Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/1-unmW-e0BNh6uEmmIeFlxk2TqAQ.roa
File:                     1-unmW-e0BNh6uEmmIeFlxk2TqAQ.roa (raw, json)
Hash identifier:          b4nLB0rMTN9MOyb0703nSOs3ji2XJN7Oqv/KMkH/BtE=
Subject key identifier:   FA:E9:E6:5B:E7:B4:04:D8:7A:B8:49:A6:21:E1:65:C6:4D:93:A8:04
Certificate issuer:       /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial:       364695BC
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/1-unmW-e0BNh6uEmmIeFlxk2TqAQ.roa
Signing time:             Thu 19 May 2022 09:47:31 +0000
ROA not before:           Thu 19 May 2022 09:47:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42031
IP address blocks:        77.105.132.0/24 maxlen: 24
                          77.105.131.0/24 maxlen: 24
                          77.105.130.0/24 maxlen: 24
                          77.105.129.0/24 maxlen: 24
                          77.105.128.0/24 maxlen: 24
                          77.105.128.0/20 maxlen: 20
                          77.105.137.0/24 maxlen: 24
                          77.105.136.0/24 maxlen: 24
                          77.105.135.0/24 maxlen: 24
                          77.105.134.0/24 maxlen: 24
                          77.105.133.0/24 maxlen: 24
                          77.105.144.0/24 maxlen: 24
                          77.105.143.0/24 maxlen: 24
                          77.105.142.0/24 maxlen: 24
                          77.105.146.0/24 maxlen: 24
                          77.105.152.0/23 maxlen: 23
                          77.105.151.0/24 maxlen: 24
                          77.105.147.0/24 maxlen: 24
                          77.105.159.0/24 maxlen: 24
                          77.105.158.0/24 maxlen: 24
                          77.105.157.0/24 maxlen: 24
                          77.105.156.0/24 maxlen: 24
                          77.105.154.0/23 maxlen: 23
                          77.105.172.0/22 maxlen: 22
                          77.105.168.0/21 maxlen: 21
                          185.225.202.0/23 maxlen: 23
                          185.225.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910595516 (0x364695bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
        Validity
            Not Before: May 19 09:47:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fae9e65be7b404d87ab849a621e165c64d93a804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:31:7a:88:d1:be:1e:d7:e6:bf:70:b4:e9:
                    bd:a3:46:93:6a:ea:f2:5a:51:92:7a:4e:72:0d:75:
                    3c:5d:cd:43:c9:77:c0:67:61:6d:d4:7f:66:c0:d0:
                    a6:e8:37:bf:11:a7:df:6d:d2:af:a5:83:cf:6f:82:
                    b2:73:58:6f:c7:25:1b:11:ae:da:e0:27:ad:83:f8:
                    33:0a:71:b8:94:0e:1c:37:aa:59:9e:71:a6:c9:ee:
                    39:ff:ab:fd:8d:4d:b6:e2:27:fa:d2:44:ca:da:0d:
                    3e:f7:04:5f:8a:70:b6:f4:d3:1f:8f:ab:42:ba:29:
                    dd:9a:28:5e:32:3b:eb:85:c5:25:24:04:ea:40:05:
                    22:b9:50:6d:ac:83:20:f4:c0:cf:17:3b:a6:46:3b:
                    9e:2d:f9:b0:89:b1:2a:f1:3e:f9:c8:12:8a:7b:04:
                    5f:18:77:74:ec:47:c2:43:4e:9c:31:90:9d:97:ec:
                    ed:66:e0:cc:d1:59:27:f0:bb:e1:5e:aa:f4:d0:8f:
                    0c:b0:c7:2e:ae:f7:ae:7c:6b:9d:ef:26:2f:d6:57:
                    ef:d7:35:6b:bc:04:b0:87:6a:fa:17:80:3c:3a:b9:
                    9c:a6:eb:d4:e6:e4:24:6a:8d:1d:ca:60:11:eb:f8:
                    38:5f:63:28:29:b0:3c:89:c8:ec:39:df:26:18:e2:
                    23:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E9:E6:5B:E7:B4:04:D8:7A:B8:49:A6:21:E1:65:C6:4D:93:A8:04
            X509v3 Authority Key Identifier:
                keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/1-unmW-e0BNh6uEmmIeFlxk2TqAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.128.0-77.105.144.255
                  77.105.146.0/23
                  77.105.151.0-77.105.159.255
                  77.105.168.0/21
                  185.225.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:ad:74:ac:69:47:89:ec:f3:2b:d2:5e:d7:66:d6:52:83:cb:
         aa:4d:8f:96:59:f1:9e:a9:94:b3:08:e1:71:fe:cf:a3:ec:97:
         35:c0:d7:bd:e5:5c:4d:c5:b4:2b:20:1c:ab:79:5e:5a:51:eb:
         23:77:89:07:c9:8a:5a:1b:cd:cc:04:08:1d:ad:c1:7e:b4:2a:
         d6:1f:90:3e:2c:aa:0f:45:e5:55:c2:f0:4a:c0:60:65:c9:80:
         7f:6f:ef:75:ef:48:1e:e4:6e:cd:fd:30:ec:c5:14:a7:66:bb:
         cd:3a:95:05:15:92:3e:31:57:92:ff:be:2d:56:ff:22:41:95:
         fe:67:bb:c2:cd:55:5d:ae:42:5c:6a:fd:19:59:45:01:0c:81:
         d3:f3:6b:34:ea:00:f1:e9:1b:57:45:f7:80:78:af:e8:35:31:
         18:5b:3d:9c:b4:fd:e9:92:67:ba:43:a5:1b:b2:3e:29:be:9e:
         4e:6e:6f:14:55:32:7d:30:5e:d8:2d:19:9e:db:34:cf:84:8a:
         9d:e2:66:8c:02:a5:18:45:b6:40:97:5b:d0:73:f2:da:95:69:
         29:40:75:e4:54:d7:00:d1:bf:36:cf:1d:73:cc:b2:53:6f:a9:
         15:8c:b0:5e:39:41:a8:bf:31:a4:bd:84:3e:f3:1a:c5:03:5a:
         aa:60:b7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org