6YLbi7Ix7SSKq5ccAOZ9DA9Dw.roa
File:                     wZ6YLbi7Ix7SSKq5ccAOZ9DA9Dw.roa (raw, json)
Hash identifier:          2cPagS1acHeBFAMulB6SuTKz/mr4lBg89455V3ST+pk=
Subject key identifier:   C1:9E:98:2D:B8:BB:23:1E:D2:48:AA:B9:71:C0:0E:67:D0:C0:F4:3C
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       018506D0024D301C7DDBECB2E83D995D40B5
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wZ6YLbi7Ix7SSKq5ccAOZ9DA9Dw.roa
Signing time:             Mon 12 Dec 2022 14:49:33 +0000
ROA not before:           Mon 12 Dec 2022 14:49:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        77.37.92.0/24 maxlen: 24
                          77.37.95.0/24 maxlen: 24
                          93.127.164.0/24 maxlen: 24
                          93.127.171.0/24 maxlen: 24
                          77.37.40.0/24 maxlen: 24
                          77.37.43.0/24 maxlen: 24
                          93.127.179.0/24 maxlen: 24
                          77.37.58.0/24 maxlen: 24
                          93.127.190.0/24 maxlen: 24
                          93.127.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:06:d0:02:4d:30:1c:7d:db:ec:b2:e8:3d:99:5d:40:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Dec 12 14:49:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c19e982db8bb231ed248aab971c00e67d0c0f43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:16:1f:af:c4:8c:75:52:3c:16:5a:30:d2:
                    26:80:89:05:86:27:84:6d:05:b0:f8:0d:c8:c8:ec:
                    a8:9e:ec:1e:ec:c6:8c:fa:d4:22:4d:5b:29:98:a2:
                    cc:71:d2:b0:b8:43:38:f6:e2:d3:47:c2:76:90:61:
                    2c:3c:ae:88:e0:f0:1b:3b:d2:a6:9b:20:8c:00:8c:
                    6c:38:e6:32:04:18:d6:6c:c0:bf:8b:2c:03:a7:12:
                    0e:ac:c2:4b:74:70:7b:00:0f:cf:5e:6f:6e:ca:74:
                    3d:bd:64:53:92:06:16:c2:a2:7b:c9:78:ca:a7:15:
                    63:42:98:ef:99:a6:23:a1:e2:d0:1a:5c:84:e4:b2:
                    d3:07:e3:1a:cd:49:8f:e4:8d:3e:cf:78:4c:0a:ad:
                    81:d1:ab:7e:7a:db:78:43:3d:e6:a6:33:32:ab:ae:
                    bf:c2:7d:ef:09:a4:1b:42:18:23:4b:cc:22:ac:51:
                    9b:25:0e:7b:f6:2b:eb:a3:75:2c:3e:c1:f3:16:12:
                    dd:4c:81:75:38:b4:91:db:fb:c2:bf:06:2d:b7:d1:
                    a6:ce:ea:3c:ac:0d:88:d8:ab:56:be:8e:b5:95:17:
                    56:cc:41:ff:74:c2:31:e6:cb:4c:f8:be:29:17:70:
                    0b:32:d7:f8:5c:54:bc:ca:5b:11:27:2f:6b:2b:8b:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:98:2D:B8:BB:23:1E:D2:48:AA:B9:71:C0:0E:67:D0:C0:F4:3C
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wZ6YLbi7Ix7SSKq5ccAOZ9DA9Dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.40.0/24
                  77.37.43.0/24
                  77.37.58.0/24
                  77.37.92.0/24
                  77.37.95.0/24
                  93.127.164.0/24
                  93.127.171.0/24
                  93.127.179.0/24
                  93.127.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:4e:f6:28:0b:8c:e1:a8:f2:43:d1:f3:86:48:fe:42:e6:c6:
         b7:ee:98:65:fa:8f:67:d2:41:99:e4:dd:8b:0d:6f:0f:44:ba:
         05:7b:7b:67:36:e6:ae:af:3b:d0:d0:d4:e3:0d:83:1b:26:a7:
         b7:f6:03:c7:06:0d:6d:85:73:d2:ec:c4:e2:c0:d9:53:cb:af:
         63:18:ab:1e:5b:68:1b:4a:18:9c:03:2f:72:f9:41:70:37:b3:
         4d:31:e9:ea:33:53:db:b3:1b:cb:20:cc:f6:94:44:79:75:c7:
         e7:fd:be:ff:32:60:68:a3:71:2d:df:28:f1:4a:ad:16:45:68:
         47:8b:d8:74:1d:34:a3:52:d0:84:d4:29:48:ed:e5:80:db:5d:
         60:46:28:0c:b9:75:8c:98:ce:f2:1e:53:5e:c4:cb:9b:d3:ba:
         15:8f:bd:57:d9:28:00:ea:9f:a0:68:79:07:4b:08:c8:39:00:
         54:2c:55:dc:3b:9f:08:8d:35:86:8a:ff:11:61:6d:6d:aa:f7:
         2d:a0:93:b7:41:e0:00:67:52:a3:69:0f:80:8c:f5:f9:03:01:
         5c:f5:68:b5:13:bf:1b:39:19:4c:55:fa:bf:f6:4c:bc:13:40:
         53:4a:36:fe:fe:e4:a9:99:ea:8c:3e:df:19:06:88:76:9e:b3:
         5e:26:18:75
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYUG0AJNMBx92+yy6D2ZXUC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMjEyMTQ0OTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTllOTgyZGI4YmIyMzFlZDI0OGFhYjk3MWMwMGU2N2QwYzBmNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpsWH6/EjHVSPBZaMNImgIkFhieE
bQWw+A3IyOyonuwe7MaM+tQiTVspmKLMcdKwuEM49uLTR8J2kGEsPK6I4PAbO9Km
myCMAIxsOOYyBBjWbMC/iywDpxIOrMJLdHB7AA/PXm9uynQ9vWRTkgYWwqJ7yXjK
pxVjQpjvmaYjoeLQGlyE5LLTB+MazUmP5I0+z3hMCq2B0at+ett4Qz3mpjMyq66/
wn3vCaQbQhgjS8wirFGbJQ579ivro3UsPsHzFhLdTIF1OLSR2/vCvwYtt9Gmzuo8
rA2I2KtWvo61lRdWzEH/dMIx5stM+L4pF3ALMtf4XFS8ylsRJy9rK4tJXwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFMGemC24uyMe0kiquXHADmfQwPQ8MB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvd1o2WUxiaTdJeDdTU0txNWNjQU9aOURBOUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQATSUoAwQA
TSUrAwQATSU6AwQATSVcAwQATSVfAwQAXX+kAwQAXX+rAwQAXX+zAwQBXX++MA0G
CSqGSIb3DQEBCwUAA4IBAQBBTvYoC4zhqPJD0fOGSP5C5sa37phl+o9n0kGZ5N2L
DW8PRLoFe3tnNuaurzvQ0NTjDYMbJqe39gPHBg1thXPS7MTiwNlTy69jGKseW2gb
ShicAy9y+UFwN7NNMenqM1PbsxvLIMz2lER5dcfn/b7/MmBoo3Et3yjxSq0WRWhH
i9h0HTSjUtCE1ClI7eWA211gRigMuXWMmM7yHlNexMub07oVj71X2SgA6p+gaHkH
SwjIOQBULFXcO58IjTWGiv8RYW1tqvctoJO3QeAAZ1KjaQ+AjPX5AwFc9Wi1E78b
ORlMVfq/9ky8E0BTSjb+/uSpmeqMPt8ZBoh2nrNeJhh1
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:34 2025 by rpki-client