Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/Obfrc8v6dEFGQ7AawtimQ35a5RE.roa
File:                     Obfrc8v6dEFGQ7AawtimQ35a5RE.roa (raw, json)
Hash identifier:          uc9ErdPzOY2Bm4rwSrqZ+I27rdJg/4Wg0LANwfHzDP0=
Subject key identifier:   39:B7:EB:73:CB:FA:74:41:46:43:B0:1A:C2:D8:A6:43:7E:5A:E5:11
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       01958A54384538BB6B82AD2E0920D78E4950
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/Obfrc8v6dEFGQ7AawtimQ35a5RE.roa
Signing time:             Wed 12 Mar 2025 12:28:49 +0000
ROA not before:           Wed 12 Mar 2025 12:28:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42337
IP address blocks:        77.237.64.0/19 maxlen: 19
                          77.237.65.0/24 maxlen: 24
                          77.237.68.0/24 maxlen: 24
                          77.237.69.0/24 maxlen: 24
                          77.237.70.0/24 maxlen: 24
                          77.237.72.0/24 maxlen: 24
                          77.237.74.0/24 maxlen: 24
                          77.237.75.0/24 maxlen: 24
                          77.237.76.0/24 maxlen: 24
                          77.237.77.0/24 maxlen: 24
                          77.237.78.0/23 maxlen: 23
                          77.237.78.0/24 maxlen: 24
                          77.237.79.0/24 maxlen: 24
                          77.237.80.0/20 maxlen: 20
                          77.237.80.0/24 maxlen: 24
                          77.237.81.0/24 maxlen: 24
                          77.237.82.0/24 maxlen: 24
                          77.237.83.0/24 maxlen: 24
                          77.237.84.0/24 maxlen: 24
                          77.237.85.0/24 maxlen: 24
                          77.237.87.0/24 maxlen: 24
                          77.237.88.0/24 maxlen: 24
                          77.237.89.0/24 maxlen: 24
                          77.237.91.0/24 maxlen: 24
                          77.237.94.0/24 maxlen: 24
                          77.237.95.0/24 maxlen: 24
                          92.242.192.0/19 maxlen: 19
                          92.242.192.0/23 maxlen: 23
                          92.242.192.0/24 maxlen: 24
                          92.242.193.0/24 maxlen: 24
                          92.242.194.0/24 maxlen: 24
                          92.242.195.0/24 maxlen: 24
                          92.242.198.0/24 maxlen: 24
                          92.242.200.0/21 maxlen: 21
                          92.242.202.0/23 maxlen: 23
                          92.242.202.0/24 maxlen: 24
                          92.242.203.0/24 maxlen: 24
                          92.242.204.0/24 maxlen: 24
                          92.242.205.0/24 maxlen: 24
                          92.242.206.0/24 maxlen: 24
                          92.242.207.0/24 maxlen: 24
                          92.242.208.0/20 maxlen: 20
                          92.242.208.0/24 maxlen: 24
                          92.242.210.0/23 maxlen: 23
                          92.242.210.0/24 maxlen: 24
                          92.242.211.0/24 maxlen: 24
                          92.242.212.0/22 maxlen: 22
                          92.242.214.0/24 maxlen: 24
                          92.242.215.0/24 maxlen: 24
                          92.242.220.0/24 maxlen: 24
                          92.242.223.0/24 maxlen: 24
                          185.14.160.0/22 maxlen: 22
                          185.14.160.0/24 maxlen: 24
                          185.225.240.0/24 maxlen: 24
                          185.225.241.0/24 maxlen: 24
                          185.225.242.0/23 maxlen: 23
                          185.225.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8a:54:38:45:38:bb:6b:82:ad:2e:09:20:d7:8e:49:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: Mar 12 12:28:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=39b7eb73cbfa74414643b01ac2d8a6437e5ae511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:8f:30:03:cc:7d:b0:0d:6d:41:27:a4:c1:
                    aa:41:32:0e:14:49:67:50:da:e3:09:48:1d:0b:88:
                    8f:66:05:dd:e9:f6:0c:4d:e3:c9:01:45:7e:d8:c2:
                    42:d1:d4:6f:f1:1c:3f:7f:21:16:5a:26:ec:b9:dd:
                    b6:b2:f2:d7:85:b6:7b:f8:47:0e:f7:9f:85:75:e1:
                    29:ba:16:1d:31:4d:2d:4c:b6:98:42:9d:b9:6b:d3:
                    82:de:7a:29:23:ab:84:96:da:80:0e:03:01:8c:f0:
                    03:05:b0:d6:34:36:c2:22:0b:2e:8b:fd:79:39:3f:
                    32:d9:f7:62:32:1a:11:4f:cd:13:55:5a:d6:7a:8f:
                    b2:72:6d:cf:d9:71:07:c7:92:3e:3f:db:fd:5b:72:
                    8d:b9:ad:ea:f5:ae:9a:21:9e:43:cf:6c:3c:03:5e:
                    e7:3e:a9:f4:41:1c:e7:a9:26:54:8e:65:25:a8:9c:
                    22:df:a0:dd:18:c6:e1:d1:f1:b4:cc:0f:88:73:ee:
                    42:16:1e:a8:b1:6d:7e:04:3c:8a:2a:ee:4d:c3:fa:
                    68:00:88:53:a5:a7:8d:bc:be:c9:51:dc:43:21:7a:
                    e3:f3:c8:31:ec:10:e1:d9:69:2c:4e:00:b6:66:aa:
                    2d:17:67:0e:3f:66:e4:02:c6:87:4e:bd:6f:5a:63:
                    32:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B7:EB:73:CB:FA:74:41:46:43:B0:1A:C2:D8:A6:43:7E:5A:E5:11
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/Obfrc8v6dEFGQ7AawtimQ35a5RE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.237.64.0/19
                  92.242.192.0/19
                  185.14.160.0/22
                  185.225.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:1f:80:b6:f3:7c:9b:9d:2e:81:8a:28:af:87:c6:18:b5:4a:
         82:48:69:b6:81:9e:86:c4:57:b1:41:bb:04:f8:30:0f:fa:ff:
         95:b5:45:54:9b:5e:5a:56:e0:65:f1:04:f0:b3:55:23:9a:af:
         19:39:8f:c9:4a:13:a4:b1:b1:c9:ba:44:05:0d:e3:cc:e6:cc:
         98:c0:d5:31:15:2e:15:f5:fa:2c:5a:18:ea:63:c2:d2:34:d5:
         c6:e0:e5:a6:bf:41:a2:56:80:d3:bb:a7:85:63:34:13:c2:9f:
         a6:31:a4:44:1c:e4:5c:c8:4b:af:4b:b3:b8:bb:16:e9:d1:de:
         29:36:d1:dc:00:6e:34:96:a3:5a:33:61:cb:dd:ac:e4:86:0d:
         ce:9e:95:b2:84:01:56:3a:3a:eb:1b:35:92:03:60:e8:e5:99:
         c9:55:8b:3a:c1:be:59:93:2f:85:46:94:17:63:5c:36:57:eb:
         8e:3c:70:7a:07:8f:aa:21:64:59:c5:a1:a7:21:70:e1:bc:57:
         58:54:f1:fe:d3:fd:d7:14:e4:41:ad:d2:48:44:54:f4:55:d9:
         83:0f:a0:69:34:48:ae:96:7c:fc:84:b2:45:4e:96:d2:bc:a2:
         c2:5c:6e:5d:e6:65:39:70:34:07:74:6d:dc:6c:37:72:bc:fc:
         30:b6:21:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net