Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/WPFrDCTxTc8uhyrfFSvRESYqK6o.roa
File:                     WPFrDCTxTc8uhyrfFSvRESYqK6o.roa (raw, json)
Hash identifier:          V+MZHklEtheVdoBqWfCudlDOWu14S3KKRxND9mFpyo0=
Subject key identifier:   58:F1:6B:0C:24:F1:4D:CF:2E:87:2A:DF:15:2B:D1:11:26:2A:2B:AA
Certificate issuer:       /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial:       3611C057
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/WPFrDCTxTc8uhyrfFSvRESYqK6o.roa
Signing time:             Tue 26 Apr 2022 13:56:09 +0000
ROA not before:           Tue 26 Apr 2022 13:56:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42031
IP address blocks:        77.105.132.0/24 maxlen: 24
                          77.105.131.0/24 maxlen: 24
                          77.105.130.0/24 maxlen: 24
                          77.105.129.0/24 maxlen: 24
                          77.105.128.0/24 maxlen: 24
                          77.105.128.0/20 maxlen: 20
                          77.105.137.0/24 maxlen: 24
                          77.105.136.0/24 maxlen: 24
                          77.105.135.0/24 maxlen: 24
                          77.105.134.0/24 maxlen: 24
                          77.105.133.0/24 maxlen: 24
                          77.105.144.0/24 maxlen: 24
                          77.105.143.0/24 maxlen: 24
                          77.105.146.0/24 maxlen: 24
                          77.105.152.0/23 maxlen: 23
                          77.105.151.0/24 maxlen: 24
                          77.105.147.0/24 maxlen: 24
                          77.105.159.0/24 maxlen: 24
                          77.105.158.0/24 maxlen: 24
                          77.105.157.0/24 maxlen: 24
                          77.105.156.0/24 maxlen: 24
                          77.105.154.0/23 maxlen: 23
                          77.105.172.0/22 maxlen: 22
                          77.105.168.0/21 maxlen: 21
                          185.225.202.0/23 maxlen: 23
                          185.225.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907133015 (0x3611c057)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
        Validity
            Not Before: Apr 26 13:56:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58f16b0c24f14dcf2e872adf152bd111262a2baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:49:20:67:fb:8a:c4:db:94:0d:69:e1:08:
                    af:7c:7c:9d:6e:b8:e9:e9:cb:73:21:0f:05:cf:91:
                    2e:25:17:0a:85:8d:ab:fb:04:af:87:58:cf:0b:f8:
                    f4:39:cb:2b:96:38:85:77:05:71:be:ad:f2:e1:91:
                    c7:4a:75:20:76:96:a4:ee:43:ed:97:ca:b3:92:7d:
                    a5:d4:af:66:75:5e:2d:4e:c3:3c:52:3c:24:ba:6a:
                    db:56:94:ba:58:18:64:a2:57:be:40:7e:72:90:c9:
                    b5:95:ea:56:c9:33:2e:f0:22:05:c8:f2:b8:67:e4:
                    a0:71:60:4e:fe:03:57:1e:42:21:fe:6c:5a:c7:ff:
                    62:6b:73:f7:b6:24:b3:ca:f5:30:f1:44:a7:a0:59:
                    f0:b3:aa:20:fc:1e:97:e4:30:dc:4f:81:1d:27:58:
                    73:8e:e8:dd:d7:1a:41:42:33:d5:e8:fc:86:e4:7c:
                    54:ad:21:84:78:2b:ca:5e:ef:26:1d:32:b3:df:3c:
                    91:a0:9e:a9:e0:38:78:c4:68:82:d8:39:41:a2:12:
                    05:19:48:b7:4d:31:00:80:64:3e:3c:9e:9e:0b:af:
                    a0:f1:ab:74:ea:a8:7b:08:74:5d:3f:2b:eb:64:d4:
                    f6:02:ec:63:0a:b2:41:8c:3d:fc:48:98:74:b3:5f:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F1:6B:0C:24:F1:4D:CF:2E:87:2A:DF:15:2B:D1:11:26:2A:2B:AA
            X509v3 Authority Key Identifier:
                keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/WPFrDCTxTc8uhyrfFSvRESYqK6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.128.0-77.105.144.255
                  77.105.146.0/23
                  77.105.151.0-77.105.159.255
                  77.105.168.0/21
                  185.225.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:6a:2d:66:99:2a:bd:b9:e0:2d:1e:fd:fc:11:6c:11:cd:
         08:96:ad:7f:8f:5f:d6:5d:04:1f:40:b3:6b:1b:27:46:c5:07:
         75:c9:42:ca:fd:f9:72:2a:6c:c4:d5:6d:7b:a4:49:47:47:f4:
         0e:f1:78:94:a0:13:73:e6:73:a5:d0:32:9b:b8:fe:c8:d3:a7:
         6b:06:43:bf:15:a5:ea:0a:f0:df:14:df:57:67:9d:73:09:91:
         07:5f:22:f5:e9:58:ca:e0:d8:70:da:cb:38:af:90:68:c1:e0:
         54:54:3f:4c:1b:90:cf:aa:d6:15:90:5b:7a:b5:c3:df:44:ab:
         3f:9b:d3:ba:17:80:1c:f1:99:38:77:b3:68:85:db:23:ec:e8:
         af:d7:09:ca:82:e9:27:dd:36:8a:72:77:43:65:84:06:01:ff:
         66:64:87:0d:34:90:c0:f5:1b:b6:c1:27:18:04:39:40:4e:83:
         d6:69:cc:64:f7:75:d4:b5:9b:86:76:6f:d9:eb:44:16:57:bd:
         d4:61:a5:64:5d:2f:e0:cf:0e:83:fc:af:08:93:b0:53:df:ee:
         d0:e0:a5:e1:da:53:15:d3:b2:0b:8c:88:39:25:a1:7c:ed:b6:
         4a:b5:41:30:9d:97:d0:cd:24:c9:75:91:7e:69:c1:48:02:38:
         9b:a7:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org