Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa
File:                     1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa (raw, json)
Hash identifier:          AFl9DeBDP0dSG/OK6zMhaGWYU/Hi58NsW+5Sbk8Zc2c=
Subject key identifier:   F9:0D:30:CB:7D:E3:48:14:A7:5A:65:E2:4E:A4:32:92:24:EA:91:89
Certificate issuer:       /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial:       019426D8F20C148391BD077F5BF1839C5E0D
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa
Signing time:             Thu 02 Jan 2025 11:48:59 +0000
ROA not before:           Thu 02 Jan 2025 11:48:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20845
IP address blocks:        62.77.196.0/22 maxlen: 24
                          62.77.240.0/23 maxlen: 24
                          62.77.248.0/21 maxlen: 24
                          62.165.192.0/18 maxlen: 24
                          77.234.64.0/19 maxlen: 24
                          78.131.0.0/17 maxlen: 24
                          79.120.160.0/21 maxlen: 24
                          79.120.170.0/23 maxlen: 24
                          79.120.172.0/22 maxlen: 24
                          79.120.248.0/23 maxlen: 24
                          79.120.252.0/22 maxlen: 24
                          80.95.64.0/19 maxlen: 24
                          81.0.82.0/23 maxlen: 24
                          81.0.84.0/22 maxlen: 24
                          81.0.90.0/23 maxlen: 24
                          81.0.92.0/22 maxlen: 24
                          81.0.98.0/23 maxlen: 24
                          81.0.108.0/23 maxlen: 24
                          81.0.122.0/23 maxlen: 24
                          81.0.126.0/23 maxlen: 24
                          81.17.176.0/20 maxlen: 24
                          82.131.128.0/19 maxlen: 24
                          82.131.182.0/23 maxlen: 24
                          82.131.184.0/21 maxlen: 24
                          82.131.196.0/23 maxlen: 24
                          82.131.198.0/24 maxlen: 24
                          82.131.200.0/21 maxlen: 24
                          82.131.216.0/21 maxlen: 24
                          82.131.224.0/19 maxlen: 24
                          82.144.164.0/22 maxlen: 24
                          82.144.172.0/22 maxlen: 24
                          82.144.176.0/23 maxlen: 24
                          82.144.188.0/23 maxlen: 24
                          84.236.0.0/17 maxlen: 24
                          85.66.0.0/15 maxlen: 24
                          85.238.64.0/19 maxlen: 24
                          87.97.0.0/18 maxlen: 24
                          87.97.80.0/20 maxlen: 24
                          87.97.96.0/19 maxlen: 24
                          89.147.64.0/20 maxlen: 24
                          89.147.96.0/22 maxlen: 24
                          89.147.112.0/21 maxlen: 24
                          89.148.64.0/18 maxlen: 24
                          89.186.96.0/23 maxlen: 24
                          89.186.102.0/23 maxlen: 24
                          89.186.106.0/23 maxlen: 24
                          89.186.108.0/22 maxlen: 24
                          89.186.112.0/22 maxlen: 24
                          89.186.118.0/23 maxlen: 24
                          89.186.120.0/21 maxlen: 24
                          91.82.0.0/21 maxlen: 24
                          91.82.24.0/21 maxlen: 24
                          91.82.32.0/21 maxlen: 24
                          91.82.56.0/23 maxlen: 24
                          91.82.60.0/23 maxlen: 24
                          91.82.64.0/21 maxlen: 24
                          91.82.82.0/23 maxlen: 24
                          91.82.130.0/23 maxlen: 24
                          91.82.132.0/22 maxlen: 24
                          91.82.144.0/22 maxlen: 24
                          91.82.168.0/22 maxlen: 24
                          91.82.172.0/23 maxlen: 24
                          91.82.176.0/21 maxlen: 24
                          91.82.188.0/22 maxlen: 24
                          91.82.210.0/23 maxlen: 24
                          91.82.212.0/22 maxlen: 24
                          91.82.228.0/22 maxlen: 24
                          91.82.232.0/22 maxlen: 24
                          91.82.240.0/22 maxlen: 24
                          91.82.250.0/23 maxlen: 24
                          91.83.0.0/19 maxlen: 24
                          91.83.32.0/21 maxlen: 24
                          91.83.52.0/22 maxlen: 24
                          91.83.94.0/23 maxlen: 24
                          91.83.102.0/23 maxlen: 24
                          91.83.110.0/23 maxlen: 24
                          91.83.120.0/23 maxlen: 24
                          91.83.136.0/21 maxlen: 24
                          91.83.144.0/23 maxlen: 24
                          91.83.154.0/23 maxlen: 24
                          91.83.180.0/22 maxlen: 24
                          91.83.184.0/21 maxlen: 24
                          91.83.192.0/20 maxlen: 24
                          91.83.252.0/23 maxlen: 24
                          92.52.224.0/19 maxlen: 24
                          92.245.64.0/19 maxlen: 24
                          92.249.128.0/17 maxlen: 24
                          94.21.0.0/16 maxlen: 24
                          94.247.88.0/21 maxlen: 24
                          176.241.0.0/18 maxlen: 24
                          178.164.128.0/17 maxlen: 24
                          185.29.80.0/22 maxlen: 24
                          185.62.128.0/22 maxlen: 24
                          188.142.128.0/19 maxlen: 24
                          188.143.0.0/17 maxlen: 24
                          193.110.56.0/21 maxlen: 24
                          193.226.192.0/23 maxlen: 24
                          193.226.212.0/22 maxlen: 24
                          193.226.226.0/23 maxlen: 24
                          193.226.232.0/23 maxlen: 24
                          193.226.238.0/23 maxlen: 24
                          193.226.240.0/23 maxlen: 24
                          193.226.244.0/22 maxlen: 24
                          193.226.248.0/23 maxlen: 24
                          195.38.96.0/19 maxlen: 24
                          212.40.72.0/21 maxlen: 24
                          212.40.80.0/20 maxlen: 24
                          213.197.72.0/21 maxlen: 24
                          213.197.80.0/20 maxlen: 24
                          217.197.176.0/20 maxlen: 24
                          2a01:368::/29 maxlen: 48
                          2a01:368::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:f2:0c:14:83:91:bd:07:7f:5b:f1:83:9c:5e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
        Validity
            Not Before: Jan  2 11:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f90d30cb7de34814a75a65e24ea4329224ea9189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:59:68:70:17:bd:05:2c:95:28:df:0e:28:
                    70:79:06:2b:b9:9a:b9:42:bc:c4:cc:41:af:0a:b3:
                    30:25:86:38:fd:8d:30:32:d2:b0:ae:f9:d5:29:61:
                    0e:6f:ce:d3:29:39:9c:46:85:f1:c9:e4:8d:45:a9:
                    61:59:90:3f:44:3a:3a:69:30:ac:e7:18:70:d0:1a:
                    9e:7d:e3:f5:e9:b0:49:c6:95:5a:b9:6d:c6:7f:88:
                    1f:71:09:7b:b6:cd:c5:19:3a:d8:c1:23:7d:1d:9d:
                    a1:91:d9:cd:08:e9:b2:47:65:d3:bb:a7:48:81:2d:
                    74:e0:37:6e:0f:97:4d:b0:b2:b6:62:2b:e1:71:bb:
                    29:51:63:bc:59:b0:c5:45:1c:a6:81:b0:46:5f:b3:
                    05:97:17:a8:73:c2:ba:55:99:38:15:95:a8:14:2e:
                    ad:d2:3f:0c:a1:6e:85:1c:81:16:9a:8c:98:38:a8:
                    ab:a0:38:8e:e5:ed:8f:a8:4e:23:30:8d:2c:25:1f:
                    1e:30:8d:0d:c3:e9:3a:6e:a9:0a:84:fe:7c:91:35:
                    f7:d5:e9:0a:a5:f4:35:69:63:e6:98:6b:10:4f:90:
                    8a:bf:a4:b0:0d:d1:e5:20:84:12:ea:33:a9:ef:8a:
                    64:77:dd:b3:f4:d6:6f:63:c4:92:03:b0:00:99:c4:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0D:30:CB:7D:E3:48:14:A7:5A:65:E2:4E:A4:32:92:24:EA:91:89
            X509v3 Authority Key Identifier:
                keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/1-Q0wy33jSBSnWmXiTqQykiTqkYk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.77.196.0/22
                  62.77.240.0/23
                  62.77.248.0/21
                  62.165.192.0/18
                  77.234.64.0/19
                  78.131.0.0/17
                  79.120.160.0/21
                  79.120.170.0-79.120.175.255
                  79.120.248.0/23
                  79.120.252.0/22
                  80.95.64.0/19
                  81.0.82.0-81.0.87.255
                  81.0.90.0-81.0.95.255
                  81.0.98.0/23
                  81.0.108.0/23
                  81.0.122.0/23
                  81.0.126.0/23
                  81.17.176.0/20
                  82.131.128.0/19
                  82.131.182.0-82.131.191.255
                  82.131.196.0-82.131.198.255
                  82.131.200.0/21
                  82.131.216.0-82.131.255.255
                  82.144.164.0/22
                  82.144.172.0-82.144.177.255
                  82.144.188.0/23
                  84.236.0.0/17
                  85.66.0.0/15
                  85.238.64.0/19
                  87.97.0.0/18
                  87.97.80.0-87.97.127.255
                  89.147.64.0/20
                  89.147.96.0/22
                  89.147.112.0/21
                  89.148.64.0/18
                  89.186.96.0/23
                  89.186.102.0/23
                  89.186.106.0-89.186.115.255
                  89.186.118.0-89.186.127.255
                  91.82.0.0/21
                  91.82.24.0-91.82.39.255
                  91.82.56.0/23
                  91.82.60.0/23
                  91.82.64.0/21
                  91.82.82.0/23
                  91.82.130.0-91.82.135.255
                  91.82.144.0/22
                  91.82.168.0-91.82.173.255
                  91.82.176.0/21
                  91.82.188.0/22
                  91.82.210.0-91.82.215.255
                  91.82.228.0-91.82.235.255
                  91.82.240.0/22
                  91.82.250.0/23
                  91.83.0.0-91.83.39.255
                  91.83.52.0/22
                  91.83.94.0/23
                  91.83.102.0/23
                  91.83.110.0/23
                  91.83.120.0/23
                  91.83.136.0-91.83.145.255
                  91.83.154.0/23
                  91.83.180.0-91.83.207.255
                  91.83.252.0/23
                  92.52.224.0/19
                  92.245.64.0/19
                  92.249.128.0/17
                  94.21.0.0/16
                  94.247.88.0/21
                  176.241.0.0/18
                  178.164.128.0/17
                  185.29.80.0/22
                  185.62.128.0/22
                  188.142.128.0/19
                  188.143.0.0/17
                  193.110.56.0/21
                  193.226.192.0/23
                  193.226.212.0/22
                  193.226.226.0/23
                  193.226.232.0/23
                  193.226.238.0-193.226.241.255
                  193.226.244.0-193.226.249.255
                  195.38.96.0/19
                  212.40.72.0-212.40.95.255
                  213.197.72.0-213.197.95.255
                  217.197.176.0/20
                IPv6:
                  2a01:368::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:04:f2:a4:fb:d2:00:8f:e6:42:b5:7b:f0:65:6c:6e:24:
         dd:c4:e2:9b:23:c6:fb:12:af:18:2b:c2:0e:af:94:e8:0c:8a:
         e4:37:93:40:cf:0d:62:f6:34:05:19:e4:1b:3f:74:8d:bc:85:
         ba:8d:f9:47:e5:01:c5:45:14:d0:fa:a7:85:0d:72:bb:31:8f:
         e4:06:87:1b:42:bf:90:e7:07:5f:2f:11:2a:3d:0c:c8:0e:d7:
         05:70:f3:8f:9d:62:e4:39:2e:9c:3c:02:4b:75:d5:d7:4c:0f:
         0e:be:df:91:6d:f7:38:24:b0:5a:24:f1:5a:36:62:19:64:5f:
         99:e6:7d:68:b0:b9:0c:6f:c7:24:05:30:b2:f8:bc:3f:4b:38:
         cb:47:0e:92:99:f5:91:72:ad:eb:d5:c1:ba:9f:94:69:cc:84:
         7a:29:ca:a3:05:c9:7f:8a:83:a1:6a:31:e0:76:ee:15:21:d4:
         08:26:39:99:ac:1b:f4:3c:a9:dc:cd:fc:48:e2:db:25:e5:86:
         54:a6:7d:d9:28:fb:4a:06:65:66:73:03:93:58:26:5c:ee:e8:
         03:9b:47:da:c3:b3:6b:e6:92:c5:21:f1:cc:f2:ac:fd:e9:bc:
         ce:c5:da:dd:3a:76:ab:76:e3:ba:79:07:f5:ab:43:7b:78:c9:
         3f:db:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:48 2025 by rpki-client on console.sobornost.net