Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/972541-f881-4207-870f-9699f209267b/1/Pf_VIxwEwLgBpL7U884cTDKz8yo.roa
File:                     Pf_VIxwEwLgBpL7U884cTDKz8yo.roa (raw, json)
Hash identifier:          /azhE5zYaJQhEzKaz85JTSNpRb6XxMuCMvOerUZbJ/c=
Subject key identifier:   3D:FF:D5:23:1C:04:C0:B8:01:A4:BE:D4:F3:CE:1C:4C:32:B3:F3:2A
Certificate issuer:       /CN=077513fe7c15af9be746355ed0b30efd100dff93
Certificate serial:       01048921
Authority key identifier: 07:75:13:FE:7C:15:AF:9B:E7:46:35:5E:D0:B3:0E:FD:10:0D:FF:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3UT_nwVr5vnRjVe0LMO_RAN_5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/972541-f881-4207-870f-9699f209267b/1/Pf_VIxwEwLgBpL7U884cTDKz8yo.roa
Signing time:             Sat 01 Jan 2022 11:56:05 +0000
ROA not before:           Sat 01 Jan 2022 11:56:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39305
IP address blocks:        77.75.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17074465 (0x1048921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077513fe7c15af9be746355ed0b30efd100dff93
        Validity
            Not Before: Jan  1 11:56:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3dffd5231c04c0b801a4bed4f3ce1c4c32b3f32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:ab:75:cd:9c:8f:2a:a9:b0:9b:e0:88:45:
                    99:ee:4e:ef:08:71:84:c1:f4:09:87:95:de:6e:e6:
                    df:5d:ae:94:fb:cd:be:a3:68:59:07:6d:94:78:4d:
                    29:54:ca:1e:1b:61:e7:85:69:32:96:6e:e5:40:22:
                    2f:3d:d7:7f:7d:59:fd:83:97:91:33:d6:e0:44:9a:
                    d6:e9:6e:de:a8:72:91:27:df:c8:92:dd:64:67:a5:
                    d3:b9:ac:51:0c:a4:89:d9:95:0c:fc:7c:cd:56:18:
                    69:03:c1:d8:c6:cc:78:8e:53:ed:38:d9:c0:ed:57:
                    c1:47:b0:5e:90:70:cd:3a:c9:05:38:2d:66:57:62:
                    5b:70:8b:69:0b:2b:c2:33:13:d3:d1:40:ae:03:37:
                    21:06:2c:61:7c:f0:92:0b:a2:9c:67:86:be:fc:c7:
                    ad:d7:6f:d8:b7:cc:c2:a1:11:cc:0c:68:41:4d:a9:
                    25:e9:ff:a5:38:56:a8:f7:f0:0a:7f:9c:88:5e:02:
                    08:4b:61:64:8a:3c:8a:16:37:71:27:f5:3f:f5:36:
                    f7:5f:51:1e:de:14:2e:4e:73:c5:a4:a2:8b:9b:ac:
                    0e:00:8e:9a:ca:4d:ee:fb:cd:ee:76:5d:b7:e2:10:
                    b0:ea:a9:0d:a8:c4:4b:6c:82:9c:75:dc:df:8b:4b:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FF:D5:23:1C:04:C0:B8:01:A4:BE:D4:F3:CE:1C:4C:32:B3:F3:2A
            X509v3 Authority Key Identifier:
                keyid:07:75:13:FE:7C:15:AF:9B:E7:46:35:5E:D0:B3:0E:FD:10:0D:FF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3UT_nwVr5vnRjVe0LMO_RAN_5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/972541-f881-4207-870f-9699f209267b/1/Pf_VIxwEwLgBpL7U884cTDKz8yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/972541-f881-4207-870f-9699f209267b/1/B3UT_nwVr5vnRjVe0LMO_RAN_5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a6:a6:be:6c:38:6e:ae:89:33:66:c9:4f:48:9b:00:0e:50:
         8f:e6:7e:80:f8:ef:19:5f:65:b6:a5:05:69:c9:0d:43:1f:2e:
         11:9a:48:e0:65:37:f3:0e:b8:02:f6:40:28:33:f3:0d:2b:6f:
         cc:0d:a5:7c:0b:c9:33:33:5e:f7:55:e0:99:6e:ff:cd:58:16:
         da:a6:43:f3:75:c5:3a:04:8b:6e:67:bf:e9:aa:1e:41:30:d5:
         34:af:6f:fa:c1:0c:04:0f:36:f7:09:0f:87:60:32:89:0e:6f:
         ae:4c:71:dd:dc:78:53:54:8a:f4:6f:0d:b4:21:e1:41:a5:30:
         75:4e:e2:43:3b:ef:a2:6d:34:52:78:4b:40:64:8f:bd:45:1a:
         68:99:0a:05:0c:71:59:93:66:7a:8f:d4:c0:88:c9:e5:b0:24:
         da:42:89:75:18:72:98:7e:b8:9c:6a:3e:79:33:26:47:75:70:
         60:22:b8:10:35:d4:31:82:2f:08:d1:26:fd:8a:a0:a1:fa:60:
         ca:ee:59:5e:af:31:73:4f:7a:31:0d:2d:93:23:c4:c4:6e:cf:
         a0:cb:88:f0:be:31:df:b8:27:be:9d:42:19:e4:76:50:31:ee:
         af:a1:09:bf:fa:80:e9:df:7b:52:62:6d:50:41:3a:2d:9a:99:
         93:e8:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:38 2024 by rpki-client on console-fra.rpki-client.org