Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4de5c9-d905-49c1-9ab8-b8195cd8b0ae/1/ie_CYWYwPI2NOFSN6zFZcR68nAk.roa
File:                     ie_CYWYwPI2NOFSN6zFZcR68nAk.roa (raw, json)
Hash identifier:          hCHuD13U8HDQVtXLYJBrSEfuGhd6JvIYgF2ekJreX3Q=
Subject key identifier:   89:EF:C2:61:66:30:3C:8D:8D:38:54:8D:EB:31:59:71:1E:BC:9C:09
Certificate issuer:       /CN=55dacb97c17ff6897b171c9c88232e61fd28e891
Certificate serial:       02E96427
Authority key identifier: 55:DA:CB:97:C1:7F:F6:89:7B:17:1C:9C:88:23:2E:61:FD:28:E8:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdrLl8F_9ol7FxyciCMuYf0o6JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4de5c9-d905-49c1-9ab8-b8195cd8b0ae/1/ie_CYWYwPI2NOFSN6zFZcR68nAk.roa
Signing time:             Sat 01 Jan 2022 07:55:48 +0000
ROA not before:           Sat 01 Jan 2022 07:55:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200738
IP address blocks:        77.83.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48849959 (0x2e96427)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55dacb97c17ff6897b171c9c88232e61fd28e891
        Validity
            Not Before: Jan  1 07:55:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89efc26166303c8d8d38548deb3159711ebc9c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:fa:02:4e:9c:af:8d:cc:3e:48:df:aa:05:
                    63:df:c0:15:5d:e2:00:ca:76:83:a5:d3:a6:71:19:
                    d6:38:62:3c:2f:78:31:48:ee:97:48:db:ec:6b:ff:
                    e8:d4:17:c0:4a:d1:0c:3c:21:0a:1d:55:ef:2a:c8:
                    db:e3:ce:11:46:d6:36:2d:c9:75:f8:60:fd:fe:20:
                    41:1b:85:d7:4d:02:f5:4f:65:68:b6:f2:75:ed:2e:
                    29:77:dc:7b:6f:32:04:22:2e:b2:de:3c:80:d4:bf:
                    9d:5a:ee:b7:94:ac:04:46:37:8a:4d:4c:18:d8:4c:
                    61:a1:ae:62:f5:f7:08:97:fa:90:7b:ff:de:65:02:
                    54:48:a3:ab:fe:e0:6b:26:13:a9:bb:03:e6:52:ff:
                    6d:14:30:63:c1:66:0b:60:8e:17:7f:4f:4d:d5:0e:
                    91:58:2e:88:48:c6:2d:15:71:60:c9:44:8c:95:af:
                    97:7e:0a:e9:0f:9a:81:42:ec:fa:6f:0a:f8:f1:e2:
                    ca:13:ad:a6:26:34:24:94:76:d3:0a:0a:86:36:49:
                    80:af:49:38:38:f2:6c:ac:6d:61:78:0e:59:fb:b2:
                    73:7f:90:77:09:8d:52:b3:41:99:30:83:45:8d:a3:
                    b9:9d:0c:d7:fd:f4:a0:ef:ce:1c:7b:c2:b3:1f:54:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EF:C2:61:66:30:3C:8D:8D:38:54:8D:EB:31:59:71:1E:BC:9C:09
            X509v3 Authority Key Identifier:
                keyid:55:DA:CB:97:C1:7F:F6:89:7B:17:1C:9C:88:23:2E:61:FD:28:E8:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdrLl8F_9ol7FxyciCMuYf0o6JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4de5c9-d905-49c1-9ab8-b8195cd8b0ae/1/ie_CYWYwPI2NOFSN6zFZcR68nAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4de5c9-d905-49c1-9ab8-b8195cd8b0ae/1/VdrLl8F_9ol7FxyciCMuYf0o6JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:e8:bb:db:14:43:ad:bf:12:55:c3:76:03:99:53:97:b7:ec:
         98:ab:5b:71:7a:46:77:ff:f0:86:01:f9:63:5b:0e:90:c5:7e:
         c4:75:60:5c:84:8c:b8:d0:be:17:99:97:b6:95:38:a5:fe:55:
         3b:e0:e0:13:da:24:56:70:29:cf:f7:46:cb:cc:e9:9f:d6:2f:
         74:e2:e8:b9:cc:dd:c4:5b:4e:8c:20:64:b4:38:24:74:f1:1a:
         b3:63:04:27:3a:cd:61:7a:1f:2b:f0:bd:dc:5d:34:03:33:14:
         10:8e:de:0f:7b:d4:77:c6:1b:c2:af:5a:2a:d6:2c:02:c3:a0:
         06:c4:38:1c:21:a5:96:b2:49:1d:52:1d:68:d2:c3:33:59:f5:
         4e:55:f8:a0:57:70:82:2f:35:23:e7:1c:63:e3:3e:c5:96:d0:
         54:7a:e3:0b:10:c5:60:83:96:68:33:a0:f9:2c:52:4b:d0:d6:
         e1:34:af:d4:5f:5c:0a:06:bf:55:fa:47:54:ae:80:63:cb:20:
         7f:81:24:5d:e9:68:91:09:df:b8:92:75:82:b5:95:44:d9:7f:
         b2:f2:a7:a9:c9:f2:01:f8:38:95:5c:86:c7:d7:5e:b0:88:de:
         b4:2f:df:7a:34:cc:af:80:95:ca:09:be:b9:a2:e9:2a:1e:3a:
         81:51:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:08 2024 by rpki-client on console-ams.rpki-client.org