Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/i7PbseldxKF0r8BCCswEYkAUmFE.roa
File:                     i7PbseldxKF0r8BCCswEYkAUmFE.roa (raw, json)
Hash identifier:          wpsgdMrlYXm4+ZrosxpXCe4eyIHa0kN+hb4CrulkWKQ=
Subject key identifier:   8B:B3:DB:B1:E9:5D:C4:A1:74:AF:C0:42:0A:CC:04:62:40:14:98:51
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       018A83B9DB6C1C8E676C4601374C41D06B15
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/i7PbseldxKF0r8BCCswEYkAUmFE.roa
Signing time:             Mon 11 Sep 2023 10:11:50 +0000
ROA not before:           Mon 11 Sep 2023 10:11:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209242
IP address blocks:        77.75.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:b9:db:6c:1c:8e:67:6c:46:01:37:4c:41:d0:6b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Sep 11 10:11:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8bb3dbb1e95dc4a174afc0420acc046240149851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:18:df:94:e1:63:42:06:38:54:26:d1:ff:
                    7e:bb:10:4f:bd:0b:0b:39:59:45:57:fc:70:84:72:
                    d3:c4:e2:03:fb:d9:a6:40:15:31:8b:32:fd:a8:be:
                    c8:51:9d:96:01:f1:7f:f6:19:2c:35:6c:01:8c:09:
                    ce:40:54:66:d4:9e:cd:3c:e5:8f:c7:60:0e:b8:19:
                    2b:73:1e:dc:66:f4:07:6e:97:62:ec:ee:d4:99:de:
                    3f:89:4c:40:0c:c8:3d:d1:66:57:f6:e4:73:b6:6c:
                    12:f6:c7:02:ce:f0:47:2e:f3:8c:d6:3d:bc:42:60:
                    c5:7e:14:b5:e7:86:8b:ec:14:19:ea:a5:a2:f0:ef:
                    fb:8e:9e:eb:c4:59:af:4b:b7:9d:82:d4:dd:06:4d:
                    ad:d1:c0:2f:4a:8a:3f:bd:91:9a:c0:ff:db:d6:94:
                    66:1e:41:d6:3b:b3:11:d2:95:ff:c6:63:e6:e4:fd:
                    5b:dc:c4:a3:c4:70:6f:4c:bf:85:c7:24:4c:57:f3:
                    1a:08:e4:3a:cf:c4:f0:1a:75:e5:16:0b:f4:68:70:
                    68:a4:4a:43:8c:6a:b4:b5:26:ae:fc:2f:31:2a:b8:
                    57:f4:75:8d:55:c1:e5:00:56:bb:b6:d7:56:9a:b3:
                    a8:79:c1:56:fa:40:2c:45:3a:6a:05:7d:0c:49:2d:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:DB:B1:E9:5D:C4:A1:74:AF:C0:42:0A:CC:04:62:40:14:98:51
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/i7PbseldxKF0r8BCCswEYkAUmFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:b1:52:36:a5:3a:42:1e:39:fe:93:25:1d:e6:7b:29:f9:
         ea:cf:bc:38:39:5f:95:67:01:c0:b2:ad:34:b7:2e:1a:eb:76:
         f4:fb:23:e7:f7:10:e2:19:1b:a8:37:48:19:54:85:21:1a:0e:
         d3:98:aa:32:6a:65:70:52:9c:0b:a0:c1:d9:c9:cb:98:ef:a8:
         7f:d8:af:79:58:17:08:e1:c7:1f:59:f1:62:1e:ca:16:31:39:
         f5:fb:4c:b9:89:4e:b7:8d:a2:33:c3:60:7b:e6:8b:9f:26:f2:
         5a:ef:f8:30:bf:17:13:f6:ed:3a:9b:69:f8:1b:d2:e8:a4:34:
         59:a5:e2:11:f8:ce:86:ad:46:7f:c1:18:58:4e:2d:c8:49:b8:
         20:24:dd:9c:c8:48:ac:ac:dc:e6:86:ce:fe:00:74:b1:5f:97:
         bc:5f:ee:ef:48:bc:cb:02:43:0a:07:e2:95:6f:84:37:9a:91:
         55:43:4e:8d:fa:e8:a1:61:f7:db:09:4a:90:02:3a:9c:4a:57:
         4f:eb:88:d5:87:57:a3:fa:1a:4d:cf:0d:1c:ce:d0:6c:ee:c7:
         b6:4d:e0:b7:84:d1:ac:ec:06:cb:16:f8:80:ee:58:49:23:b4:
         41:b1:5c:20:94:46:8e:02:7f:69:97:06:f8:24:27:39:6a:17:
         a7:78:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org