Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/NExeeBS1lPZ1HY13XUjPzaXx0hs.roa
File:                     NExeeBS1lPZ1HY13XUjPzaXx0hs.roa (raw, json)
Hash identifier:          5urLj5IVNgkK1wS2Q69w5OeDY+iNkxSZ7C3QHNqsv1E=
Subject key identifier:   34:4C:5E:78:14:B5:94:F6:75:1D:8D:77:5D:48:CF:CD:A5:F1:D2:1B
Certificate issuer:       /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial:       353E2F4D
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/NExeeBS1lPZ1HY13XUjPzaXx0hs.roa
Signing time:             Tue 25 Jan 2022 17:11:47 +0000
ROA not before:           Tue 25 Jan 2022 17:11:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62246
IP address blocks:        77.105.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893267789 (0x353e2f4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
        Validity
            Not Before: Jan 25 17:11:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=344c5e7814b594f6751d8d775d48cfcda5f1d21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:da:b7:f8:89:36:be:c0:0f:56:10:38:6f:
                    d7:93:2f:78:42:69:a6:7d:de:5c:74:7d:09:62:c7:
                    4f:78:f3:87:d4:34:e5:60:7b:eb:6d:0e:71:ad:34:
                    e9:05:44:dc:f4:0f:6b:fb:ac:13:53:2e:27:04:48:
                    7f:7c:8b:11:40:6a:41:58:ae:45:8a:cc:44:f9:a6:
                    39:19:41:21:8b:ba:7e:08:c8:ad:c7:12:5d:99:7a:
                    2a:39:94:72:c4:1d:ab:01:68:96:1c:dd:9f:16:c2:
                    10:55:32:88:3f:84:47:37:ff:84:76:a1:cd:7e:24:
                    dc:8b:89:0f:d5:ae:85:2f:48:ee:10:2e:25:95:48:
                    11:72:5c:49:ea:7c:8c:6b:dd:54:d7:dd:25:c2:8d:
                    a2:0c:30:7d:ab:36:77:af:89:4d:4c:51:70:25:ac:
                    03:a2:2f:21:01:d8:e0:c4:13:ef:dd:fc:7c:74:76:
                    0b:1f:84:0c:e4:b1:88:13:86:cf:c3:b5:75:69:b9:
                    4f:61:70:52:24:85:8c:8a:ae:1a:d0:55:f2:7d:ac:
                    13:9a:da:08:8b:7d:76:b2:56:18:a6:40:b2:a7:b0:
                    f2:16:73:9c:47:4f:0e:1a:c4:0a:7d:8f:c8:3f:9c:
                    ef:a9:04:43:bb:88:f6:07:8f:e3:f6:0d:1e:8e:0a:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:5E:78:14:B5:94:F6:75:1D:8D:77:5D:48:CF:CD:A5:F1:D2:1B
            X509v3 Authority Key Identifier:
                keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/NExeeBS1lPZ1HY13XUjPzaXx0hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:cb:df:75:e7:fe:fa:7e:ac:a5:f9:fa:05:af:42:3c:a7:c0:
         c8:1d:c6:64:08:cd:03:58:75:88:71:54:19:e2:1d:1b:2d:43:
         6a:08:2b:8d:40:17:22:b8:9f:45:1f:d1:64:e1:03:f9:f1:e7:
         bb:85:5e:ac:30:de:80:1b:3c:3a:17:e2:64:54:d4:83:c1:5e:
         6f:33:59:b5:e9:aa:18:f2:c2:40:1d:65:ee:25:01:aa:79:d1:
         d3:b5:13:e5:a8:a9:50:d7:2b:4a:c3:b1:fc:f6:27:7e:41:1b:
         18:f4:20:db:eb:f4:7c:7f:03:b3:cd:7d:ec:81:9f:12:ff:98:
         b3:9d:31:5e:92:45:a3:45:b2:17:3d:d4:2d:c3:3d:12:0d:ea:
         3c:f3:61:3e:a6:62:5c:98:c1:7b:0d:ee:66:5b:fd:ca:20:06:
         e7:ff:e6:10:1d:a3:d4:68:1c:11:f9:3d:36:5f:02:0b:93:4b:
         23:02:e2:47:3b:bd:5c:47:95:1b:7d:0a:6c:34:a6:5b:ad:d0:
         3d:2c:99:65:e2:2d:5f:bd:00:6f:bd:2a:8e:07:56:0b:7c:f0:
         6c:fb:ab:27:63:61:bc:d6:bb:dc:df:4a:49:3a:02:da:d0:e7:
         73:c7:d4:0d:f3:68:12:72:54:f3:7c:bf:4c:30:eb:2c:a7:d8:
         14:80:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org