Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/UTk5wEZEeQo1Cvo5LzuslLuZI5U.roa
File:                     UTk5wEZEeQo1Cvo5LzuslLuZI5U.roa (raw, json)
Hash identifier:          YVtEHpPeHYM1JpvsP5BUze0mYVMvNjcfnqaOh2ULPYM=
Subject key identifier:   51:39:39:C0:46:44:79:0A:35:0A:FA:39:2F:3B:AC:94:BB:99:23:95
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       09A36515
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/UTk5wEZEeQo1Cvo5LzuslLuZI5U.roa
Signing time:             Tue 15 Mar 2022 23:40:04 +0000
ROA not before:           Tue 15 Mar 2022 23:40:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        77.83.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161703189 (0x9a36515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Mar 15 23:40:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=513939c04644790a350afa392f3bac94bb992395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c4:ba:b7:37:9f:59:35:e9:04:c8:cd:0d:90:
                    45:b2:38:44:45:97:e7:6a:c4:37:f4:80:e9:f9:b7:
                    41:7b:9b:8d:64:bb:0b:54:cb:f3:16:c4:04:ee:02:
                    04:ac:cb:22:79:8f:b8:af:81:47:f9:88:62:dd:96:
                    bf:27:5f:f6:47:85:b2:15:3d:f9:ec:39:95:79:d6:
                    77:ba:d5:ba:bc:06:62:3b:d4:52:68:67:da:f1:e3:
                    6c:aa:f4:6e:e0:a8:3e:2c:87:e9:bb:5c:27:c1:6e:
                    40:8e:4e:b3:43:04:95:86:b1:8c:10:c3:c5:8f:8b:
                    1d:45:45:5b:9d:06:23:8b:9d:ca:c0:88:57:5c:06:
                    17:ea:0d:0d:4a:7a:e7:2c:b1:2e:1c:ad:16:f5:4d:
                    8c:0f:2d:b3:7d:55:ec:89:5c:dc:35:51:72:e2:3a:
                    23:47:9d:0d:a2:fa:d9:b4:cf:9c:9a:1b:e1:b4:59:
                    10:3b:99:b2:b3:02:8a:62:2b:fc:76:03:29:4f:a2:
                    51:85:fa:0d:fc:61:69:f5:81:25:88:11:0c:ec:6e:
                    3b:b0:7a:62:7f:95:3b:95:fb:2f:88:30:02:8e:7c:
                    ed:4e:40:18:bd:65:ad:a0:49:0c:47:bc:3e:fe:6d:
                    64:22:4a:c2:68:cf:90:e0:b1:a7:e4:a0:22:58:4d:
                    b0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:39:39:C0:46:44:79:0A:35:0A:FA:39:2F:3B:AC:94:BB:99:23:95
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/UTk5wEZEeQo1Cvo5LzuslLuZI5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:27:15:0e:4e:bc:f2:a8:1c:c6:8f:23:56:db:45:80:62:f3:
         3e:82:0c:76:41:b6:35:83:a7:25:2d:52:4f:20:74:91:f8:4a:
         71:c2:e5:dc:2b:d5:ec:d8:aa:49:2b:a1:8b:69:eb:48:82:5c:
         f6:48:95:7b:47:6d:fd:4e:94:df:58:00:c0:17:ca:5a:9f:75:
         d7:2f:50:66:8b:34:9c:4d:cd:87:12:16:3a:3c:50:a5:20:dc:
         81:ad:cf:d3:2e:76:8b:c6:16:94:19:4e:d0:91:e1:db:0d:f3:
         da:86:3f:f2:41:cf:1f:07:b4:7a:96:ca:9c:b2:50:35:a7:0f:
         a8:05:d6:57:a0:8c:6b:c2:f3:2b:0a:e8:4a:c9:a1:f0:f1:8d:
         80:bb:12:a9:b9:5c:21:eb:2c:d5:bf:04:05:23:04:bb:ce:1a:
         82:39:6c:7b:0b:f8:d0:25:c2:e4:ab:bf:66:01:1f:b7:5b:b6:
         e4:ca:c8:64:20:97:e3:54:1a:09:3f:1d:0c:cd:c4:0f:c9:ba:
         ca:16:dd:6d:3f:49:01:02:e9:81:8a:91:a7:85:c3:08:6e:29:
         cb:9e:ca:cf:a8:24:5a:f9:b9:e9:7b:47:9d:b4:7a:0d:f2:86:
         c7:db:68:7f:f5:07:ea:17:f0:a1:7b:6f:71:4c:c3:4b:c0:3a:
         66:70:59:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org