Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/69QfyTHBI9-SPUZ7QapqGdc8lCg.roa
File:                     69QfyTHBI9-SPUZ7QapqGdc8lCg.roa (raw, json)
Hash identifier:          yNY7nL+7aIZN3wGwHsYLKNKhDYxPnZB7lHsmNKllfYA=
Subject key identifier:   EB:D4:1F:C9:31:C1:23:DF:92:3D:46:7B:41:AA:6A:19:D7:3C:94:28
Certificate issuer:       /CN=f5150a23aac420feecabfc9b5baf9f024056333a
Certificate serial:       01856DE64708E54872A56C08347B47167124
Authority key identifier: F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/69QfyTHBI9-SPUZ7QapqGdc8lCg.roa
Signing time:             Sun 01 Jan 2023 15:14:45 +0000
ROA not before:           Sun 01 Jan 2023 15:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50083
IP address blocks:        185.77.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:e6:47:08:e5:48:72:a5:6c:08:34:7b:47:16:71:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5150a23aac420feecabfc9b5baf9f024056333a
        Validity
            Not Before: Jan  1 15:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebd41fc931c123df923d467b41aa6a19d73c9428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fd:4d:b1:0a:1d:f6:29:f5:7b:a4:fc:f1:11:
                    90:48:e9:1e:35:26:3f:94:3c:ab:0a:45:b6:f5:3e:
                    5b:43:5f:3f:60:42:4c:7f:31:ac:d2:74:1e:c7:0f:
                    fd:4f:ff:91:9d:48:8b:db:7c:7d:b1:9a:3f:4b:2f:
                    73:f0:30:39:3d:29:a1:e0:d8:b4:11:21:5c:82:a5:
                    58:e6:f5:5a:c1:62:22:48:59:80:a6:69:5f:0d:2b:
                    56:49:7c:5f:b1:13:a4:b2:65:5c:58:76:7d:d5:31:
                    d6:6b:12:7c:32:ff:34:08:fa:d2:5a:b6:02:04:ab:
                    77:eb:25:9b:96:1d:9a:ca:85:78:df:aa:54:34:e8:
                    5a:9b:5e:19:ca:c5:ac:35:1a:8f:e7:dd:8e:fb:1f:
                    50:56:81:dd:54:dc:5a:81:61:b7:9b:42:51:27:dd:
                    29:6f:24:40:73:8f:5d:38:b5:c8:96:38:3e:d7:e6:
                    d0:d1:e5:0e:c1:9a:07:e9:38:d9:6f:12:c1:8c:35:
                    92:a6:2c:d1:17:de:be:3d:10:14:44:0d:d1:55:6b:
                    37:9f:e7:3c:a1:c5:45:15:df:2f:ed:18:a7:02:e1:
                    7b:36:6e:8e:a7:17:45:46:bd:9f:44:fb:2f:8c:2a:
                    dc:f0:cd:03:de:34:ec:3a:94:f8:24:58:70:93:67:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D4:1F:C9:31:C1:23:DF:92:3D:46:7B:41:AA:6A:19:D7:3C:94:28
            X509v3 Authority Key Identifier:
                keyid:F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/69QfyTHBI9-SPUZ7QapqGdc8lCg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:1b:77:c5:bf:3d:6c:92:c9:80:a7:3f:e9:cd:58:b9:26:
         54:67:da:ab:23:bc:62:51:1a:f6:73:1b:07:9f:43:3c:2f:00:
         2e:d2:56:40:8e:64:23:07:ae:18:18:f3:0b:aa:c0:67:21:46:
         12:54:3f:63:a0:84:cc:92:9e:a0:e8:76:34:d0:58:8b:28:14:
         9a:60:69:f7:aa:54:92:50:75:c1:61:f6:08:42:df:5d:13:63:
         95:d1:3f:df:bc:ce:07:d1:56:74:6e:be:34:d5:e0:03:19:4d:
         ad:e0:19:1d:05:2a:a5:4b:15:ec:d3:01:2f:e0:be:e6:c1:f0:
         10:cf:2c:4b:83:1b:65:5b:de:c2:46:fb:ab:8a:90:a9:6c:19:
         e9:6d:fa:1a:dd:7f:39:44:dd:90:67:4d:28:cc:bf:56:f3:9e:
         0b:b1:2b:45:01:24:eb:ae:a2:34:4f:b1:a9:e0:4b:0a:4e:9f:
         b7:70:ae:3f:44:6c:95:92:4c:ff:c8:d2:d7:aa:82:bf:4c:17:
         01:23:1d:37:e3:53:ec:54:39:4c:66:f5:47:2a:b4:80:35:21:
         69:0f:c3:07:77:7e:10:86:42:67:0e:95:8a:45:73:cf:d0:96:
         d0:bb:8e:db:16:7b:8c:48:f4:3a:62:7b:88:44:40:75:76:ae:
         98:64:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-fra.rpki-client.org