Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/WGecvuGEcd2lai-GJuUylSe39ZE.roa
File:                     WGecvuGEcd2lai-GJuUylSe39ZE.roa (raw, json)
Hash identifier:          IWHoYZwvGBCrtdstDb8fhiHc6sP+nprhwYpQLmj3nkI=
Subject key identifier:   58:67:9C:BE:E1:84:71:DD:A5:6A:2F:86:26:E5:32:95:27:B7:F5:91
Certificate issuer:       /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial:       0181F732CE43074CEB9E1126C253EB852BDC
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/WGecvuGEcd2lai-GJuUylSe39ZE.roa
Signing time:             Wed 13 Jul 2022 10:55:10 +0000
ROA not before:           Wed 13 Jul 2022 10:55:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     399587
IP address blocks:        185.177.78.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f7:32:ce:43:07:4c:eb:9e:11:26:c2:53:eb:85:2b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
        Validity
            Not Before: Jul 13 10:55:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=58679cbee18471dda56a2f8626e5329527b7f591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:6e:ef:96:44:9d:d1:9c:f2:17:28:0c:16:
                    06:53:d9:c1:e9:f1:c5:ea:c1:29:84:a6:d7:b2:aa:
                    5e:42:07:25:16:88:25:31:db:4d:d1:38:d4:48:f1:
                    d8:9c:aa:56:73:bb:c4:0c:95:d5:67:6b:f0:32:16:
                    d4:1b:9d:df:53:79:95:96:92:ac:c9:e1:f2:79:68:
                    8d:00:eb:ac:27:10:69:04:a0:af:9e:7e:ac:28:32:
                    a4:fc:24:e6:e3:84:f5:f4:b5:50:33:7c:d5:7e:f3:
                    75:4d:c4:03:81:82:fc:a4:f2:ed:ff:7b:6a:84:4a:
                    13:20:b3:07:de:19:bf:38:65:4f:d0:2d:1d:43:08:
                    67:12:42:7f:93:64:99:e3:36:3f:a3:18:c9:d1:be:
                    11:7d:c4:cc:4e:a9:37:34:14:ce:ee:68:92:02:6c:
                    a4:17:5f:72:2e:43:ce:c3:96:a7:f3:a3:ad:bb:3a:
                    f0:db:5c:6f:86:11:7c:9c:ab:dc:03:8f:40:df:9b:
                    e0:d4:e3:fd:5c:ab:20:61:d7:2b:61:d6:ae:ea:ff:
                    97:0f:b7:54:a2:0b:23:3f:0b:23:cf:64:a6:c6:74:
                    fe:1e:5f:cd:5f:31:0c:28:10:86:38:de:80:1a:1c:
                    ba:00:ea:a7:05:e7:0a:b4:82:27:90:0e:cc:2c:80:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:9C:BE:E1:84:71:DD:A5:6A:2F:86:26:E5:32:95:27:B7:F5:91
            X509v3 Authority Key Identifier:
                keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/WGecvuGEcd2lai-GJuUylSe39ZE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:22:0a:d0:df:8a:67:17:9a:e8:0a:98:61:1a:cf:d3:56:28:
         39:d9:3b:68:10:ef:75:f0:f0:ea:51:b4:ba:20:8a:d2:6b:ad:
         d0:ba:50:9f:3a:0e:72:57:ac:ae:5a:dc:4c:35:0f:06:bb:08:
         63:a4:64:e1:39:d3:7e:5e:ad:d2:f8:f9:4e:e8:96:90:18:99:
         4d:db:b8:b0:e0:51:1e:40:06:f8:63:02:dc:70:c7:00:b1:9f:
         32:9c:35:fa:12:ab:7b:db:a0:be:8b:6f:f6:21:b5:96:d2:f7:
         1c:9e:f7:a8:2c:9c:6b:35:8e:94:c2:41:81:a9:11:d4:b6:78:
         76:76:17:08:f3:6f:65:b9:10:34:f7:76:f1:5f:67:fe:aa:ca:
         69:03:20:4c:ba:2c:fc:34:0a:ee:a2:34:6c:e2:78:f6:85:46:
         de:ba:32:5d:d2:40:98:7a:c5:fa:10:6e:19:fe:2b:1e:d0:80:
         05:06:cb:72:45:ae:62:09:4a:a2:83:a3:01:93:14:b6:6e:d0:
         76:d2:46:05:bd:a4:fc:40:17:3d:5c:3f:de:1c:d6:97:01:76:
         b9:9f:ad:dd:6b:96:9b:45:b8:8c:b2:27:d1:b4:7d:04:f4:c2:
         40:2a:69:92:97:9b:1e:25:f9:60:f4:69:dc:a0:c3:23:41:bc:
         0c:45:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-fra.rpki-client.org