Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/1P3PyC_6fKZV4TVnzHErJXl4rrc.roa
File:                     1P3PyC_6fKZV4TVnzHErJXl4rrc.roa (raw, json)
Hash identifier:          42lxz9fbOHHE2MGVerx+ML1DxVWqas1GGYB4IcZh2qg=
Subject key identifier:   D4:FD:CF:C8:2F:FA:7C:A6:55:E1:35:67:CC:71:2B:25:79:78:AE:B7
Certificate issuer:       /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial:       019424453D07DC62042DBB8822273128E02D
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/1P3PyC_6fKZV4TVnzHErJXl4rrc.roa
Signing time:             Wed 01 Jan 2025 23:48:24 +0000
ROA not before:           Wed 01 Jan 2025 23:48:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15685
IP address blocks:        77.78.76.0/22 maxlen: 22
                          77.78.76.0/23 maxlen: 23
                          77.78.94.0/23 maxlen: 23
                          77.78.96.0/20 maxlen: 20
                          77.78.112.0/21 maxlen: 21
                          77.78.118.0/23 maxlen: 23
                          77.78.123.0/24 maxlen: 24
                          77.78.124.0/22 maxlen: 22
                          81.0.192.0/22 maxlen: 22
                          81.0.199.0/24 maxlen: 24
                          81.0.206.0/23 maxlen: 23
                          81.0.208.0/23 maxlen: 23
                          81.0.212.0/23 maxlen: 23
                          81.0.214.0/24 maxlen: 24
                          81.0.217.0/24 maxlen: 24
                          81.0.225.0/24 maxlen: 24
                          81.0.226.0/24 maxlen: 24
                          81.0.228.0/24 maxlen: 24
                          81.0.230.0/23 maxlen: 23
                          81.0.232.0/21 maxlen: 21
                          81.0.240.0/22 maxlen: 22
                          81.0.250.0/24 maxlen: 24
                          81.0.254.0/23 maxlen: 23
                          82.208.4.0/22 maxlen: 22
                          82.208.8.0/22 maxlen: 22
                          82.208.12.0/24 maxlen: 24
                          82.208.14.0/24 maxlen: 24
                          82.208.16.0/23 maxlen: 23
                          82.208.16.0/24 maxlen: 24
                          82.208.17.0/24 maxlen: 24
                          82.208.18.0/24 maxlen: 24
                          82.208.26.0/23 maxlen: 23
                          82.208.28.0/23 maxlen: 23
                          82.208.32.0/22 maxlen: 22
                          82.208.34.0/23 maxlen: 23
                          82.208.39.0/24 maxlen: 24
                          82.208.40.0/23 maxlen: 23
                          82.208.44.0/24 maxlen: 24
                          82.208.46.0/23 maxlen: 23
                          82.208.48.0/23 maxlen: 23
                          82.208.50.0/24 maxlen: 24
                          82.208.56.0/24 maxlen: 24
                          82.208.58.0/24 maxlen: 24
                          85.239.227.0/24 maxlen: 24
                          85.239.252.0/23 maxlen: 23
                          109.123.192.0/21 maxlen: 24
                          109.123.202.0/23 maxlen: 24
                          109.123.205.0/24 maxlen: 24
                          109.123.206.0/23 maxlen: 24
                          109.123.208.0/22 maxlen: 24
                          109.123.214.0/23 maxlen: 24
                          109.123.216.0/21 maxlen: 24
                          217.11.224.0/23 maxlen: 23
                          217.11.227.0/24 maxlen: 24
                          217.11.228.0/23 maxlen: 23
                          217.11.230.0/24 maxlen: 24
                          217.11.232.0/23 maxlen: 23
                          217.11.235.0/24 maxlen: 24
                          217.11.236.0/24 maxlen: 24
                          217.11.242.0/23 maxlen: 23
                          217.11.246.0/23 maxlen: 23
                          217.11.248.0/23 maxlen: 23
                          217.11.251.0/24 maxlen: 24
                          217.11.254.0/24 maxlen: 24
                          2001:1528::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:3d:07:dc:62:04:2d:bb:88:22:27:31:28:e0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
        Validity
            Not Before: Jan  1 23:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d4fdcfc82ffa7ca655e13567cc712b257978aeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:1b:43:bf:90:b7:3a:cd:a4:61:27:d9:ba:
                    eb:47:3e:78:86:af:a9:92:a6:5c:2e:51:e1:cc:df:
                    cb:76:e3:64:ef:1c:5e:a6:17:16:7c:29:bc:bb:75:
                    cd:8a:e9:c5:15:de:d9:7b:fd:80:fb:40:b0:bd:6d:
                    9c:fe:5a:44:85:d4:f8:66:d4:53:04:d4:11:1d:ca:
                    c0:58:39:34:d7:0b:02:63:43:c2:e7:c5:e7:fc:43:
                    9f:1d:e1:5f:33:52:27:73:83:c5:a1:65:e0:0b:f3:
                    65:6e:77:45:62:c1:96:00:90:55:e9:01:1f:cd:74:
                    0d:90:99:b2:83:30:ed:f0:88:62:49:1c:ce:99:2a:
                    35:11:9d:47:57:04:16:8b:29:54:36:ae:20:f3:79:
                    b7:0c:58:8d:8b:5a:bd:61:a1:a0:09:9f:4e:58:71:
                    80:f4:39:18:b5:89:fd:c9:c0:22:69:01:27:05:1b:
                    24:ca:e2:e9:9b:7d:33:10:f4:50:50:70:78:30:4a:
                    3d:2e:77:a4:6c:38:c8:47:86:f1:2f:96:b9:98:5c:
                    2e:b6:5c:8e:64:20:57:61:ea:d2:47:e7:41:f9:b6:
                    7d:40:f6:4c:ee:f6:db:51:1e:8c:f5:e9:6b:75:fd:
                    27:33:b7:fd:c2:35:19:25:e8:88:b1:3d:71:85:d2:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FD:CF:C8:2F:FA:7C:A6:55:E1:35:67:CC:71:2B:25:79:78:AE:B7
            X509v3 Authority Key Identifier:
                keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/1P3PyC_6fKZV4TVnzHErJXl4rrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.78.76.0/22
                  77.78.94.0-77.78.119.255
                  77.78.123.0-77.78.127.255
                  81.0.192.0/22
                  81.0.199.0/24
                  81.0.206.0-81.0.209.255
                  81.0.212.0-81.0.214.255
                  81.0.217.0/24
                  81.0.225.0-81.0.226.255
                  81.0.228.0/24
                  81.0.230.0-81.0.243.255
                  81.0.250.0/24
                  81.0.254.0/23
                  82.208.4.0-82.208.12.255
                  82.208.14.0/24
                  82.208.16.0-82.208.18.255
                  82.208.26.0-82.208.29.255
                  82.208.32.0/22
                  82.208.39.0-82.208.41.255
                  82.208.44.0/24
                  82.208.46.0-82.208.50.255
                  82.208.56.0/24
                  82.208.58.0/24
                  85.239.227.0/24
                  85.239.252.0/23
                  109.123.192.0/21
                  109.123.202.0/23
                  109.123.205.0-109.123.211.255
                  109.123.214.0-109.123.223.255
                  217.11.224.0/23
                  217.11.227.0-217.11.230.255
                  217.11.232.0/23
                  217.11.235.0-217.11.236.255
                  217.11.242.0/23
                  217.11.246.0-217.11.249.255
                  217.11.251.0/24
                  217.11.254.0/24
                IPv6:
                  2001:1528::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:15:31:8a:89:15:33:3c:44:13:f2:fd:32:e6:0c:6c:4b:2d:
         e8:45:25:9b:f9:71:3c:03:34:31:a9:91:99:ca:e6:6b:23:95:
         b1:94:12:74:cb:18:88:4e:e5:81:56:58:31:71:1d:7c:5c:fb:
         98:61:b3:ea:61:ce:71:a3:c4:c5:54:f4:9a:c9:1e:8a:d9:6e:
         2f:b3:47:68:8c:65:d9:45:8c:5a:3b:98:70:76:e6:f9:37:1f:
         fd:eb:75:85:01:4e:0d:54:de:7a:5f:12:ae:58:19:6b:ab:49:
         86:73:46:25:6d:34:7c:31:e7:e4:3c:c4:e8:2a:1a:62:6e:85:
         37:64:15:89:f6:b2:35:20:50:a8:eb:68:4c:6c:ed:ec:7d:f9:
         fc:9f:61:ad:db:f4:aa:ad:58:0c:a5:2b:c1:4a:92:1f:c7:f1:
         54:16:45:ec:c8:c0:b5:79:85:ef:51:39:43:05:9b:da:ce:0d:
         52:bf:75:7e:02:df:b2:20:99:65:22:ab:b1:b6:81:26:b2:26:
         99:48:cd:b0:c6:3b:75:54:cb:48:77:5b:3a:88:50:79:96:67:
         be:1e:22:ea:3b:0c:a3:51:69:4c:f1:5a:37:b4:3f:27:e8:49:
         83:8c:e3:81:c8:d6:2a:5e:aa:21:cc:2d:cc:1c:57:fc:c8:bc:
         5e:c3:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:26 2025 by rpki-client