Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/WWPhOI4IReKBksqZG8BVpzOjj5Q.roa
File:                     WWPhOI4IReKBksqZG8BVpzOjj5Q.roa (raw, json)
Hash identifier:          oT+YTdTiheybZcrIkag9osnsrYnLqcgkoT7fg/LGPeY=
Subject key identifier:   59:63:E1:38:8E:08:45:E2:81:92:CA:99:1B:C0:55:A7:33:A3:8F:94
Certificate issuer:       /CN=212268a7d5106a342219aab86b13d92be96d4cbc
Certificate serial:       17256970
Authority key identifier: 21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/WWPhOI4IReKBksqZG8BVpzOjj5Q.roa
Signing time:             Sat 01 Jan 2022 10:57:21 +0000
ROA not before:           Sat 01 Jan 2022 10:57:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49234
IP address blocks:        77.87.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388327792 (0x17256970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212268a7d5106a342219aab86b13d92be96d4cbc
        Validity
            Not Before: Jan  1 10:57:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5963e1388e0845e28192ca991bc055a733a38f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:e2:ea:8f:94:e8:47:4d:a5:a0:2d:fa:03:
                    d5:71:6f:89:43:1d:21:2c:1d:97:43:5a:0c:1b:00:
                    eb:eb:f7:39:7b:a8:80:77:d9:4a:46:ac:fc:61:0f:
                    9c:c7:ce:7d:f4:2d:4d:df:95:38:3f:55:c8:c3:04:
                    71:41:af:8e:51:75:70:b0:52:b5:c2:55:ac:fe:42:
                    6f:47:cb:26:49:7e:65:7e:8a:ce:28:76:10:e6:cb:
                    b5:d3:e3:d3:8e:25:1d:27:d8:09:aa:17:a4:48:a0:
                    9a:38:b9:1a:e5:36:34:63:31:56:e6:d3:0c:29:f6:
                    41:58:54:22:e9:2a:b5:c1:39:7e:67:bc:20:09:f8:
                    1f:88:b1:18:b9:74:dd:89:ef:a7:d7:0c:7b:20:c0:
                    54:87:91:47:ff:0b:f3:31:d5:49:3f:88:f1:a7:81:
                    f1:e1:15:c6:42:a9:fb:53:37:e2:10:a3:b6:b6:bd:
                    04:80:18:1a:34:82:8d:5c:cd:b8:c0:7e:2b:ff:a0:
                    6f:6e:fc:7b:d1:f6:e4:92:6f:f7:5d:d6:69:4d:27:
                    70:80:d5:30:85:95:47:8d:1b:f8:69:6c:24:00:d3:
                    88:05:93:c0:cf:c1:ae:87:0a:3c:fe:dd:8c:c8:27:
                    7f:4b:22:ee:2d:5e:c6:54:f3:a4:7d:d0:32:ad:3e:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:63:E1:38:8E:08:45:E2:81:92:CA:99:1B:C0:55:A7:33:A3:8F:94
            X509v3 Authority Key Identifier:
                keyid:21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/WWPhOI4IReKBksqZG8BVpzOjj5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.87.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:ac:dc:9e:75:42:55:ab:7a:43:8a:7f:e7:d2:c9:28:4c:71:
         db:f6:5f:8e:ce:90:44:90:b0:3d:2a:24:6d:0d:5b:aa:34:1b:
         58:cd:8b:65:36:ce:aa:b7:a8:99:68:6c:31:88:14:62:2d:77:
         4d:ac:87:10:fc:c0:54:19:04:d9:55:94:d0:2f:d8:5c:84:40:
         6a:63:f8:f8:60:8f:aa:28:6d:04:72:9e:31:e1:83:3f:34:7c:
         93:24:be:07:2a:70:89:12:92:83:bd:f6:a7:fa:05:03:16:82:
         aa:fb:5a:71:7b:cc:76:fe:fb:75:67:0d:d1:36:25:f8:00:c1:
         be:4b:c4:4e:fe:c3:d8:6e:e5:79:2a:5f:4d:69:5d:05:f1:c4:
         74:44:e8:d1:77:f6:b6:4b:c9:2d:0f:6b:71:55:dd:07:e8:6b:
         3f:10:81:66:94:28:1e:9c:5c:4e:db:67:de:36:c7:ca:6a:e6:
         c2:2a:58:fa:a6:fe:6a:d5:56:82:62:8b:58:92:49:9d:8c:12:
         c3:54:df:84:39:e3:81:c2:35:7a:fe:83:bd:f3:d7:5c:b7:de:
         4b:16:df:b5:6f:1f:db:e7:8f:c3:7d:a0:32:f8:42:e3:9b:3a:
         0c:67:56:39:38:41:15:e9:66:d5:78:37:b0:0d:4c:9a:94:26:
         e4:0d:27:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:45 2024 by rpki-client on console-ams.rpki-client.org