Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/x4BqLjGv9BQnbVZG37e3CHSOWJg.roa
File:                     x4BqLjGv9BQnbVZG37e3CHSOWJg.roa (raw, json)
Hash identifier:          AO4wDwxWiIHoM7mYGHRO0Pvcwv2lUXWFr7aVkvYHlvI=
Subject key identifier:   C7:80:6A:2E:31:AF:F4:14:27:6D:56:46:DF:B7:B7:08:74:8E:58:98
Certificate issuer:       /CN=647512ad1bb888a7242a584c6f2964988f5c87d4
Certificate serial:       A97E
Authority key identifier: 64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/x4BqLjGv9BQnbVZG37e3CHSOWJg.roa
Signing time:             Thu 12 May 2022 08:15:49 +0000
ROA not before:           Thu 12 May 2022 08:15:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29684
IP address blocks:        77.75.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43390 (0xa97e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647512ad1bb888a7242a584c6f2964988f5c87d4
        Validity
            Not Before: May 12 08:15:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7806a2e31aff414276d5646dfb7b708748e5898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:62:45:45:3a:91:91:b7:00:b5:e3:60:2f:
                    67:87:27:4e:90:02:b2:97:03:6b:3c:86:26:5a:a5:
                    60:10:38:7a:fb:c3:e1:b1:f8:fc:4e:37:b5:52:b9:
                    1a:8c:46:30:04:18:ff:22:35:c7:b6:21:3c:28:61:
                    9c:58:45:00:9d:d4:6b:45:64:08:d2:b5:d4:39:1d:
                    29:d0:77:63:fe:32:fe:d4:4c:50:d4:ce:49:6c:0a:
                    33:c9:f5:8d:4a:9e:e3:8c:00:8e:99:d8:9d:77:b3:
                    b2:98:a6:58:1c:8d:1b:44:fd:4e:82:96:c8:70:55:
                    c2:08:5c:7f:13:9f:20:1e:7c:58:01:bc:18:5d:9d:
                    a1:d1:fb:f5:90:39:61:90:6f:7b:9f:f0:a1:92:a1:
                    0c:0f:8e:74:11:59:04:f5:5c:60:52:a7:b5:ce:1d:
                    60:c9:b2:a1:39:20:c2:a0:91:a3:03:22:54:3d:2e:
                    e6:2d:b7:9f:42:a6:3d:88:f7:20:a1:fc:07:47:23:
                    d1:a4:57:8f:d5:28:c7:71:bf:62:62:2b:7f:5b:b0:
                    1f:53:9b:81:f5:a3:e0:4e:db:5f:54:86:cc:84:0b:
                    fa:fc:cf:e2:6f:5f:21:70:ec:8c:5e:0d:2e:23:1d:
                    0e:90:13:04:5d:c5:3c:33:78:7f:40:c0:4a:bb:f2:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:80:6A:2E:31:AF:F4:14:27:6D:56:46:DF:B7:B7:08:74:8E:58:98
            X509v3 Authority Key Identifier:
                keyid:64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/x4BqLjGv9BQnbVZG37e3CHSOWJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:9e:ea:f5:8a:50:3d:ca:03:a4:75:70:8c:f6:78:e4:e8:78:
         e9:7a:c5:4c:b2:72:1d:67:ab:c1:a8:09:63:48:03:3d:1f:65:
         dc:1b:85:4f:0f:36:c6:7a:f8:a9:21:95:19:c4:2c:15:7f:1d:
         d0:e1:e7:5c:51:65:b5:2e:b2:5d:79:04:fb:bd:bc:f5:ee:47:
         6c:92:1c:cc:cb:37:bb:49:c4:61:f9:8e:27:3b:80:01:99:0e:
         ce:9e:9a:64:1f:ed:2b:06:12:57:0b:a3:16:ca:e6:2e:26:f8:
         d0:eb:80:78:fd:79:2b:25:35:14:3f:50:4c:e9:a7:53:2b:5a:
         4a:72:ce:63:73:d8:0e:1d:28:9c:10:25:b0:06:68:cf:2a:de:
         6e:fe:62:b6:0b:6d:d6:bd:d8:b3:63:bf:8a:93:aa:47:75:69:
         6e:86:7d:14:ad:ac:ef:e2:88:d6:5b:ba:ed:f9:fe:98:92:7c:
         28:5f:ae:b2:f1:84:58:92:61:6e:1c:c4:e3:d2:16:d0:f8:73:
         cf:7c:e2:eb:cf:b4:4b:11:ed:5e:eb:11:a5:d0:2f:9b:a3:5c:
         52:8c:33:a6:70:17:cf:88:71:27:1e:5a:e7:ce:85:49:83:fd:
         b9:e3:14:7f:cd:d7:6e:dc:52:4e:89:bc:c1:39:20:4a:92:d4:
         92:be:2a:a5
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAKl+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0
NzUxMmFkMWJiODg4YTcyNDJhNTg0YzZmMjk2NDk4OGY1Yzg3ZDQwHhcNMjIwNTEy
MDgxNTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjNzgwNmEyZTMxYWZm
NDE0Mjc2ZDU2NDZkZmI3YjcwODc0OGU1ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnb5iRUU6kZG3ALXjYC9nhydOkAKylwNrPIYmWqVgEDh6+8Ph
sfj8Tje1UrkajEYwBBj/IjXHtiE8KGGcWEUAndRrRWQI0rXUOR0p0Hdj/jL+1ExQ
1M5JbAozyfWNSp7jjACOmdidd7OymKZYHI0bRP1OgpbIcFXCCFx/E58gHnxYAbwY
XZ2h0fv1kDlhkG97n/ChkqEMD450EVkE9VxgUqe1zh1gybKhOSDCoJGjAyJUPS7m
LbefQqY9iPcgofwHRyPRpFeP1SjHcb9iYit/W7AfU5uB9aPgTttfVIbMhAv6/M/i
b18hcOyMXg0uIx0OkBMEXcU8M3h/QMBKu/KYxQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMeAai4xr/QUJ21WRt+3twh0jliYMB8GA1UdIwQYMBaAFGR1Eq0buIinJCpY
TG8pZJiPXIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WkhVU3JSdTRpS2NrS2xoTWJ5bGttSTljaDlRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82ZS82MWM0NzgtMjI1Ny00OWFhLTllODAtMmJkM2ZjZmJmODQ1LzEv
eDRCcUxqR3Y5QlFuYlZaRzM3ZTNDSFNPV0pnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82
MWM0NzgtMjI1Ny00OWFhLTllODAtMmJkM2ZjZmJmODQ1LzEvWkhVU3JSdTRpS2Nr
S2xoTWJ5bGttSTljaDlRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUvgMA0GCSqGSIb3DQEBCwUAA4IB
AQCOnur1ilA9ygOkdXCM9njk6HjpesVMsnIdZ6vBqAljSAM9H2XcG4VPDzbGevip
IZUZxCwVfx3Q4edcUWW1LrJdeQT7vbz17kdskhzMyze7ScRh+Y4nO4ABmQ7Onppk
H+0rBhJXC6MWyuYuJvjQ64B4/XkrJTUUP1BM6adTK1pKcs5jc9gOHSicECWwBmjP
Kt5u/mK2C23WvdizY7+Kk6pHdWluhn0Urazv4ojWW7rt+f6YknwoX66y8YRYkmFu
HMTj0hbQ+HPPfOLrz7RLEe1e6xGl0C+bo1xSjDOmcBfPiHEnHlrnzoVJg/254xR/
zddu3FJOibzBOSBKktSSviql
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:12 2024 by rpki-client on console-fra.rpki-client.org