Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/noo_Idizh8EOv7BxEqP2IjsUe7E.roa
File:                     noo_Idizh8EOv7BxEqP2IjsUe7E.roa (raw, json)
Hash identifier:          2vOv98Quz4WuBJVhT6tBg6DPIG99jt4u0CZiEJqeiXs=
Subject key identifier:   9E:8A:3F:21:D8:B3:87:C1:0E:BF:B0:71:12:A3:F6:22:3B:14:7B:B1
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       0188B508F697B65C1A46BC9E528DB18BB630
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/noo_Idizh8EOv7BxEqP2IjsUe7E.roa
Signing time:             Tue 13 Jun 2023 13:54:03 +0000
ROA not before:           Tue 13 Jun 2023 13:54:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     23470
IP address blocks:        77.75.193.0/24 maxlen: 24
                          77.75.199.0/24 maxlen: 24
                          77.75.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b5:08:f6:97:b6:5c:1a:46:bc:9e:52:8d:b1:8b:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Jun 13 13:54:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e8a3f21d8b387c10ebfb07112a3f6223b147bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:85:d9:f9:72:44:04:dc:e4:07:8f:51:b2:
                    f9:9f:86:5b:d4:27:e6:98:ae:31:7c:17:34:3b:1d:
                    c4:a3:44:ea:8c:f1:1e:58:2d:ec:d7:a2:66:52:72:
                    2a:bc:a9:e4:e8:01:1c:00:a7:cc:b5:2d:e2:7a:7a:
                    ac:8c:21:33:2c:6a:c1:b6:4a:2b:f2:91:73:ed:73:
                    f5:e1:5e:95:17:c0:86:e6:88:9f:40:e3:e9:d1:d9:
                    51:ef:54:54:12:91:60:87:e5:84:9b:3f:30:d2:16:
                    5b:73:78:68:5f:47:b5:19:04:fc:cd:83:97:7f:21:
                    3e:bd:87:85:8a:49:b3:aa:55:48:d7:f4:4f:e7:86:
                    02:a5:9b:b6:3f:2b:e5:24:29:17:28:99:8a:2c:0b:
                    a6:43:eb:62:64:18:b0:b4:e0:25:2d:4c:87:ec:9b:
                    1a:92:e1:fd:fd:14:f6:c1:72:3e:d3:11:0b:19:c7:
                    77:58:85:55:da:40:18:fe:ae:3e:ca:19:c3:8c:28:
                    f9:39:95:8d:ae:91:68:b6:30:6f:de:81:d5:1d:bb:
                    17:a8:aa:49:0a:62:77:bc:c7:1b:a3:ec:d2:c1:bc:
                    d9:34:03:e8:6b:9f:76:85:df:43:3c:fb:91:b7:99:
                    a4:82:56:e2:ef:0f:19:58:7a:72:12:fd:1a:44:3f:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8A:3F:21:D8:B3:87:C1:0E:BF:B0:71:12:A3:F6:22:3B:14:7B:B1
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/noo_Idizh8EOv7BxEqP2IjsUe7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.193.0/24
                  77.75.195.0/24
                  77.75.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d7:05:6b:12:ac:3e:06:22:5f:67:84:82:fb:78:06:bb:d3:
         01:21:f9:26:35:a2:5c:30:5d:ce:45:29:b6:f5:56:49:93:6d:
         ed:4e:a7:f4:04:b5:c1:14:0b:f0:8f:0f:62:4c:f0:83:df:7a:
         44:22:3e:f9:92:10:66:6e:b5:55:73:fb:7b:46:9a:53:85:b4:
         14:8a:79:eb:9c:40:08:9c:7d:64:9d:52:c2:6b:8f:09:f1:ed:
         12:42:ea:f9:6e:8f:eb:b4:df:00:c6:f7:c1:93:e3:f8:5e:51:
         22:a6:dc:54:a9:43:b1:05:68:5a:5d:85:72:58:3c:00:b7:b8:
         d3:c1:88:e8:38:c7:c3:f1:9f:58:7c:f5:77:22:9a:6f:32:27:
         c4:d1:50:af:92:ad:c0:bf:d6:58:b3:4f:71:96:b4:c2:47:dd:
         c9:c3:ec:89:a8:3c:5c:94:73:5d:ad:b1:ca:f2:27:12:67:2d:
         33:91:81:dc:28:f1:2e:7b:47:a3:ba:53:99:fa:f3:12:bc:d1:
         d9:1c:de:c2:89:1b:ba:e1:f0:58:94:4c:b5:8f:8f:84:32:88:
         40:b9:4c:64:12:5b:d3:da:fb:92:12:38:05:c8:14:19:9c:96:
         fc:3c:05:e2:1f:3f:8b:61:da:a5:02:8f:8f:b1:aa:b5:9f:3e:
         95:f0:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org