Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/CciYZof1Z08vHjqQ9eMVs3DZAEU.roa
File:                     CciYZof1Z08vHjqQ9eMVs3DZAEU.roa (raw, json)
Hash identifier:          tTnzKXh/+m2DsFeVDC9SkNRxehi8BLx9GVvfyQPnaUk=
Subject key identifier:   09:C8:98:66:87:F5:67:4F:2F:1E:3A:90:F5:E3:15:B3:70:D9:00:45
Certificate issuer:       /CN=7cdad8604f8d8873a01b707b40b54226f04b481f
Certificate serial:       01865509373405084C74F81C33A912744CB7
Authority key identifier: 7C:DA:D8:60:4F:8D:88:73:A0:1B:70:7B:40:B5:42:26:F0:4B:48:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNrYYE-NiHOgG3B7QLVCJvBLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/CciYZof1Z08vHjqQ9eMVs3DZAEU.roa
Signing time:             Wed 15 Feb 2023 12:25:12 +0000
ROA not before:           Wed 15 Feb 2023 12:25:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43624
IP address blocks:        77.75.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:55:09:37:34:05:08:4c:74:f8:1c:33:a9:12:74:4c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cdad8604f8d8873a01b707b40b54226f04b481f
        Validity
            Not Before: Feb 15 12:25:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=09c8986687f5674f2f1e3a90f5e315b370d90045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:b6:c0:e3:ba:af:88:b6:8a:8f:5e:d7:40:
                    8e:b8:c7:28:11:52:e3:06:1b:e6:a0:30:2d:dc:6e:
                    6a:87:4d:60:e4:89:da:f7:18:61:aa:5b:50:45:81:
                    49:06:81:ba:d2:94:6d:9a:22:10:f3:6c:49:c5:68:
                    30:60:25:5b:47:10:6c:0f:5c:20:1f:ca:9b:74:5c:
                    91:6a:ba:84:87:a5:eb:be:78:30:8c:33:7d:74:08:
                    e9:80:05:d2:22:2a:dc:1c:08:a0:83:c4:88:4f:48:
                    23:ea:92:96:77:2e:d2:8f:b2:61:d2:3b:75:de:da:
                    30:61:84:12:24:1e:d0:f7:89:18:f8:92:b2:0c:eb:
                    10:e3:3e:84:54:d9:4f:8e:e6:e1:3c:b8:e0:45:18:
                    6e:67:9c:ea:0e:88:35:f5:46:a4:bb:74:72:37:1d:
                    aa:b4:cc:52:5b:19:39:7c:6a:2c:a9:44:a6:17:be:
                    ab:dd:e5:9d:e0:d5:9f:6c:5b:35:34:6b:12:9c:b4:
                    85:8c:42:34:94:aa:ba:0f:ba:1a:bc:bb:b3:c0:50:
                    c2:4a:0f:6c:2a:c8:a9:9f:bf:14:97:76:55:93:ab:
                    d6:74:41:bf:94:8c:ef:53:ee:4c:b8:a5:94:75:39:
                    e2:46:28:9b:a0:b2:07:73:ce:4c:e4:e0:09:67:82:
                    ee:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C8:98:66:87:F5:67:4F:2F:1E:3A:90:F5:E3:15:B3:70:D9:00:45
            X509v3 Authority Key Identifier:
                keyid:7C:DA:D8:60:4F:8D:88:73:A0:1B:70:7B:40:B5:42:26:F0:4B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNrYYE-NiHOgG3B7QLVCJvBLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/CciYZof1Z08vHjqQ9eMVs3DZAEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/fNrYYE-NiHOgG3B7QLVCJvBLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:fd:07:bb:d9:4e:9b:8d:61:68:f3:b2:6f:4c:1c:32:62:
         00:93:5c:af:2a:6f:85:90:0b:1d:40:4a:39:3c:e1:9a:87:f3:
         83:d8:bc:d7:db:ad:e8:73:0e:ae:d0:3b:03:7b:2c:5b:bf:be:
         a4:5d:04:04:66:8b:14:4e:c4:03:69:02:ef:fb:4f:98:8f:12:
         ce:70:e6:40:b7:42:75:6a:18:5a:a8:c0:d6:63:c5:0d:db:0f:
         6d:6c:3b:33:ba:3b:4e:01:e7:ec:81:b1:8e:5c:74:5a:84:44:
         f8:7b:90:ce:3e:3e:9c:58:b2:1a:04:09:77:68:2e:64:57:a2:
         62:4b:60:b2:00:d6:6c:08:09:03:56:dd:9a:77:54:98:45:c2:
         f8:10:1a:19:e1:e9:1d:83:1e:f3:17:1f:5e:bb:92:9f:1c:61:
         68:a5:61:f1:f1:26:f3:18:f9:17:b1:09:09:58:3f:77:b8:1d:
         9b:be:a5:c7:b9:49:e9:45:45:f9:ea:9c:a9:de:bc:b1:fe:e8:
         79:89:1c:86:28:6b:86:dc:e1:b7:18:43:ef:fb:2c:eb:c0:fd:
         78:83:91:1d:ce:e1:a0:74:dd:66:85:b1:6f:5a:f5:80:9e:ae:
         58:29:05:23:df:68:60:c5:6f:82:09:92:5c:57:f9:28:12:04:
         aa:8a:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:19 2024 by rpki-client on console-fra.rpki-client.org