Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Atsf8ZcIeBNtj5w-Op3Us5Vpigo.roa
File:                     Atsf8ZcIeBNtj5w-Op3Us5Vpigo.roa (raw, json)
Hash identifier:          DsIlG0fbsKrCEFX7UEQL/2lGl17oZ4hC3lmjtB+PhKg=
Subject key identifier:   02:DB:1F:F1:97:08:78:13:6D:8F:9C:3E:3A:9D:D4:B3:95:69:8A:0A
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       018943DF357E3C66C8781DB36C73B4270D04
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Atsf8ZcIeBNtj5w-Op3Us5Vpigo.roa
Signing time:             Tue 11 Jul 2023 07:34:08 +0000
ROA not before:           Tue 11 Jul 2023 07:34:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     23470
IP address blocks:        77.75.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:43:df:35:7e:3c:66:c8:78:1d:b3:6c:73:b4:27:0d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Jul 11 07:34:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02db1ff1970878136d8f9c3e3a9dd4b395698a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:2d:5d:89:a3:73:c7:27:5b:b9:60:3d:f6:
                    0e:e9:96:01:cc:80:4b:43:9f:f2:bf:1d:d2:64:c2:
                    c1:07:37:75:94:1f:09:cf:bf:83:29:39:f2:40:3e:
                    c6:22:d5:64:21:db:3a:cd:72:57:ae:17:c0:df:fc:
                    51:10:7d:d8:6c:5e:6b:8a:87:54:04:4e:88:16:dc:
                    81:04:68:e7:8a:3f:04:05:e5:9f:2c:c7:f0:52:54:
                    da:50:11:e6:5d:d6:5d:36:10:05:82:36:3f:1c:bc:
                    1b:1a:c0:15:d6:84:5a:46:a6:f6:f6:77:19:d6:64:
                    b7:1a:39:25:b5:2d:71:1e:8c:20:23:1a:0d:da:0e:
                    1c:bd:0b:1f:42:49:eb:21:61:11:a2:6b:e2:4f:ce:
                    65:52:50:55:8b:53:1a:a7:b1:81:f2:ef:f3:df:4a:
                    f8:9f:bc:d1:26:71:06:a2:1a:1d:0b:17:3f:e3:0c:
                    c7:68:e8:9b:92:cb:95:08:34:bd:0a:f3:e2:db:d7:
                    5b:20:5a:a5:d8:3a:8e:47:b6:f0:ed:17:91:83:75:
                    f9:55:f7:29:30:ea:b2:1d:0e:d8:b3:9b:20:1f:1f:
                    31:36:21:2f:79:39:c5:17:68:b6:7a:ff:d3:8e:9e:
                    3e:64:b4:eb:5b:b5:54:cb:96:3d:42:d4:09:8a:85:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DB:1F:F1:97:08:78:13:6D:8F:9C:3E:3A:9D:D4:B3:95:69:8A:0A
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/Atsf8ZcIeBNtj5w-Op3Us5Vpigo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fa:b1:60:65:5c:7e:d6:1c:6e:5c:33:7b:23:93:b1:4a:df:
         fa:6c:ed:49:3e:17:ac:ef:d3:e9:3f:04:21:e1:81:b5:39:d7:
         d0:39:65:4b:ff:d5:25:b9:b2:16:c6:85:69:d4:b7:44:74:bf:
         eb:ed:b1:a5:14:81:b5:d4:f4:d7:2f:72:da:65:f8:a0:1f:4c:
         31:35:b2:ee:02:59:d7:25:c6:c0:2d:c6:10:d7:bf:da:8a:ed:
         a1:2e:ff:5a:86:2e:bc:13:f6:6b:53:63:b5:35:ba:0d:53:ea:
         91:d7:b8:16:6f:60:7a:4e:ea:85:cd:35:39:d6:94:6e:9b:dd:
         9c:e4:da:65:5f:c6:87:23:2b:4a:fc:49:8a:89:93:a5:6b:44:
         34:98:fa:c9:f0:c1:e5:95:a5:49:64:19:2c:8a:a2:3d:52:d5:
         88:5c:4c:a7:53:8e:9c:36:62:6d:a0:0d:3d:49:84:6e:28:4d:
         d7:11:ab:6d:25:f1:7a:b6:74:ce:ef:c9:96:37:af:59:44:58:
         d5:9c:d8:dd:11:be:4a:3c:d7:2b:0c:03:db:31:54:84:de:9b:
         bb:9c:12:66:7a:35:14:c2:d7:c6:11:1f:da:c4:ed:94:4c:49:
         d8:29:75:3d:6c:cf:a9:98:37:7c:76:2b:d2:c9:68:0c:43:9b:
         a6:0b:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org