Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kFML-43YG52ToesXPo-3pXEj0HE.roa
File:                     kFML-43YG52ToesXPo-3pXEj0HE.roa (raw, json)
Hash identifier:          C3u5XHqBVpw9k2GBcPrFdDSIutXWrNnVTzsKaOUiwvI=
Subject key identifier:   90:53:0B:FB:8D:D8:1B:9D:93:A1:EB:17:3E:8F:B7:A5:71:23:D0:71
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       0190E4666DC20DD1E445A7181B75A687FA4C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kFML-43YG52ToesXPo-3pXEj0HE.roa
Signing time:             Wed 24 Jul 2024 11:00:36 +0000
ROA not before:           Wed 24 Jul 2024 11:00:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58224
IP address blocks:        37.148.0.0/22 maxlen: 22
                          37.148.4.0/22 maxlen: 22
                          37.148.8.0/22 maxlen: 22
                          37.148.12.0/22 maxlen: 22
                          37.148.16.0/22 maxlen: 22
                          37.148.20.0/22 maxlen: 22
                          37.148.24.0/22 maxlen: 22
                          37.148.28.0/22 maxlen: 22
                          37.148.32.0/22 maxlen: 22
                          37.148.36.0/22 maxlen: 22
                          37.148.40.0/22 maxlen: 22
                          37.148.44.0/22 maxlen: 22
                          37.148.48.0/22 maxlen: 22
                          37.148.52.0/22 maxlen: 22
                          37.148.56.0/22 maxlen: 22
                          37.148.60.0/22 maxlen: 22
                          37.148.64.0/22 maxlen: 22
                          37.148.68.0/22 maxlen: 22
                          37.148.72.0/22 maxlen: 22
                          37.148.76.0/22 maxlen: 22
                          37.148.80.0/22 maxlen: 22
                          37.148.84.0/22 maxlen: 22
                          37.148.90.0/23 maxlen: 23
                          37.148.100.0/22 maxlen: 22
                          37.148.104.0/22 maxlen: 22
                          37.148.110.0/24 maxlen: 24
                          37.148.111.0/24 maxlen: 24
                          37.148.112.0/24 maxlen: 24
                          37.148.113.0/24 maxlen: 24
                          37.148.114.0/24 maxlen: 24
                          37.148.115.0/24 maxlen: 24
                          37.148.116.0/24 maxlen: 24
                          37.148.117.0/24 maxlen: 24
                          37.148.118.0/24 maxlen: 24
                          37.148.119.0/24 maxlen: 24
                          37.148.124.0/22 maxlen: 22
                          37.202.128.0/22 maxlen: 22
                          37.202.132.0/22 maxlen: 22
                          37.202.136.0/22 maxlen: 22
                          37.202.140.0/22 maxlen: 22
                          37.202.144.0/22 maxlen: 22
                          37.202.148.0/22 maxlen: 22
                          37.202.152.0/22 maxlen: 22
                          37.202.156.0/22 maxlen: 22
                          37.202.160.0/22 maxlen: 22
                          37.202.164.0/22 maxlen: 22
                          37.202.188.0/22 maxlen: 22
                          37.202.232.0/22 maxlen: 22
                          37.202.236.0/22 maxlen: 22
                          37.202.240.0/22 maxlen: 22
                          37.202.244.0/22 maxlen: 22
                          37.202.248.0/22 maxlen: 22
                          37.202.252.0/22 maxlen: 22
                          94.182.10.0/24 maxlen: 24
                          94.182.204.0/24 maxlen: 24
                          94.182.205.0/24 maxlen: 24
                          94.182.206.0/24 maxlen: 24
                          94.182.207.0/24 maxlen: 24
                          151.243.124.0/23 maxlen: 23
                          151.243.128.0/18 maxlen: 18
                          151.243.192.0/23 maxlen: 23
                          151.243.200.0/23 maxlen: 23
                          151.243.202.0/23 maxlen: 23
                          151.243.214.0/23 maxlen: 23
                          151.243.220.0/23 maxlen: 23
                          151.243.222.0/23 maxlen: 23
                          151.243.224.0/22 maxlen: 22
                          151.243.228.0/22 maxlen: 22
                          151.243.232.0/22 maxlen: 22
                          151.243.236.0/22 maxlen: 22
                          151.243.240.0/23 maxlen: 23
                          151.243.242.0/23 maxlen: 23
                          151.243.244.0/23 maxlen: 23
                          151.243.246.0/24 maxlen: 24
                          151.243.248.0/23 maxlen: 23
                          151.243.250.0/23 maxlen: 23
                          151.244.16.0/22 maxlen: 22
                          151.244.20.0/22 maxlen: 22
                          151.244.24.0/22 maxlen: 22
                          151.244.28.0/22 maxlen: 22
                          151.245.0.0/22 maxlen: 22
                          151.245.4.0/22 maxlen: 22
                          151.245.8.0/22 maxlen: 22
                          151.245.12.0/22 maxlen: 22
                          151.245.16.0/22 maxlen: 22
                          151.245.20.0/22 maxlen: 22
                          151.245.24.0/22 maxlen: 22
                          151.245.28.0/22 maxlen: 22
                          151.245.32.0/22 maxlen: 22
                          151.245.36.0/22 maxlen: 22
                          151.245.40.0/22 maxlen: 22
                          151.245.44.0/22 maxlen: 22
                          151.245.48.0/22 maxlen: 22
                          151.245.52.0/22 maxlen: 22
                          151.245.56.0/22 maxlen: 22
                          151.245.60.0/22 maxlen: 22
                          151.245.64.0/22 maxlen: 22
                          151.245.68.0/22 maxlen: 22
                          151.245.72.0/22 maxlen: 22
                          151.245.76.0/22 maxlen: 22
                          151.245.80.0/22 maxlen: 22
                          151.245.84.0/22 maxlen: 22
                          151.245.88.0/22 maxlen: 22
                          151.245.92.0/22 maxlen: 22
                          151.245.96.0/22 maxlen: 22
                          151.245.100.0/22 maxlen: 22
                          151.245.104.0/22 maxlen: 22
                          151.245.108.0/22 maxlen: 22
                          151.245.112.0/22 maxlen: 22
                          151.245.116.0/22 maxlen: 22
                          151.245.120.0/22 maxlen: 22
                          151.245.124.0/22 maxlen: 22
                          151.245.128.0/22 maxlen: 22
                          151.245.132.0/22 maxlen: 22
                          151.245.136.0/22 maxlen: 22
                          151.245.140.0/22 maxlen: 22
                          151.245.144.0/22 maxlen: 22
                          151.245.148.0/22 maxlen: 22
                          151.245.152.0/22 maxlen: 22
                          151.245.156.0/22 maxlen: 22
                          151.245.160.0/22 maxlen: 22
                          151.245.164.0/22 maxlen: 22
                          151.245.168.0/22 maxlen: 22
                          151.245.172.0/22 maxlen: 22
                          151.245.176.0/22 maxlen: 22
                          151.245.180.0/22 maxlen: 22
                          151.245.184.0/22 maxlen: 22
                          151.245.188.0/22 maxlen: 22
                          151.245.192.0/22 maxlen: 22
                          151.245.196.0/22 maxlen: 22
                          151.245.200.0/22 maxlen: 22
                          151.245.204.0/22 maxlen: 22
                          151.245.208.0/21 maxlen: 21
                          151.245.216.0/21 maxlen: 21
                          151.245.220.0/22 maxlen: 22
                          151.245.224.0/22 maxlen: 22
                          151.245.228.0/22 maxlen: 22
                          151.245.232.0/22 maxlen: 22
                          151.245.236.0/22 maxlen: 22
                          151.245.240.0/22 maxlen: 22
                          151.245.244.0/22 maxlen: 22
                          151.245.248.0/22 maxlen: 22
                          151.245.252.0/22 maxlen: 22
                          151.247.22.0/24 maxlen: 24
                          151.247.23.0/24 maxlen: 24
                          151.247.24.0/22 maxlen: 22
                          151.247.28.0/22 maxlen: 22
                          151.247.32.0/22 maxlen: 22
                          151.247.36.0/22 maxlen: 22
                          151.247.40.0/22 maxlen: 22
                          151.247.44.0/22 maxlen: 22
                          151.247.48.0/22 maxlen: 22
                          151.247.52.0/22 maxlen: 22
                          151.247.56.0/22 maxlen: 22
                          151.247.60.0/22 maxlen: 22
                          151.247.64.0/23 maxlen: 23
                          151.247.66.0/23 maxlen: 23
                          151.247.68.0/23 maxlen: 23
                          151.247.70.0/23 maxlen: 23
                          151.247.72.0/22 maxlen: 22
                          151.247.76.0/23 maxlen: 23
                          151.247.78.0/23 maxlen: 23
                          151.247.80.0/23 maxlen: 23
                          151.247.82.0/23 maxlen: 23
                          151.247.84.0/23 maxlen: 23
                          151.247.86.0/23 maxlen: 23
                          151.247.88.0/22 maxlen: 22
                          151.247.92.0/22 maxlen: 22
                          151.247.96.0/22 maxlen: 22
                          151.247.100.0/22 maxlen: 22
                          151.247.104.0/22 maxlen: 22
                          151.247.108.0/22 maxlen: 22
                          151.247.112.0/22 maxlen: 22
                          151.247.116.0/22 maxlen: 22
                          151.247.120.0/22 maxlen: 22
                          151.247.124.0/22 maxlen: 22
                          151.247.128.0/22 maxlen: 22
                          151.247.132.0/22 maxlen: 22
                          151.247.136.0/22 maxlen: 22
                          151.247.140.0/22 maxlen: 22
                          151.247.144.0/22 maxlen: 22
                          151.247.148.0/22 maxlen: 22
                          151.247.148.0/23 maxlen: 23
                          151.247.150.0/23 maxlen: 23
                          151.247.152.0/22 maxlen: 22
                          151.247.156.0/22 maxlen: 22
                          151.247.160.0/22 maxlen: 22
                          151.247.164.0/22 maxlen: 22
                          151.247.168.0/22 maxlen: 22
                          151.247.172.0/22 maxlen: 22
                          151.247.176.0/22 maxlen: 22
                          151.247.184.0/22 maxlen: 22
                          151.247.188.0/22 maxlen: 22
                          151.247.192.0/22 maxlen: 22
                          151.247.196.0/22 maxlen: 22
                          151.247.200.0/22 maxlen: 22
                          151.247.204.0/22 maxlen: 22
                          151.247.208.0/22 maxlen: 22
                          151.247.243.0/24 maxlen: 24
                          151.247.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e4:66:6d:c2:0d:d1:e4:45:a7:18:1b:75:a6:87:fa:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Jul 24 11:00:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=90530bfb8dd81b9d93a1eb173e8fb7a57123d071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3d:e5:58:31:6a:a8:25:54:57:4a:15:70:d9:
                    e8:da:63:c3:08:b2:84:71:ff:6d:5f:ea:32:05:a1:
                    3a:f8:32:d6:d8:3e:07:53:d4:38:a3:ae:bb:59:3c:
                    11:7c:35:cf:75:3b:1c:16:6d:08:a9:cd:0a:5e:10:
                    0c:66:bf:e6:52:6d:eb:dd:0b:80:5a:aa:72:f2:9c:
                    aa:86:b9:c5:ad:d0:4f:54:36:93:03:95:74:6a:1f:
                    90:08:f2:d9:08:2d:f2:83:31:14:c8:3b:78:4c:65:
                    1f:ae:ea:a9:b7:03:a3:5f:3d:23:14:f1:92:16:30:
                    ea:90:98:29:75:0d:77:87:cb:c7:78:20:9f:9b:a5:
                    79:60:bb:ba:f7:6d:f9:05:e1:33:c9:ac:9d:9a:e8:
                    b7:22:f4:68:c6:65:68:82:e0:9a:2e:22:ba:18:33:
                    10:aa:33:6e:05:93:00:ae:6d:03:0f:d0:ef:2d:95:
                    52:46:4d:84:06:dc:b0:dd:a8:5d:c4:71:43:9a:6a:
                    a9:ac:43:ce:6f:85:88:16:6a:ba:7d:29:7b:2f:5d:
                    20:ea:73:94:f2:b5:d6:80:47:6d:9e:f6:7a:53:ef:
                    54:e8:77:2e:cb:46:70:d4:4b:0d:a0:df:ce:0c:d5:
                    b6:fa:f3:42:73:9e:63:f9:29:86:63:1f:8e:8d:f7:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:53:0B:FB:8D:D8:1B:9D:93:A1:EB:17:3E:8F:B7:A5:71:23:D0:71
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/kFML-43YG52ToesXPo-3pXEj0HE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.148.0.0-37.148.87.255
                  37.148.90.0/23
                  37.148.100.0-37.148.107.255
                  37.148.110.0-37.148.119.255
                  37.148.124.0/22
                  37.202.128.0-37.202.167.255
                  37.202.188.0/22
                  37.202.232.0-37.202.255.255
                  94.182.10.0/24
                  94.182.204.0/22
                  151.243.124.0/23
                  151.243.128.0-151.243.193.255
                  151.243.200.0/22
                  151.243.214.0/23
                  151.243.220.0-151.243.246.255
                  151.243.248.0/22
                  151.244.16.0/20
                  151.245.0.0/16
                  151.247.22.0-151.247.179.255
                  151.247.184.0-151.247.211.255
                  151.247.243.0/24
                  151.247.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:23:79:0e:a2:5e:11:92:1a:52:59:f4:9c:4b:c7:99:46:d9:
         53:a5:03:a0:07:8f:b6:d4:51:5c:30:74:ea:96:49:d8:eb:3d:
         16:b6:67:c3:bc:d1:9f:29:d0:96:c6:00:5e:f4:d2:73:9d:70:
         5f:98:db:4f:c4:60:7d:66:88:f4:08:ee:3e:03:10:cf:28:45:
         b2:3b:90:d1:4b:95:8f:87:42:ca:b2:d9:88:8f:e4:69:26:fa:
         5d:1e:75:e9:63:01:b6:da:49:2b:c1:de:ff:69:4c:41:60:e9:
         7a:1a:a1:03:cb:7c:02:8e:25:c9:a4:78:c5:a9:1b:26:67:c8:
         af:f3:48:41:d6:3e:41:27:9a:2a:80:05:d2:e4:90:5f:09:ed:
         0d:fb:e1:66:53:57:8c:c2:c6:c3:06:bb:3b:58:78:05:ce:81:
         ba:10:0f:de:d1:bf:42:2f:9b:43:2a:3a:28:84:cc:36:6d:fd:
         99:45:b8:69:13:b0:6c:12:df:3e:f6:38:0b:4f:05:f5:2d:f1:
         77:21:ea:56:46:55:eb:f4:c6:54:6b:a9:47:67:9f:1f:99:a6:
         07:f8:24:0f:c6:59:32:e8:1d:77:05:12:94:3a:84:63:b0:67:
         10:69:fd:4d:6a:35:2a:1a:67:ba:bb:6e:25:8d:c4:1d:86:c0:
         f7:53:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:18:50 2024 by rpki-client on console.sobornost.net