Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/S_Vj880AL4sXQvrxslWEj7fZVEU.roa
File:                     S_Vj880AL4sXQvrxslWEj7fZVEU.roa (raw, json)
Hash identifier:          hSKLZ9gUAabrxcJC3LKC5Vo7J7CvGZ1FrbP0aRjGOms=
Subject key identifier:   4B:F5:63:F3:CD:00:2F:8B:17:42:FA:F1:B2:55:84:8F:B7:D9:54:45
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       353DAA6F
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/S_Vj880AL4sXQvrxslWEj7fZVEU.roa
Signing time:             Thu 23 Jun 2022 12:43:56 +0000
ROA not before:           Thu 23 Jun 2022 12:43:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20447
IP address blocks:        77.37.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893233775 (0x353daa6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Jun 23 12:43:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4bf563f3cd002f8b1742faf1b255848fb7d95445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ca:16:6e:77:ce:23:67:35:49:1e:08:ab:c1:
                    67:65:c2:ec:e4:80:0d:fe:9d:18:5e:14:6a:66:f5:
                    a2:c2:51:56:eb:ec:01:70:5e:76:07:47:b2:0d:37:
                    76:65:53:3c:30:c4:a2:7c:42:ea:b1:7c:ab:e1:2f:
                    4f:ba:77:0f:d5:6b:4e:f7:45:6b:8c:81:a3:b3:96:
                    55:a3:06:a0:8a:1f:45:d8:a6:90:78:55:7b:a3:78:
                    76:9b:b9:53:3f:bb:b7:7f:81:f0:c8:5a:92:83:1a:
                    c2:a3:0f:18:22:03:26:fc:ae:cb:44:b6:e6:4d:c0:
                    85:15:6f:fe:75:c6:b1:3d:f5:9f:ba:99:e5:93:fa:
                    b1:79:6c:c3:e0:e3:3f:07:fc:94:99:6b:75:0a:04:
                    6d:a0:bd:99:04:b2:55:0c:38:e4:85:34:2a:89:93:
                    62:c4:be:79:31:5d:49:fe:ad:d9:55:fb:fb:19:6e:
                    c1:bf:90:14:52:22:98:c8:3a:f4:d0:66:a3:08:f4:
                    a2:af:57:64:2e:e5:a3:b5:c9:c3:53:e4:cd:f1:32:
                    ad:b2:14:46:78:b0:42:97:dc:f7:05:52:b4:19:8f:
                    4b:ba:ad:a6:ba:7b:a5:cc:e1:ca:46:a8:7f:57:f6:
                    21:62:e8:de:86:7a:6a:9d:5e:12:e2:8a:4e:e7:25:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F5:63:F3:CD:00:2F:8B:17:42:FA:F1:B2:55:84:8F:B7:D9:54:45
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/S_Vj880AL4sXQvrxslWEj7fZVEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:be:97:2c:5c:85:bb:19:39:e6:76:e5:e0:df:b5:d9:be:63:
         81:32:db:ad:3b:3b:bd:23:72:6c:ed:bb:2e:ff:f5:56:0b:8b:
         2a:8a:b4:d2:40:f6:58:e8:57:de:3c:d4:a8:b2:83:4c:0a:d6:
         79:c0:bb:73:f0:92:e3:5c:86:01:63:04:e8:11:b0:2b:d1:43:
         ca:ae:ea:c8:b9:a3:65:7a:6f:de:ce:6c:c8:f2:67:87:79:f1:
         6d:5c:b4:db:64:05:eb:2b:2c:20:0e:75:07:bc:3e:d6:65:32:
         97:7d:6f:e7:3b:e1:e5:16:3a:8c:64:4e:1d:eb:6c:b4:2c:c0:
         04:e6:38:1b:e1:fd:61:3c:86:5d:e5:95:8f:aa:1d:b1:fb:8c:
         a0:bd:45:f9:55:d1:3f:b2:09:97:f7:7d:26:21:77:d1:52:de:
         44:99:94:50:9b:d3:96:3a:ff:11:91:40:07:ac:06:81:2a:4b:
         ad:56:ea:7c:b8:a3:85:1e:c3:59:41:7e:20:41:53:6d:31:4a:
         b9:04:ce:f2:d1:8e:0c:b4:83:25:2f:17:47:e9:fa:87:07:6e:
         a5:17:b4:98:fe:8e:a6:94:1e:58:cf:2c:d9:b4:01:10:5e:cb:
         1f:5b:b0:00:05:6a:a5:34:cc:df:5c:98:9e:b0:61:12:d6:6b:
         a6:80:67:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:58 2025 by rpki-client