Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HmAWshmXF3EpTVk1HGywAFAym4Y.roa
File:                     HmAWshmXF3EpTVk1HGywAFAym4Y.roa (raw, json)
Hash identifier:          1DZgQJ7Q94BzmH4/2ZEzQg46iu5oGkGgyuCOlA/q6PQ=
Subject key identifier:   1E:60:16:B2:19:97:17:71:29:4D:59:35:1C:6C:B0:00:50:32:9B:86
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       0189BA8668307411C350EA067146321909B6
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HmAWshmXF3EpTVk1HGywAFAym4Y.roa
Signing time:             Thu 03 Aug 2023 08:31:57 +0000
ROA not before:           Thu 03 Aug 2023 08:31:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.75.196.0/24 maxlen: 24
                          77.75.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ba:86:68:30:74:11:c3:50:ea:06:71:46:32:19:09:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Aug  3 08:31:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e6016b219971771294d59351c6cb00050329b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:31:88:c9:2d:8c:c6:c9:52:c4:72:f0:04:
                    03:5c:02:b7:a4:cb:21:da:87:23:15:29:5f:2d:9a:
                    20:a1:c2:df:2a:a6:c9:06:23:da:d5:6e:48:3c:c3:
                    9d:89:d5:a0:5c:79:57:5a:9d:b6:92:07:56:57:02:
                    4c:ee:ef:e4:d3:3d:57:30:17:ba:b6:63:37:b2:69:
                    d9:42:67:70:b9:e3:bd:a2:4f:47:e7:e9:51:9c:5c:
                    d5:1f:74:4a:4f:43:96:47:50:c7:df:3c:c1:38:d8:
                    8e:7b:d4:c5:18:cf:32:fa:03:7d:f9:a9:53:d5:e9:
                    02:ee:6d:9e:ce:75:1f:4a:a2:32:e5:8d:f5:de:dd:
                    ee:2f:82:f7:c7:3c:c8:90:f6:03:be:1a:00:47:5f:
                    72:95:58:58:9d:2e:c0:df:0b:5a:40:de:a1:ef:3b:
                    66:6f:27:62:fd:63:6c:63:ef:16:84:1a:fe:a0:e2:
                    02:26:d8:85:3b:15:61:0e:35:bb:e0:43:ca:5a:b8:
                    02:3e:08:f2:f0:67:8e:b6:02:b3:bb:39:05:99:94:
                    c4:bb:1f:7f:12:b5:ac:d0:9e:13:f8:be:db:c3:53:
                    31:cc:e0:45:1c:c4:74:30:49:91:72:2c:91:6b:49:
                    95:0d:a9:1d:aa:a9:f7:ec:c7:e6:d2:0f:17:a4:bb:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:60:16:B2:19:97:17:71:29:4D:59:35:1C:6C:B0:00:50:32:9B:86
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/HmAWshmXF3EpTVk1HGywAFAym4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:17:28:b8:6e:71:30:8a:1b:3c:95:04:58:84:7f:08:14:
         eb:06:cf:cd:81:3d:e3:f5:64:34:95:31:3a:98:72:68:8a:c0:
         1b:2e:81:f5:eb:a7:fa:30:36:17:51:cb:b9:78:b8:d8:aa:5f:
         b7:e2:c7:e9:c0:98:79:42:b9:e1:1a:42:e6:d7:a2:93:cb:eb:
         38:b4:7a:3e:20:d8:81:26:94:fc:4a:09:9d:84:ba:b6:70:b4:
         a1:df:06:96:9a:5e:bf:64:e8:cd:4b:99:93:6d:77:a7:bc:6b:
         70:e8:03:e4:93:3d:39:9d:46:d1:5a:53:b6:85:4e:3d:5b:59:
         05:92:77:bd:39:52:57:ff:a0:4c:e6:48:e4:60:f4:70:84:a6:
         d3:66:04:72:5c:ac:55:cf:8d:7c:59:54:da:b7:f5:8a:8a:97:
         b6:f5:dd:8d:05:a3:97:99:7c:05:6c:d6:d3:95:0f:6b:f6:c6:
         2c:b5:88:db:b0:92:2f:da:f6:4f:d9:7e:69:61:09:8a:1a:80:
         c2:79:e8:2d:03:91:7f:8a:ef:0f:96:fe:aa:9f:91:d9:0f:1a:
         0c:65:6b:8d:3c:14:0c:10:81:04:e1:ff:3f:3b:9b:4e:02:11:
         d0:0d:7c:ee:2c:c8:b7:d5:a9:35:24:8d:9c:a4:58:59:90:0b:
         b4:b0:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org