Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/1-yZWYEWKpdiUVFOL7C4_x01X6Oc.roa
File:                     1-yZWYEWKpdiUVFOL7C4_x01X6Oc.roa (raw, json)
Hash identifier:          BdS2Dp32vzhTaJNlCgZ1HekK7BiHWT6kiw66hscQXdQ=
Subject key identifier:   FB:26:56:60:45:8A:A5:D8:94:54:53:8B:EC:2E:3F:C7:4D:57:E8:E7
Certificate issuer:       /CN=647512ad1bb888a7242a584c6f2964988f5c87d4
Certificate serial:       01857039991D35B1E9D0B0FA820CB0C39DB9
Authority key identifier: 64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/1-yZWYEWKpdiUVFOL7C4_x01X6Oc.roa
Signing time:             Mon 02 Jan 2023 02:05:01 +0000
ROA not before:           Mon 02 Jan 2023 02:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29684
IP address blocks:        77.75.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:39:99:1d:35:b1:e9:d0:b0:fa:82:0c:b0:c3:9d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647512ad1bb888a7242a584c6f2964988f5c87d4
        Validity
            Not Before: Jan  2 02:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb265660458aa5d89454538bec2e3fc74d57e8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:16:e8:76:d0:78:c0:b6:61:e5:e3:84:f0:
                    6e:da:81:e7:14:b5:30:8f:a1:f7:bb:02:99:79:1a:
                    7a:62:a3:b1:dd:c1:f7:85:38:8f:ff:9c:87:ad:df:
                    e2:83:97:c5:95:f0:ff:cf:e5:07:cd:cd:3a:b1:9a:
                    70:12:45:4e:09:77:c9:2c:82:7e:f4:68:3f:50:77:
                    e8:85:45:96:7e:25:a0:26:3e:36:b3:c4:5b:7f:78:
                    69:c8:b1:48:9e:cc:6a:bf:ea:85:58:e8:1d:64:86:
                    e2:30:fd:dd:5c:03:fe:14:86:44:de:18:70:26:8f:
                    4d:ff:49:c2:a7:9d:bd:cb:00:b9:d1:cb:67:5c:eb:
                    20:8d:ab:f0:23:d7:53:bb:28:05:08:f9:c9:93:d7:
                    3b:b7:4b:65:82:7f:26:ed:8e:2c:4f:f0:be:a2:fa:
                    40:94:5c:c7:b4:1e:e1:cd:00:02:df:21:91:7c:43:
                    5f:75:5d:7e:4e:04:5d:ab:f3:af:26:07:2b:e0:2d:
                    af:13:6b:df:bf:0f:e5:4e:02:19:73:47:bc:89:7e:
                    47:15:ee:ed:36:b5:42:ce:e8:46:ea:89:90:78:f4:
                    7c:a0:b9:26:b1:eb:72:6d:7a:84:94:4b:f1:1d:70:
                    a7:76:ff:70:75:1e:ab:94:35:88:d6:d5:43:7b:26:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:26:56:60:45:8A:A5:D8:94:54:53:8B:EC:2E:3F:C7:4D:57:E8:E7
            X509v3 Authority Key Identifier:
                keyid:64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/1-yZWYEWKpdiUVFOL7C4_x01X6Oc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:df:30:3a:0a:3b:e2:09:ba:bc:1f:24:27:b3:58:57:1a:32:
         d8:93:51:b4:80:f5:5f:86:40:fa:b5:b7:69:45:d9:ec:40:de:
         a5:e4:b8:27:4c:45:06:ba:54:04:b2:05:76:2d:bc:53:53:ca:
         9a:b0:65:9a:c4:1f:92:d5:bc:e6:40:24:ad:c5:30:bd:62:6e:
         84:c9:7b:12:56:ab:08:5c:92:0f:68:fb:cf:74:b5:6a:73:f9:
         0a:f1:8b:ca:69:b8:12:1e:b1:54:66:b3:5b:8c:b3:1e:27:ed:
         7f:2d:38:38:9f:12:e5:33:36:f7:18:62:ec:2e:9d:fe:26:e7:
         ed:0a:a4:b9:e0:35:23:1b:7d:15:b5:33:0d:3f:50:4d:e8:68:
         57:19:54:3e:8f:9a:fa:cf:6f:f2:dc:00:4b:f5:d2:7a:3d:7a:
         dd:7b:ca:dd:ab:a0:5e:37:9f:a7:82:5a:29:cb:b2:2d:06:74:
         aa:6d:7f:70:4f:02:08:d9:0a:37:50:a5:a0:a2:a0:7e:fe:08:
         2f:5c:ba:d3:b7:92:9a:d6:47:cb:2b:b9:ad:39:13:c1:94:ef:
         02:7f:5f:c5:3a:0b:b0:b9:e9:0e:e9:52:07:15:86:5d:57:ca:
         97:54:3f:c6:af:34:db:2f:ff:d0:8d:75:46:3e:df:89:43:2a:
         d5:b7:6e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:48 2024 by rpki-client on console-ams.rpki-client.org