Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/cjtrA38UjnC-_XuuukNknN_lLXc.roa
File:                     cjtrA38UjnC-_XuuukNknN_lLXc.roa (raw, json)
Hash identifier:          kIDgG2Maq5u3Ckd4+tgcjg1G+otaxPjMjbm88kSm2tI=
Subject key identifier:   72:3B:6B:03:7F:14:8E:70:BE:FD:7B:AE:BA:43:64:9C:DF:E5:2D:77
Certificate issuer:       /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial:       07FCFCDF
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/cjtrA38UjnC-_XuuukNknN_lLXc.roa
Signing time:             Sat 01 Jan 2022 16:11:06 +0000
ROA not before:           Sat 01 Jan 2022 16:11:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        80.76.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134020319 (0x7fcfcdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
        Validity
            Not Before: Jan  1 16:11:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=723b6b037f148e70befd7baeba43649cdfe52d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:3c:cb:01:7d:0a:8c:79:46:68:f6:9a:39:
                    d8:c4:01:6f:3d:a6:ec:50:d6:04:f1:28:b8:fe:7f:
                    de:4e:c1:e7:ed:de:21:dc:ad:7f:0b:e3:ae:f4:c5:
                    d0:d0:e9:78:0d:85:09:52:f5:29:7a:79:7d:2f:35:
                    02:f8:7c:ac:2e:00:fd:4a:d2:1d:1f:16:36:31:48:
                    24:b1:77:28:20:54:d8:1b:56:d3:1c:cb:7b:50:65:
                    bf:90:ac:c7:73:72:d3:c4:10:47:16:14:69:6b:7e:
                    35:1e:8c:19:80:2d:d5:75:9c:fe:71:d1:e0:e7:9d:
                    7b:84:92:17:2f:0e:2d:54:7f:38:33:34:cd:d4:93:
                    f8:76:e7:a4:70:43:8f:36:df:eb:cd:ec:c9:76:11:
                    65:34:22:dd:43:46:87:ef:af:e1:85:17:79:c3:e7:
                    96:d4:73:ca:20:bf:75:2b:93:a5:bf:b2:66:ed:0d:
                    26:59:68:c2:6b:4d:2f:3a:f2:11:09:c1:66:52:5a:
                    a3:eb:aa:85:fb:ad:a0:35:c6:b0:cc:d7:11:f7:79:
                    ef:23:6f:9e:ff:82:59:9f:a1:45:ea:01:a5:a7:84:
                    9f:23:9d:c2:f6:2f:cc:d6:3f:b0:6c:6a:8e:36:9b:
                    c4:ad:0f:8d:78:9b:e6:7c:f8:fc:52:1f:9d:3a:19:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3B:6B:03:7F:14:8E:70:BE:FD:7B:AE:BA:43:64:9C:DF:E5:2D:77
            X509v3 Authority Key Identifier:
                keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/cjtrA38UjnC-_XuuukNknN_lLXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:df:26:7c:3a:64:66:ef:c1:5d:00:a9:05:ec:87:71:5c:
         db:d7:f3:16:e6:3b:45:d8:93:97:10:92:be:07:a0:04:5b:c5:
         34:51:38:e6:2a:e7:be:31:f6:a9:79:88:38:f1:d2:e5:cc:c6:
         87:e2:c3:e8:14:bd:33:3c:09:38:67:4e:16:37:7e:da:d4:3c:
         ad:24:88:b2:a1:e4:47:6e:2b:23:e7:fd:fa:c3:dc:15:13:0b:
         84:4f:33:a6:66:aa:1e:9c:02:04:79:f6:36:28:01:19:2b:73:
         42:fb:2d:42:67:fb:77:0b:98:d7:03:12:f8:7e:a2:17:b4:77:
         e3:8f:c3:0d:d8:3f:74:76:55:72:bd:d9:46:0e:3b:0e:61:c5:
         c8:17:ae:77:7e:98:be:66:f2:33:fa:95:dd:15:d4:fa:d5:53:
         27:00:0c:60:87:04:da:77:df:d5:b1:97:dc:bf:c7:c4:9c:d3:
         43:56:b2:c3:eb:7f:1c:5d:37:a8:3c:c3:59:e4:31:0b:49:28:
         f8:76:49:de:5f:18:88:fe:e1:23:47:37:00:f9:f7:19:d1:fa:
         74:7e:e7:e0:a4:dd:13:a1:da:9c:c8:f2:2e:7b:30:57:2e:80:
         e8:8c:81:85:e6:fc:93:5d:41:58:d8:ba:0b:b4:21:8f:cd:d4:
         e8:fa:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:13:58 2025 by rpki-client