Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/N6J3pPen0mrwm1sgIR2dx4U1ILE.roa
File:                     N6J3pPen0mrwm1sgIR2dx4U1ILE.roa (raw, json)
Hash identifier:          smIwKtUnsgUKZNHIM5jgFMnh/3Nk5w4GPHiVmdYgD00=
Subject key identifier:   37:A2:77:A4:F7:A7:D2:6A:F0:9B:5B:20:21:1D:9D:C7:85:35:20:B1
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       0188B906B0F6E1994872722F8FCD10CF1073
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/N6J3pPen0mrwm1sgIR2dx4U1ILE.roa
Signing time:             Wed 14 Jun 2023 08:30:03 +0000
ROA not before:           Wed 14 Jun 2023 08:30:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        77.75.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:06:b0:f6:e1:99:48:72:72:2f:8f:cd:10:cf:10:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Jun 14 08:30:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37a277a4f7a7d26af09b5b20211d9dc7853520b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:40:36:25:91:67:73:3c:77:76:21:20:f7:
                    36:1b:67:77:5e:b4:92:4e:ea:d1:bb:0c:b9:3d:6c:
                    92:4c:e2:95:b8:40:97:70:34:a0:a9:61:b0:a9:ef:
                    08:98:40:fe:43:d6:83:10:b8:7d:7f:57:5a:e1:c8:
                    80:ef:b2:ae:41:3d:c9:d4:2b:98:71:31:f2:5a:55:
                    eb:3f:8e:07:ae:75:de:be:db:90:4e:0a:ab:90:33:
                    ee:e7:57:d4:f0:46:2c:95:f4:e8:11:1a:b7:5c:0d:
                    78:e2:de:24:9b:40:bb:de:7c:5b:18:bd:d6:1b:45:
                    2b:fe:42:46:7e:f7:3d:26:25:b0:9f:78:79:66:89:
                    08:45:a3:47:26:17:8d:8e:1b:15:fe:1d:0f:5b:e2:
                    d5:6b:64:53:6b:db:7f:5d:90:1b:7b:ea:88:1f:88:
                    0a:4a:74:39:46:6e:cf:55:d7:a6:69:bc:24:98:87:
                    90:22:d0:cd:e0:77:e1:e4:2a:e7:5e:08:cf:fe:1d:
                    54:7d:0b:21:c3:90:fc:36:07:e8:09:da:c4:88:49:
                    1a:58:e6:77:62:23:0c:4b:5a:12:40:8d:f2:53:88:
                    40:01:b2:54:38:27:d6:94:92:c6:f5:9a:9f:4a:fb:
                    8e:29:23:6b:ea:bd:56:49:31:a0:aa:c0:ae:a3:07:
                    5d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A2:77:A4:F7:A7:D2:6A:F0:9B:5B:20:21:1D:9D:C7:85:35:20:B1
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/N6J3pPen0mrwm1sgIR2dx4U1ILE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:66:4a:57:d1:04:a9:f9:b5:40:2f:d1:31:2e:1d:f8:7d:6f:
         dd:c0:25:86:c0:b8:8f:8b:ae:de:29:ff:4a:16:51:b1:90:ae:
         10:01:f3:4b:07:bb:a5:36:a0:dd:7b:9c:c6:dc:db:13:75:24:
         3b:53:4f:1d:c2:ca:11:e2:94:92:5e:87:7e:2b:ac:4b:e1:80:
         e3:03:82:d8:77:3f:b8:6b:59:2f:2a:0d:48:c8:87:10:1b:bf:
         f2:40:14:6d:f9:6c:cc:af:0e:c8:dc:0d:ee:13:35:e0:b9:c0:
         9e:3f:c0:b3:b2:44:75:05:27:a0:57:84:56:d0:a1:92:13:a9:
         ab:aa:86:25:a0:3f:a7:b2:c3:d3:15:73:4a:fe:4c:4f:98:5f:
         58:54:2e:78:35:0f:5b:85:59:41:1b:a4:76:79:c3:98:b7:40:
         47:97:c1:00:54:02:14:a7:4b:0d:7e:cc:1d:fe:99:3a:a2:23:
         62:12:7f:9f:3a:1d:08:db:1c:ce:ea:d1:e3:39:de:14:ab:cc:
         e8:38:5a:8e:ee:f1:76:44:8d:38:44:fe:3c:8e:53:82:e3:e4:
         f2:fa:07:72:aa:47:27:a9:e7:e8:a6:c9:f0:d0:f5:9c:66:53:
         f6:44:c1:ca:b9:eb:9d:a9:c8:ee:90:36:5d:20:70:97:d2:ba:
         5e:df:f8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org