Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/GbLvIZs3K39fPEn2eNODi4DsAwk.roa
File:                     GbLvIZs3K39fPEn2eNODi4DsAwk.roa (raw, json)
Hash identifier:          WTTmB3gzBYzTz4v9cDeCed2jUpi/68R0f8Me148znak=
Subject key identifier:   19:B2:EF:21:9B:37:2B:7F:5F:3C:49:F6:78:D3:83:8B:80:EC:03:09
Certificate issuer:       /CN=647512ad1bb888a7242a584c6f2964988f5c87d4
Certificate serial:       0185703998708365B48E5CE1399C91E461FE
Authority key identifier: 64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/GbLvIZs3K39fPEn2eNODi4DsAwk.roa
Signing time:             Mon 02 Jan 2023 02:05:00 +0000
ROA not before:           Mon 02 Jan 2023 02:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6453
IP address blocks:        77.75.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:39:98:70:83:65:b4:8e:5c:e1:39:9c:91:e4:61:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647512ad1bb888a7242a584c6f2964988f5c87d4
        Validity
            Not Before: Jan  2 02:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19b2ef219b372b7f5f3c49f678d3838b80ec0309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:f5:98:0b:c5:70:72:69:f1:6d:21:73:40:
                    1b:06:15:31:c8:b9:69:b0:5f:e0:c4:06:4d:26:f7:
                    b8:82:b3:57:3d:8b:50:6f:71:c5:d5:c5:b4:24:ca:
                    c1:7c:b1:e0:64:91:41:ec:f4:a9:5b:2f:97:f4:82:
                    b2:a9:cc:6e:70:01:02:6b:c0:b3:3a:37:89:58:2d:
                    44:b6:82:fc:b6:f3:54:d3:57:4d:ae:cd:b9:aa:73:
                    58:2b:3e:92:5e:44:51:06:2c:95:56:03:2e:bb:10:
                    2d:95:a6:82:e2:fd:66:89:30:fd:e1:35:fc:ec:3f:
                    db:a0:55:b5:63:55:38:9b:a3:22:f5:14:23:45:98:
                    14:4d:eb:ec:17:1c:fd:77:44:e0:7e:2f:d9:58:90:
                    4d:5f:23:bc:d4:d4:18:53:76:8e:78:36:fc:94:8d:
                    a5:39:47:c6:96:00:07:95:a7:bc:41:28:61:f1:5c:
                    b5:91:4a:94:78:d7:93:18:0e:63:b5:e6:06:ff:71:
                    2c:a9:2e:39:37:6f:ab:d9:67:48:08:34:f5:88:e7:
                    55:22:e0:e0:f3:e5:50:59:e3:6c:96:3d:cd:64:7c:
                    42:87:ab:d6:8f:ac:49:eb:2a:f3:f9:2d:37:f6:94:
                    b8:04:9c:1d:14:8b:e3:68:8e:3e:f8:6f:ef:22:90:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:EF:21:9B:37:2B:7F:5F:3C:49:F6:78:D3:83:8B:80:EC:03:09
            X509v3 Authority Key Identifier:
                keyid:64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/GbLvIZs3K39fPEn2eNODi4DsAwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:32:27:ca:7f:94:0a:f7:13:b2:b9:4e:08:e0:b3:1c:b9:fc:
         70:39:81:f2:9e:86:c0:2d:5a:80:c0:d3:10:49:c2:77:53:0b:
         42:96:4d:09:90:a2:77:18:8e:09:b1:d8:e3:c3:48:34:c7:f0:
         86:58:3e:3f:17:eb:5c:10:4c:49:81:dd:d9:c6:a2:10:42:ce:
         ef:22:9a:53:cb:cc:0f:e7:fe:34:bb:a3:47:39:19:f9:2c:85:
         52:38:56:4d:ea:f0:c8:ad:b6:bc:49:18:71:da:98:f6:09:4c:
         39:16:5a:1b:dd:30:09:4a:8b:12:19:ec:dc:f2:7d:b0:dd:97:
         86:74:fe:a3:f4:bd:24:a4:25:f2:33:6a:55:8c:85:76:ac:9c:
         02:d2:12:05:8f:90:d1:7f:8d:48:e4:23:57:80:1f:9f:a3:4e:
         c3:b4:f3:c2:a9:60:f5:3b:33:6b:ac:4d:32:f7:41:99:13:cd:
         64:31:14:2b:2b:e6:18:c0:3b:7c:c0:d5:35:f7:d0:dc:96:68:
         d0:8d:d7:0a:1a:49:9a:9e:00:91:c2:40:02:6c:53:ec:96:c4:
         7d:e1:42:9b:0f:e0:c2:29:55:e8:d8:3f:a5:08:07:60:1c:cc:
         6c:37:cd:09:bf:60:1b:7a:fc:b6:73:b1:5a:47:27:f8:7d:6c:
         b3:4d:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:48 2024 by rpki-client on console-ams.rpki-client.org