Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/IalDY4I7EIVL1BbRMEqCp5JrGR4.roa
File:                     IalDY4I7EIVL1BbRMEqCp5JrGR4.roa (raw, json)
Hash identifier:          z96j5pI+U6mUFv7/WdkqZ+NHljvv8GNR+xuP5lhsQwY=
Subject key identifier:   21:A9:43:63:82:3B:10:85:4B:D4:16:D1:30:4A:82:A7:92:6B:19:1E
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0957351F
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/IalDY4I7EIVL1BbRMEqCp5JrGR4.roa
Signing time:             Wed 16 Feb 2022 19:03:52 +0000
ROA not before:           Wed 16 Feb 2022 19:03:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     262287
IP address blocks:        77.83.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156710175 (0x957351f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Feb 16 19:03:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=21a94363823b10854bd416d1304a82a7926b191e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:d6:6b:de:1e:31:fb:03:2a:cc:f3:bc:d1:
                    d3:59:20:19:07:9d:4b:c5:02:5f:97:10:be:48:41:
                    86:4a:2c:e1:65:83:ff:6c:ed:3b:1a:03:aa:d0:04:
                    0f:7f:bc:25:0e:b1:e4:6d:cc:76:ba:dd:e7:bd:8b:
                    30:17:57:03:d4:2f:fe:48:fb:2b:e2:75:ec:f6:f0:
                    31:be:20:c2:a3:8b:e6:13:ac:e2:ae:a9:92:e9:95:
                    b1:fb:ac:4f:0a:de:ec:b3:60:d4:dd:6b:71:4a:cb:
                    57:f0:f1:09:8b:fc:b2:13:55:09:e2:46:96:0c:1a:
                    af:41:4c:eb:a0:2a:dc:6c:4d:72:12:3a:06:0d:c2:
                    3d:29:f5:74:b7:cf:fe:8c:ba:d1:be:73:99:6e:f2:
                    d4:d5:5f:32:47:fd:c0:91:a1:21:54:ac:d1:f5:fb:
                    c1:34:48:22:dd:9b:c9:e5:91:2b:ad:71:4a:04:ba:
                    25:30:31:53:1c:14:ec:da:83:19:f2:a9:fe:03:21:
                    0a:0f:d8:4d:08:27:5e:6a:36:72:ae:53:1a:ac:1f:
                    1e:c1:e1:25:27:45:e0:ea:27:e8:d1:a9:3f:1b:77:
                    ca:28:21:fe:60:7b:03:29:7c:a6:5b:7c:29:77:34:
                    38:86:c7:f2:3b:07:4d:80:bf:ce:19:85:dc:cd:51:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A9:43:63:82:3B:10:85:4B:D4:16:D1:30:4A:82:A7:92:6B:19:1E
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/IalDY4I7EIVL1BbRMEqCp5JrGR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:a8:0b:97:2e:6b:02:28:be:43:d3:29:b3:55:63:e4:4a:de:
         0e:b0:9d:25:05:89:c2:d5:ec:05:85:81:11:15:25:d2:6d:c9:
         e6:3e:9f:10:32:5f:1b:66:0b:cc:e8:3d:73:97:2b:ce:7e:a5:
         1c:65:d0:17:6f:7f:04:c4:d7:21:48:ee:9c:49:35:92:c4:1b:
         60:fa:38:41:81:46:b8:64:f7:4d:f1:b1:6e:7e:09:b7:e1:8f:
         44:68:83:f6:e0:aa:fc:9a:58:34:02:7a:7b:7c:a7:5f:04:be:
         16:22:81:43:a7:e7:8f:36:53:5b:37:da:d5:81:19:11:29:bd:
         34:6d:7e:0b:1f:a9:92:e4:6f:a3:a5:d2:4b:42:4b:a2:76:a3:
         03:15:e5:2b:27:91:fb:d3:9f:c5:06:6c:79:52:dc:f1:80:09:
         33:c2:bd:11:3e:52:89:9e:c3:70:7c:43:e9:d2:0d:eb:5f:70:
         7b:d3:be:61:2c:a4:38:7e:c3:08:a4:84:63:71:cd:4e:f8:10:
         b8:47:83:35:64:e2:f3:56:b0:82:54:e9:16:92:a1:9d:f8:64:
         7f:ca:41:8d:8f:fc:32:c4:55:39:5a:09:ef:78:95:78:dc:80:
         c8:5c:af:d2:07:ba:5b:5d:f1:a8:70:51:19:ee:ef:e9:28:6c:
         3d:f9:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org