Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/KENWy9Qjo-SQ4GQ7mKpuUUzx-Kg.roa
File:                     KENWy9Qjo-SQ4GQ7mKpuUUzx-Kg.roa (raw, json)
Hash identifier:          JbNNkrgatQmJ8P5UdW2cX431fcVMaRvZZr0aUAXwgM4=
Subject key identifier:   28:43:56:CB:D4:23:A3:E4:90:E0:64:3B:98:AA:6E:51:4C:F1:F8:A8
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       09A13C55
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/KENWy9Qjo-SQ4GQ7mKpuUUzx-Kg.roa
Signing time:             Tue 15 Mar 2022 18:57:27 +0000
ROA not before:           Tue 15 Mar 2022 18:57:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210619
IP address blocks:        77.83.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161561685 (0x9a13c55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Mar 15 18:57:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=284356cbd423a3e490e0643b98aa6e514cf1f8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:00:83:14:88:50:a4:e7:67:b2:b8:a6:74:
                    1e:5a:53:b4:95:e7:fb:1f:e7:7d:9e:e6:09:66:b5:
                    8f:c4:bc:ca:8c:47:12:ff:6e:0f:d1:a8:54:f5:37:
                    4a:53:ab:5a:9b:a2:f9:4e:31:cb:96:91:df:2a:84:
                    0c:ab:1d:12:5c:3c:7d:15:05:3a:90:bc:cd:e9:72:
                    81:f3:53:cc:1c:ca:e2:e1:e5:17:e1:ea:a4:fc:04:
                    f7:32:ef:29:44:56:7d:6d:d4:cd:4d:bf:83:58:d0:
                    6c:a4:cb:82:20:83:90:16:1c:54:c7:00:10:51:1c:
                    24:31:ad:e5:91:1d:d4:7d:4b:b2:97:22:d0:f5:15:
                    2f:9b:c2:24:35:14:7f:f7:64:92:69:a6:1a:ea:11:
                    98:2d:74:f2:bf:a7:ad:6c:c3:1c:1b:1a:74:d7:66:
                    1f:31:3c:86:d5:88:0a:d4:91:b1:a0:d3:f7:15:b6:
                    32:1d:79:1e:57:50:60:0d:f8:ec:af:2b:53:79:1c:
                    10:14:0d:ba:09:24:97:87:c5:1c:07:d9:dc:30:cd:
                    56:50:0c:31:9c:ba:42:26:ff:ff:f3:c1:cc:a3:41:
                    05:13:2f:33:00:e9:28:31:b5:4a:5f:a9:f3:c3:41:
                    43:c2:f9:66:63:aa:d5:69:79:a8:ab:19:64:4d:69:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:43:56:CB:D4:23:A3:E4:90:E0:64:3B:98:AA:6E:51:4C:F1:F8:A8
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/KENWy9Qjo-SQ4GQ7mKpuUUzx-Kg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f3:5e:ce:75:03:ee:5f:d0:82:2b:b9:10:b5:eb:a8:a7:48:44:
         ae:71:db:67:d2:cb:a9:2e:1c:5d:fc:61:7f:58:97:08:77:bd:
         81:33:ea:66:bf:00:6f:03:1e:88:8a:0c:a9:3c:83:9f:de:2e:
         85:a7:24:47:7a:89:0d:fa:58:8e:d7:ae:05:45:ac:81:39:27:
         cf:85:60:ed:40:2a:63:9d:7f:b4:e5:46:8b:8d:2b:48:34:fa:
         d4:55:a8:96:9e:b1:d5:4c:5a:4d:92:5a:60:af:57:76:98:d5:
         d1:10:8d:18:91:c8:af:bd:23:64:07:ac:1c:32:ad:f7:d4:07:
         66:44:c2:51:29:4a:2d:76:7b:0d:0a:58:fa:a3:bf:e1:0c:1b:
         a4:ac:d9:17:f6:71:8e:ac:e0:cb:10:9c:4f:e9:88:38:d6:4a:
         6d:aa:c4:ae:72:79:c8:4d:e9:6d:ac:58:5f:2a:fc:dd:cb:2c:
         26:d2:fd:b2:02:0f:4d:e9:9c:ec:96:5b:a9:61:10:a2:14:29:
         b8:87:17:6e:0c:d7:83:1a:61:f0:53:22:a2:a0:ff:e1:e3:8b:
         ac:30:d6:4c:98:a6:0a:a8:49:08:c5:2b:f1:ac:e6:02:7f:23:
         fe:11:2c:42:70:42:b1:8b:97:4a:49:21:af:cb:5f:b0:f1:a7:
         41:33:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org