Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa
File:                     T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (raw, json)
Hash identifier:          I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=
Subject key identifier:   4F:63:2C:D0:8B:0A:DA:1C:08:58:2A:6E:D9:5C:8D:5C:C5:5F:1A:A8
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       019427B48DC226D863645236FF1A1B1D0E84
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa
Signing time:             Thu 02 Jan 2025 15:48:51 +0000
ROA not before:           Thu 02 Jan 2025 15:48:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34530
IP address blocks:        77.87.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b4:8d:c2:26:d8:63:64:52:36:ff:1a:1b:1d:0e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Jan  2 15:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4f632cd08b0ada1c08582a6ed95c8d5cc55f1aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:00:9d:96:0a:3a:a1:a5:b1:30:bb:fd:02:
                    1d:6b:d5:57:53:b9:22:84:dc:e9:db:4a:59:bf:f7:
                    46:7b:77:c6:db:92:d8:81:ec:8c:42:7e:12:32:dd:
                    95:7e:0f:f7:5b:08:e2:d1:01:6b:66:5b:13:f5:65:
                    b8:31:cb:43:b6:cf:1c:58:31:c5:f8:91:dd:9b:fc:
                    41:90:05:cb:bd:22:1c:66:07:0d:30:10:38:1e:2b:
                    e3:d0:7b:62:b5:58:a3:9b:bb:d8:6d:73:74:b2:fe:
                    bd:ca:7f:66:b9:33:16:31:2c:42:c7:4b:10:a4:36:
                    39:3a:e9:5f:44:29:5b:e8:14:6a:0e:a0:f6:d6:33:
                    2f:96:f7:be:f1:79:46:e8:d9:bc:e7:24:53:69:fe:
                    d2:bd:01:ad:cd:0a:e7:2e:ad:3e:6d:8b:dc:6b:74:
                    97:03:14:3e:f2:75:e4:5e:0e:c9:ca:d7:65:6d:73:
                    4d:58:20:cf:6b:3a:c4:93:27:25:b3:c8:a1:64:9e:
                    e6:b9:44:00:d5:5d:db:e9:e9:94:59:ad:b4:f8:cf:
                    4b:9a:19:8b:58:8a:eb:e1:43:91:5e:d2:ec:f1:0d:
                    69:e7:c6:7a:b6:36:53:cb:58:3a:0e:d6:6e:79:71:
                    cd:33:ed:95:b7:cc:02:16:37:e6:50:42:e1:18:07:
                    d1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:2C:D0:8B:0A:DA:1C:08:58:2A:6E:D9:5C:8D:5C:C5:5F:1A:A8
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:2f:32:5a:75:6c:4f:1b:56:a6:77:db:67:24:82:6a:20:db:
         e3:d8:a6:51:12:76:39:83:79:77:6f:f4:f2:c6:f4:ed:22:85:
         5d:4c:e0:cd:03:d5:8e:fc:28:90:b4:b3:a6:3e:b0:c1:32:90:
         4c:ba:56:78:48:44:6d:c6:03:17:ad:7e:2e:06:98:12:76:3f:
         e0:50:ee:e2:66:1b:3e:37:b5:e8:10:11:88:47:94:cd:ce:b8:
         59:41:af:dd:b4:7f:50:37:ac:95:1c:51:bd:18:5c:af:2c:9c:
         2e:a9:84:20:d7:ee:c2:ff:01:9d:eb:c9:7d:9b:2b:cb:ca:2e:
         c6:49:8c:94:66:ed:ec:15:52:68:62:20:ff:41:bd:62:97:ca:
         09:c2:3e:91:1a:68:51:5d:40:29:3a:76:ef:ab:5a:17:e4:90:
         d6:91:df:28:4a:c1:e8:49:8a:c8:20:ae:ec:5b:2d:24:de:20:
         51:fa:cf:c7:36:5e:e2:92:3b:a2:9f:47:4c:5a:e5:bb:62:7c:
         b1:9c:2e:09:1f:ac:b8:64:1b:ad:f1:a6:41:a9:e6:f4:ac:79:
         3b:d4:8d:3c:cc:20:ac:a3:bc:12:1b:d2:53:32:af:b3:e9:e7:
         08:64:18:12:ff:6b:f2:8f:ac:5b:45:a8:52:80:9b:ca:ec:bd:
         bf:a6:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:50 2025 by rpki-client