Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/o2kL-fYdKe1tXQ7l4DKKy5Ph_7E.roa
File:                     o2kL-fYdKe1tXQ7l4DKKy5Ph_7E.roa (raw, json)
Hash identifier:          edui4DJ8uhrPK6jmmzHthzn4amaivBJBKux5PmZSRuw=
Subject key identifier:   A3:69:0B:F9:F6:1D:29:ED:6D:5D:0E:E5:E0:32:8A:CB:93:E1:FF:B1
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       018AD1E0867033C8204AD404BEA44C37B69D
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/o2kL-fYdKe1tXQ7l4DKKy5Ph_7E.roa
Signing time:             Tue 26 Sep 2023 14:24:27 +0000
ROA not before:           Tue 26 Sep 2023 14:24:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.75.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d1:e0:86:70:33:c8:20:4a:d4:04:be:a4:4c:37:b6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Sep 26 14:24:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3690bf9f61d29ed6d5d0ee5e0328acb93e1ffb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:70:13:4e:1b:42:56:af:8d:8e:5b:2c:f8:
                    28:b8:8d:2f:07:c4:18:99:41:de:6c:17:40:cb:bd:
                    c9:b1:dd:6d:3a:ec:67:72:6d:98:f9:05:6c:f4:7f:
                    06:32:bd:1d:86:64:bc:b0:86:f7:e6:80:5f:7f:7e:
                    54:80:4e:09:5f:5c:25:42:ca:7a:3e:2b:1a:11:a9:
                    b0:33:02:3b:7d:31:6e:81:b5:01:7b:1c:a5:83:86:
                    64:07:5b:72:72:4e:1e:14:c2:f2:50:c8:8b:7f:f4:
                    5a:57:cf:94:e3:af:4f:26:63:58:6b:6e:03:78:ef:
                    f5:a1:ff:0c:a3:7b:a0:a6:d2:e0:c9:32:8d:3d:a9:
                    28:28:bf:1e:30:9a:2c:2b:37:75:dc:76:c2:8c:e0:
                    68:0e:8e:d5:07:b3:10:3e:6c:6c:a5:1e:ef:94:8e:
                    ee:67:8c:0d:cc:cc:f4:51:7f:13:de:8d:55:e1:cd:
                    e5:30:e7:54:94:3a:a0:42:9c:96:48:05:93:fa:ef:
                    0f:a6:78:b9:50:c7:0a:9c:4d:17:aa:37:ab:21:bb:
                    b9:77:04:3c:97:e9:c7:c0:a2:9f:70:36:dd:0d:33:
                    94:0e:0a:45:9f:dd:a7:f3:6d:e7:fb:fe:2e:c7:5c:
                    e0:0b:4d:c2:b8:a0:00:a0:65:75:f3:bc:61:ef:9a:
                    64:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:69:0B:F9:F6:1D:29:ED:6D:5D:0E:E5:E0:32:8A:CB:93:E1:FF:B1
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/o2kL-fYdKe1tXQ7l4DKKy5Ph_7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:09:59:d5:17:f0:38:d3:df:6e:72:e1:72:1f:ac:75:72:c5:
         cb:ed:f1:8b:36:66:fb:37:05:b3:05:20:a8:d7:46:55:78:16:
         73:55:47:c7:b6:b8:88:f3:d8:2e:ec:fa:ee:c9:60:ba:13:61:
         58:e9:1a:b6:c1:ac:a8:8e:7d:47:2b:1d:6d:54:9f:12:ab:57:
         f3:50:b9:5d:c3:29:cc:44:5a:1a:26:c4:e6:44:48:ab:47:c5:
         cc:a5:d1:5a:5a:38:ba:cd:8a:7f:20:18:2d:e6:46:0b:fe:02:
         f9:38:5c:26:01:d1:d6:3e:c1:f6:37:2a:e2:75:6a:4c:83:30:
         07:b5:98:48:28:b0:d5:fc:a6:42:91:0f:0d:7f:ea:af:7b:7f:
         3e:b1:fa:96:db:d9:df:f8:85:53:4a:73:4b:3e:8e:fa:e3:91:
         2e:85:aa:02:86:d5:c5:3f:7b:8f:fc:92:eb:ea:be:8b:46:a5:
         a7:6a:6f:3b:7d:50:0b:1c:0d:80:c3:05:24:4a:e7:20:3b:56:
         a6:dd:2e:88:92:40:1b:44:44:0a:91:12:23:22:7e:57:1e:ab:
         e2:bb:a6:03:9f:16:be:f3:e0:75:99:5a:e6:92:c4:e3:d1:37:
         76:e9:eb:71:58:86:25:cb:b0:a7:88:6d:94:a7:84:a1:47:c9:
         5b:6d:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org