Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8tsA0xjaN3tSzMNP_mOgpffOWhk.roa
File:                     8tsA0xjaN3tSzMNP_mOgpffOWhk.roa (raw, json)
Hash identifier:          q/hunYM9yx1XqNUEvpYxr+2DH1p+xF5eF382cJ6Xeno=
Subject key identifier:   F2:DB:00:D3:18:DA:37:7B:52:CC:C3:4F:FE:63:A0:A5:F7:CE:5A:19
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       018A83B9DB18CB494B7E509C14E315F8B4F4
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8tsA0xjaN3tSzMNP_mOgpffOWhk.roa
Signing time:             Mon 11 Sep 2023 10:11:50 +0000
ROA not before:           Mon 11 Sep 2023 10:11:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.75.196.0/24 maxlen: 24
                          77.75.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:b9:db:18:cb:49:4b:7e:50:9c:14:e3:15:f8:b4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Sep 11 10:11:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f2db00d318da377b52ccc34ffe63a0a5f7ce5a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:1d:c7:0a:73:c2:ac:91:9b:48:43:34:79:
                    a0:3c:7c:91:45:07:ef:e1:e9:2d:0d:ae:0c:a7:5f:
                    f8:c3:75:95:cd:d1:df:23:94:3f:09:a2:ef:78:90:
                    4b:e4:16:66:d2:e2:30:b6:f0:0e:91:04:77:33:2e:
                    a7:26:db:3c:3f:c3:3f:6d:96:51:43:d9:0b:f8:61:
                    e2:0e:6e:b2:d1:66:d8:c2:2b:7c:e7:b9:e6:f6:5f:
                    15:59:85:ea:0c:5a:04:ce:1f:3b:12:55:b7:27:22:
                    00:95:58:ad:9e:2f:27:4a:af:a8:d9:1b:1b:6f:2d:
                    df:68:e3:2b:1c:47:1b:60:15:73:5a:4c:6e:14:71:
                    7c:1d:61:e0:dd:01:e0:3c:e4:4e:50:c9:1a:40:0c:
                    ad:ee:11:eb:7d:66:89:56:e2:15:42:a1:81:b5:82:
                    4d:85:01:b3:f5:49:64:a7:ab:17:11:f4:dc:69:b4:
                    cd:5b:3f:9e:de:80:06:f7:ca:bf:ef:8b:4f:48:45:
                    43:47:cc:fa:40:0f:37:27:ef:ef:16:58:1e:f3:66:
                    44:2c:e2:ad:7e:a1:ef:d4:de:49:40:b5:e7:e5:ca:
                    2e:7e:39:ac:b0:a2:1b:6a:78:3c:c3:d6:44:39:24:
                    86:ec:ac:b8:ad:e1:cd:7a:9f:9f:42:cc:dc:73:42:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DB:00:D3:18:DA:37:7B:52:CC:C3:4F:FE:63:A0:A5:F7:CE:5A:19
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/8tsA0xjaN3tSzMNP_mOgpffOWhk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:61:a9:e4:59:ac:97:bd:8c:32:4f:e2:51:6d:4b:78:a1:3e:
         4c:87:a3:f7:c4:6f:a5:11:e5:cf:be:ed:92:78:a4:6c:b8:0d:
         7e:32:8f:05:70:8d:09:12:a7:da:ce:69:10:99:42:36:77:c8:
         a2:cb:f4:be:64:5e:80:52:00:38:1a:6f:fb:a6:31:50:b0:ec:
         35:b3:40:48:5a:45:bd:8f:29:1b:73:4d:87:a3:bf:71:23:da:
         5d:10:4e:27:1b:4c:4f:1d:3d:ae:c1:0a:98:2e:bd:01:dc:18:
         25:10:c6:a1:22:db:3c:5f:56:04:c8:a2:e6:81:6c:13:96:5d:
         d9:32:9e:0e:ae:7c:56:2a:47:cf:7b:8e:60:a6:5a:36:58:b0:
         8d:4c:1a:12:11:2c:ca:e4:19:6c:96:e5:b2:0b:2c:44:6f:63:
         99:ba:b8:c5:37:eb:ab:5d:d0:e4:92:26:90:8b:10:b6:54:db:
         99:44:fc:d5:88:bc:bf:64:f8:bf:f2:e3:fa:4e:0a:61:b3:4c:
         7b:18:7e:cd:0d:89:3a:70:7f:d7:64:62:fe:5d:c0:35:11:7c:
         f9:99:07:ce:7b:7e:99:d6:7e:9e:ef:ea:90:5e:35:e9:dd:a6:
         42:bf:68:e6:65:5e:63:6b:2a:df:84:51:d1:b2:39:5d:98:bb:
         20:55:ea:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org