Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/b77ex_tlMmCh1NRlI6ztiPi7-YA.roa
File:                     b77ex_tlMmCh1NRlI6ztiPi7-YA.roa (raw, json)
Hash identifier:          3eRKWnvy01V2l6ayV7zaoLygdMTyGxaBg0rAdRHq7Lo=
Subject key identifier:   6F:BE:DE:C7:FB:65:32:60:A1:D4:D4:65:23:AC:ED:88:F8:BB:F9:80
Certificate issuer:       /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial:       2AAE896B
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/b77ex_tlMmCh1NRlI6ztiPi7-YA.roa
Signing time:             Sat 01 Jan 2022 09:03:31 +0000
ROA not before:           Sat 01 Jan 2022 09:03:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49304
IP address blocks:        92.255.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716081515 (0x2aae896b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8912e418225da95d6a21302407923ff94549572b
        Validity
            Not Before: Jan  1 09:03:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6fbedec7fb653260a1d4d46523aced88f8bbf980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:6a:41:4f:ba:d0:b5:dd:89:b2:4a:b5:f3:
                    c2:57:8b:b2:3b:f8:df:b5:50:64:88:92:21:42:33:
                    47:ac:b1:d1:b6:16:9b:86:84:ae:ab:36:04:3f:17:
                    e4:e3:00:79:c4:65:25:43:d5:0d:f7:68:da:e7:72:
                    d6:34:02:56:a0:15:05:2c:44:ed:e1:c8:d0:18:c3:
                    05:83:ab:38:b8:e6:6b:a3:69:55:c0:07:22:70:49:
                    a0:3d:fd:13:5f:19:27:9e:b9:bf:cd:bd:18:50:fb:
                    ec:c9:7c:6e:e3:96:d1:1f:7f:52:1b:af:2d:7e:35:
                    50:f9:7d:f9:f8:ff:16:ba:aa:51:26:f6:a5:43:cb:
                    fa:31:f9:43:83:dc:bb:fd:09:47:0f:da:88:26:30:
                    77:57:5d:fc:2f:a4:21:62:4e:d2:09:be:12:d8:0b:
                    a1:b6:d0:bb:c7:cd:35:ab:bf:c4:e9:fe:84:4e:98:
                    2e:ad:73:92:a4:1d:63:9f:82:df:8e:67:a1:1d:bb:
                    22:6f:57:56:d4:fa:28:2f:86:b0:59:1b:f5:b9:63:
                    44:8c:64:e7:13:bd:52:ee:cc:e0:9c:d9:3d:3d:a9:
                    a8:24:d4:90:b0:12:f7:36:97:b2:66:b5:91:8d:f2:
                    8e:01:67:ee:dc:ac:3c:e2:fc:81:f6:ff:75:70:3c:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BE:DE:C7:FB:65:32:60:A1:D4:D4:65:23:AC:ED:88:F8:BB:F9:80
            X509v3 Authority Key Identifier:
                keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/b77ex_tlMmCh1NRlI6ztiPi7-YA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.255.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:2d:cd:08:2b:6f:56:9b:45:3d:00:b6:38:fa:e9:1e:46:73:
         d0:25:bc:40:d5:c8:0c:c5:6c:43:7b:45:34:84:30:27:7c:53:
         ad:6c:6c:ef:dc:a3:bf:cd:46:db:9d:e2:79:53:c6:34:79:f6:
         5c:9a:b3:f8:3c:64:0c:44:43:e6:c1:9a:55:7f:72:6b:1d:39:
         f5:40:7e:43:42:4e:32:03:31:e8:bc:68:ea:71:40:c1:c2:52:
         55:ff:25:a4:21:51:32:10:ac:39:c7:be:45:0d:4c:7c:17:66:
         51:49:aa:5b:75:ed:d1:dd:80:2a:a7:da:19:44:54:bd:2e:86:
         3c:50:10:6f:b3:8c:b6:14:31:d0:79:55:13:e5:e3:ac:d6:21:
         a3:d1:39:40:78:1e:33:f6:a4:e8:4b:74:b5:4d:e2:59:fc:b1:
         65:bc:6d:e9:d5:d6:e4:12:93:19:b5:8d:35:01:fa:f0:27:3d:
         39:00:64:4d:8b:6d:23:50:21:68:4e:89:1b:0e:8d:58:bf:30:
         5b:e2:7e:17:91:f4:37:2e:e7:79:87:b1:d2:98:c7:b5:fd:73:
         b4:43:d9:63:1a:7c:3d:79:42:40:71:b1:e2:0d:74:61:1c:81:
         39:6a:97:7b:67:c0:58:12:7c:f8:59:a7:1f:bf:ca:ab:57:8d:
         9a:7f:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-fra.rpki-client.org