Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/92fBnrq_mIGybZF5gsHPTbdH0y4.roa
File:                     92fBnrq_mIGybZF5gsHPTbdH0y4.roa (raw, json)
Hash identifier:          3nqgv8gEoJk+mexG4q/tymckm8ICa7hlkNqJQ4qh8Tg=
Subject key identifier:   F7:67:C1:9E:BA:BF:98:81:B2:6D:91:79:82:C1:CF:4D:B7:47:D3:2E
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       0194706E07042798C943C29EC922886FDF77
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/92fBnrq_mIGybZF5gsHPTbdH0y4.roa
Signing time:             Thu 16 Jan 2025 18:44:06 +0000
ROA not before:           Thu 16 Jan 2025 18:44:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210644
IP address blocks:        77.239.96.0/24 maxlen: 24
                          77.239.97.0/24 maxlen: 24
                          77.239.98.0/24 maxlen: 24
                          77.239.99.0/24 maxlen: 24
                          77.239.100.0/24 maxlen: 24
                          77.239.101.0/24 maxlen: 24
                          77.239.102.0/24 maxlen: 24
                          77.239.103.0/24 maxlen: 24
                          77.239.112.0/24 maxlen: 24
                          77.239.113.0/24 maxlen: 24
                          77.239.114.0/24 maxlen: 24
                          77.239.115.0/24 maxlen: 24
                          77.239.116.0/24 maxlen: 24
                          77.239.117.0/24 maxlen: 24
                          77.239.118.0/24 maxlen: 24
                          77.239.119.0/24 maxlen: 24
                          77.239.120.0/24 maxlen: 24
                          77.239.121.0/24 maxlen: 24
                          77.239.122.0/24 maxlen: 24
                          77.239.123.0/24 maxlen: 24
                          150.241.64.0/24 maxlen: 24
                          150.241.65.0/24 maxlen: 24
                          150.241.66.0/24 maxlen: 24
                          150.241.67.0/24 maxlen: 24
                          150.241.68.0/24 maxlen: 24
                          150.241.69.0/24 maxlen: 24
                          150.241.70.0/24 maxlen: 24
                          150.241.71.0/24 maxlen: 24
                          150.241.72.0/24 maxlen: 24
                          150.241.73.0/24 maxlen: 24
                          150.241.74.0/24 maxlen: 24
                          150.241.75.0/24 maxlen: 24
                          150.241.76.0/24 maxlen: 24
                          150.241.77.0/24 maxlen: 24
                          150.241.78.0/24 maxlen: 24
                          150.241.79.0/24 maxlen: 24
                          150.241.80.0/24 maxlen: 24
                          150.241.81.0/24 maxlen: 24
                          150.241.82.0/24 maxlen: 24
                          150.241.83.0/24 maxlen: 24
                          150.241.84.0/24 maxlen: 24
                          150.241.85.0/24 maxlen: 24
                          150.241.86.0/24 maxlen: 24
                          150.241.87.0/24 maxlen: 24
                          150.241.88.0/24 maxlen: 24
                          150.241.89.0/24 maxlen: 24
                          150.241.90.0/24 maxlen: 24
                          150.241.91.0/24 maxlen: 24
                          150.241.92.0/24 maxlen: 24
                          150.241.93.0/24 maxlen: 24
                          150.241.94.0/24 maxlen: 24
                          150.241.95.0/24 maxlen: 24
                          150.241.96.0/24 maxlen: 24
                          150.241.97.0/24 maxlen: 24
                          150.241.98.0/24 maxlen: 24
                          150.241.99.0/24 maxlen: 24
                          150.241.100.0/24 maxlen: 24
                          150.241.101.0/24 maxlen: 24
                          150.241.102.0/24 maxlen: 24
                          150.241.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:70:6e:07:04:27:98:c9:43:c2:9e:c9:22:88:6f:df:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Jan 16 18:44:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f767c19ebabf9881b26d917982c1cf4db747d32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:9a:b8:d0:88:12:8c:a9:38:5f:93:35:bf:
                    71:2e:0f:f3:a4:17:19:83:71:0d:0a:cf:36:b1:72:
                    c9:11:cb:a7:58:51:b3:c7:59:11:a5:a5:43:8c:54:
                    0c:c3:ad:10:51:f4:70:a9:b7:9b:f7:f5:1c:89:ff:
                    dd:9f:40:91:44:b4:4f:0c:12:83:bf:9f:83:e3:21:
                    b1:df:ba:c9:5d:52:b5:16:11:2d:a6:d9:3f:fe:30:
                    48:eb:53:71:c1:61:c7:6d:8b:f1:4e:db:2a:a0:8a:
                    35:85:ae:33:13:d5:1d:b4:f2:cc:2f:5a:31:fd:de:
                    b2:e9:6c:67:51:23:90:37:a4:0d:80:4e:08:e2:15:
                    a0:9e:b0:36:83:28:36:17:a5:7c:57:de:21:5c:4f:
                    e2:86:be:de:43:71:76:9c:e4:2d:38:a0:6a:34:52:
                    d2:8d:e6:c3:13:e0:17:ee:fa:3d:a7:a1:33:75:94:
                    a5:e4:72:7a:44:ec:7b:50:e7:ab:47:ee:16:6c:0a:
                    97:36:9c:fa:b1:d7:c0:dd:6d:0d:8d:b6:2c:5a:a9:
                    ec:a6:ca:22:0b:e2:cc:ad:7c:66:7d:f3:81:d0:53:
                    dd:b1:e0:7d:45:ef:88:0d:ba:c2:5f:2c:3d:71:84:
                    2b:e5:89:83:eb:10:6e:31:9c:7d:50:2c:06:d6:39:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:C1:9E:BA:BF:98:81:B2:6D:91:79:82:C1:CF:4D:B7:47:D3:2E
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/92fBnrq_mIGybZF5gsHPTbdH0y4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.239.96.0/21
                  77.239.112.0-77.239.123.255
                  150.241.64.0-150.241.103.255

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:48:c6:04:4b:97:c4:2c:ed:a4:69:ab:40:87:30:a9:eb:
         92:f9:42:6e:5e:0d:70:6c:39:8c:7f:b1:46:c0:1c:19:fb:30:
         f2:f7:4f:f0:60:99:cf:94:dc:1b:2c:bb:2e:a8:7c:1f:f4:3e:
         6c:70:75:da:56:c5:e9:88:21:20:6f:11:80:98:cb:9b:e4:79:
         a2:ed:4f:06:6b:8b:0d:a1:aa:c5:89:ec:15:2e:04:c1:93:74:
         ba:f0:db:00:aa:0c:77:fb:40:cd:87:b9:f6:19:40:ca:c2:d7:
         b6:44:7f:d8:4f:8f:92:95:f8:eb:ec:5b:06:1d:e1:86:90:53:
         a1:19:cb:a0:22:0a:3e:9f:fc:f5:67:f8:16:f7:4b:c9:d5:bf:
         20:71:b3:5a:8d:db:a4:aa:98:fb:77:90:50:cd:b5:0f:2b:ee:
         ae:45:6e:77:41:99:77:d0:0b:7f:aa:b2:1c:fd:79:00:bc:a5:
         bb:65:66:40:b9:3e:d0:e5:3f:ae:e4:f4:b2:bb:25:f5:36:7f:
         09:e8:d6:1f:80:d2:d2:db:79:2a:34:b3:fa:ec:10:6a:82:5d:
         c3:ab:1a:25:38:cf:4b:70:89:f3:c1:a1:66:e1:54:b0:c1:a7:
         fb:8a:66:fa:02:68:43:68:98:67:6c:0f:d9:93:f2:ab:b8:2b:
         2e:0a:13:e8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZRwbgcEJ5jJQ8KeySKIb993MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwMTE2MTg0NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzY3YzE5ZWJhYmY5ODgxYjI2ZDkxNzk4MmMxY2Y0ZGI3NDdkMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK6auNCIEoypOF+TNb9xLg/zpBcZ
g3ENCs82sXLJEcunWFGzx1kRpaVDjFQMw60QUfRwqbeb9/Ucif/dn0CRRLRPDBKD
v5+D4yGx37rJXVK1FhEtptk//jBI61NxwWHHbYvxTtsqoIo1ha4zE9UdtPLML1ox
/d6y6WxnUSOQN6QNgE4I4hWgnrA2gyg2F6V8V94hXE/ihr7eQ3F2nOQtOKBqNFLS
jebDE+AX7vo9p6EzdZSl5HJ6ROx7UOerR+4WbAqXNpz6sdfA3W0NjbYsWqnspsoi
C+LMrXxmffOB0FPdseB9Re+IDbrCXyw9cYQr5YmD6xBuMZx9UCwG1jlD4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPdnwZ66v5iBsm2ReYLBz023R9MuMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvOTJmQm5ycV9tSUd5YlpGNWdzSFBUYmRIMHk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQDTe9gMAwD
BARN73ADBAJN73gwDAMEBpbxQAMEA5bxYDANBgkqhkiG9w0BAQsFAAOCAQEAOHpI
xgRLl8Qs7aRpq0CHMKnrkvlCbl4NcGw5jH+xRsAcGfsw8vdP8GCZz5TcGyy7Lqh8
H/Q+bHB12lbF6YghIG8RgJjLm+R5ou1PBmuLDaGqxYnsFS4EwZN0uvDbAKoMd/tA
zYe59hlAysLXtkR/2E+PkpX46+xbBh3hhpBToRnLoCIKPp/89Wf4FvdLydW/IHGz
Wo3bpKqY+3eQUM21DyvurkVud0GZd9ALf6qyHP15ALylu2VmQLk+0OU/ruT0srsl
9TZ/CejWH4DS0tt5KjSz+uwQaoJdw6saJTjPS3CJ88GhZuFUsMGn+4pm+gJoQ2iY
Z2wP2ZPyq7grLgoT6A==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:11 2025 by rpki-client