Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/7auPkGYdWYxiufj_QWdGbb9UKjo.roa
File:                     7auPkGYdWYxiufj_QWdGbb9UKjo.roa (raw, json)
Hash identifier:          srdR9J3z05xaxwOndLkx0dIbidUlO8foyj1iZI94OK8=
Subject key identifier:   ED:AB:8F:90:66:1D:59:8C:62:B9:F8:FF:41:67:46:6D:BF:54:2A:3A
Certificate issuer:       /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial:       30E9CD03
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/7auPkGYdWYxiufj_QWdGbb9UKjo.roa
Signing time:             Sat 01 Jan 2022 10:55:39 +0000
ROA not before:           Sat 01 Jan 2022 10:55:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209203
IP address blocks:        77.78.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820628739 (0x30e9cd03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
        Validity
            Not Before: Jan  1 10:55:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=edab8f90661d598c62b9f8ff4167466dbf542a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:32:4d:fb:78:0f:73:53:3f:5d:67:89:a7:5c:
                    57:dd:5d:6f:18:4b:ba:34:c5:a7:74:cd:13:16:24:
                    30:1a:35:da:e6:54:ef:4b:76:e8:0a:b4:7c:e5:05:
                    ee:ee:29:32:a7:cb:e5:e0:24:a0:c7:31:7f:6d:64:
                    a5:c9:2c:62:4b:47:dc:80:ad:fd:54:80:e7:7b:85:
                    a1:f3:49:11:c0:bd:f5:f4:8c:d2:a2:79:2e:29:64:
                    d7:67:5c:bf:c2:1e:ab:0d:ef:c7:fd:21:f2:68:4d:
                    94:5c:b0:1a:36:32:0f:f1:0d:7d:bd:ac:ac:9b:a5:
                    e7:3c:a0:1b:65:6c:17:bf:df:b4:60:3e:00:72:d7:
                    d0:05:7b:29:9c:73:e2:6f:eb:df:ca:1b:69:a7:10:
                    fc:bf:26:86:e1:f5:e0:a3:13:01:3b:ae:35:d1:da:
                    11:9b:f3:f3:10:a3:43:14:6f:4a:98:cb:5b:24:b4:
                    a4:f9:b9:cd:08:46:c3:2a:d1:4b:29:ef:d9:f5:e2:
                    59:05:0d:5e:e0:96:24:34:14:2b:3c:79:df:ab:34:
                    0a:4d:84:7c:22:2b:c8:91:98:f3:b7:b3:40:7f:6e:
                    80:fb:84:5b:8e:91:89:b9:2c:5c:9f:ae:bb:55:ee:
                    07:76:0b:4b:6c:80:6d:32:93:f1:ba:8b:35:e3:86:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:8F:90:66:1D:59:8C:62:B9:F8:FF:41:67:46:6D:BF:54:2A:3A
            X509v3 Authority Key Identifier:
                keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/7auPkGYdWYxiufj_QWdGbb9UKjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.78.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:d2:71:8f:9d:0f:f7:99:66:45:c8:63:68:57:82:b4:f9:8c:
         90:87:76:3b:49:bf:bb:a2:38:e0:4b:5a:6f:6e:82:38:a0:bd:
         b1:f3:4c:17:ed:96:9c:9f:23:e0:e7:ba:82:e8:49:ff:50:22:
         03:9a:3f:4d:ed:60:69:37:4f:94:11:cb:ee:a2:8c:95:b8:0b:
         52:55:35:80:6c:7e:5c:72:00:d7:ca:30:fc:29:90:df:34:2d:
         8a:a3:52:3d:6c:b1:b0:26:1d:27:50:23:44:72:bb:a5:f0:07:
         b1:4c:04:e7:13:a8:1e:8c:4e:fc:3c:ed:07:b4:80:0f:0e:64:
         11:6d:3c:65:54:72:0e:4b:7c:40:7f:08:5f:44:dd:0e:c5:ef:
         60:6f:c2:59:4f:b7:08:9a:9d:dc:bf:e6:09:30:82:67:82:8a:
         78:2b:e9:86:7d:b4:b0:65:5a:f9:2c:5a:5a:6d:28:70:83:0a:
         24:48:66:0b:d0:ef:32:83:f5:a2:cf:b2:18:ed:27:bb:96:50:
         26:f9:8f:8c:f1:e5:11:21:ba:9e:77:2b:b7:12:7c:40:72:d9:
         ff:c1:d0:40:69:b1:27:d7:5d:56:81:74:99:33:cf:80:cd:b8:
         20:95:80:86:a3:28:05:78:66:b9:2b:29:74:2e:b4:ac:f8:0b:
         29:75:1d:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMOnNAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZGQyZTliM2E0ZDdiMjRiM2E2YWExNGYzZWRhM2YxNGZhMjljNzZiMB4XDTIyMDEw
MTEwNTUzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWRhYjhmOTA2NjFk
NTk4YzYyYjlmOGZmNDE2NzQ2NmRiZjU0MmEzYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAP0yTft4D3NTP11niadcV91dbxhLujTFp3TNExYkMBo12uZU
70t26Aq0fOUF7u4pMqfL5eAkoMcxf21kpcksYktH3ICt/VSA53uFofNJEcC99fSM
0qJ5Lilk12dcv8Ieqw3vx/0h8mhNlFywGjYyD/ENfb2srJul5zygG2VsF7/ftGA+
AHLX0AV7KZxz4m/r38obaacQ/L8mhuH14KMTATuuNdHaEZvz8xCjQxRvSpjLWyS0
pPm5zQhGwyrRSynv2fXiWQUNXuCWJDQUKzx536s0Ck2EfCIryJGY87ezQH9ugPuE
W46RibksXJ+uu1XuB3YLS2yAbTKT8bqLNeOGYjMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTtq4+QZh1ZjGK5+P9BZ0Ztv1QqOjAfBgNVHSMEGDAWgBRt0umzpNeySzpq
oU8+2j8U+inHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JkTHBzNlRYc2tzNmFxRlBQdG9fRlBvcHgycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvY2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8x
LzdhdVBrR1lkV1l4aXVmal9RV2RHYmI5VUtqby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
Y2Q5YmM4LTExYzUtNGY1YS1iYjI1LTQ1YWU3YjNkYWU2OC8xL2JkTHBzNlRYc2tz
NmFxRlBQdG9fRlBvcHgycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1OkDANBgkqhkiG9w0BAQsFAAOC
AQEAnNJxj50P95lmRchjaFeCtPmMkId2O0m/u6I44Etab26COKC9sfNMF+2WnJ8j
4Oe6guhJ/1AiA5o/Te1gaTdPlBHL7qKMlbgLUlU1gGx+XHIA18ow/CmQ3zQtiqNS
PWyxsCYdJ1AjRHK7pfAHsUwE5xOoHoxO/DztB7SADw5kEW08ZVRyDkt8QH8IX0Td
DsXvYG/CWU+3CJqd3L/mCTCCZ4KKeCvphn20sGVa+SxaWm0ocIMKJEhmC9DvMoP1
os+yGO0nu5ZQJvmPjPHlESG6nncrtxJ8QHLZ/8HQQGmxJ9ddVoF0mTPPgM24IJWA
hqMoBXhmuSspdC60rPgLKXUdqQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org