Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa
File:                     6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa (raw, json)
Hash identifier:          N5jGzrk7sta0axX9QvqTjHgaFwV4arIObuPbt2KJNnM=
Subject key identifier:   EA:6E:22:05:4D:6E:57:D3:A3:B5:3F:B2:23:49:07:0F:28:B8:80:B8
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       01942067F9C57C79862CAE732E2A0E8B0A5E
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa
Signing time:             Wed 01 Jan 2025 05:47:52 +0000
ROA not before:           Wed 01 Jan 2025 05:47:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215730
IP address blocks:        77.91.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:f9:c5:7c:79:86:2c:ae:73:2e:2a:0e:8b:0a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Jan  1 05:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ea6e22054d6e57d3a3b53fb22349070f28b880b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:86:08:8e:6e:37:79:e8:99:05:d4:ad:2b:
                    99:12:8f:53:1f:50:9c:0a:45:20:dc:8b:15:96:48:
                    d8:e9:c0:10:c6:ca:a5:2f:f9:f0:52:17:0f:22:cc:
                    9e:b3:4e:93:03:57:f4:41:07:65:4e:79:84:80:95:
                    2a:9a:cd:07:04:df:50:de:33:c8:5b:37:e3:ef:d5:
                    59:93:4e:a6:94:ee:d2:52:f7:45:dd:8f:40:ed:e6:
                    3d:e5:d0:93:9d:b5:b7:5a:d7:b9:57:4e:55:ba:cc:
                    57:93:40:4c:1a:0b:3f:0f:c9:3c:b4:51:f6:3e:8c:
                    78:f6:19:17:93:72:7a:03:90:35:e3:56:56:62:cb:
                    f0:5b:93:4c:95:a8:ea:1c:87:da:2b:df:be:1a:13:
                    0c:79:71:8c:64:39:77:d7:0c:2c:17:4b:b4:6a:f5:
                    01:24:3e:33:61:81:77:97:33:a7:23:c8:4e:f5:d3:
                    dd:e0:ba:62:58:7c:f7:9c:99:0b:31:46:8a:60:53:
                    59:ad:ab:b4:66:4b:e9:9c:4b:f2:3a:ef:3b:77:bd:
                    f1:98:65:5b:1e:d2:ad:9b:50:90:40:52:20:87:e9:
                    7f:2e:df:f5:32:fc:77:5a:d8:b5:fe:3d:1c:b9:5f:
                    42:07:f5:09:13:b1:4a:a0:94:24:bd:a5:18:ef:28:
                    b4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6E:22:05:4D:6E:57:D3:A3:B5:3F:B2:23:49:07:0F:28:B8:80:B8
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.91.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:68:ab:61:fa:8f:31:85:2e:68:d7:39:87:04:28:df:27:
         db:b8:2f:2c:e5:37:ef:c2:1b:c8:50:77:a1:fa:f5:b4:82:76:
         52:f9:8a:f0:97:a1:69:2f:e4:8f:b4:48:8a:85:19:fc:69:bf:
         8f:3e:e8:a9:5a:06:6a:bf:4e:bc:99:2f:5b:ce:cd:24:bf:6c:
         3e:32:fc:df:51:22:79:fd:3d:47:8a:34:35:d0:c1:ad:0c:69:
         9b:1d:51:d8:b1:e7:60:0f:74:f2:da:18:54:d6:9c:b6:05:dd:
         3a:de:bd:39:3d:c9:c3:41:36:80:be:9a:dd:a1:27:7f:9b:68:
         9b:e2:5d:0f:75:9f:9b:5b:44:6b:69:4c:54:41:18:28:2c:f7:
         65:b1:38:06:da:7b:48:b0:d6:62:b4:03:e7:d5:e7:28:f6:65:
         68:55:c1:66:0d:99:66:26:dc:50:28:1e:90:33:12:22:d0:91:
         61:81:cb:0c:1c:2d:39:f0:41:4a:1b:e0:7b:82:d9:4f:9e:80:
         0a:23:51:01:f3:12:6f:e9:49:9c:2d:a7:c2:f2:36:b4:4a:28:
         28:a7:1e:db:d4:c2:5e:9a:ad:d4:e0:57:50:06:2a:da:7d:cf:
         b2:59:b4:50:d6:61:6d:08:ed:b4:e7:62:b8:c1:cb:c5:1e:a1:
         ed:56:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:58:17 2025 by rpki-client