Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/YzxiHyehjaCfehdCqSmKw8boLSo.roa
File:                     YzxiHyehjaCfehdCqSmKw8boLSo.roa (raw, json)
Hash identifier:          k2ed6isxQrcxqr8qKnQ6ybDzU6Sg//DAXMUhBSeDJVc=
Subject key identifier:   63:3C:62:1F:27:A1:8D:A0:9F:7A:17:42:A9:29:8A:C3:C6:E8:2D:2A
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       095E1EB0
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/YzxiHyehjaCfehdCqSmKw8boLSo.roa
Signing time:             Sun 20 Feb 2022 16:58:25 +0000
ROA not before:           Sun 20 Feb 2022 16:58:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46573
IP address blocks:        77.83.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157163184 (0x95e1eb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Feb 20 16:58:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=633c621f27a18da09f7a1742a9298ac3c6e82d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:3d:c2:f4:54:d9:a4:c8:cb:a9:8c:90:38:
                    8a:f5:6d:f6:97:7b:20:40:35:3a:0b:a6:32:e8:d8:
                    06:d0:a3:e1:c7:92:6b:7d:44:95:06:8f:13:74:29:
                    41:89:c9:48:b0:43:8a:e1:00:35:ba:f5:c4:0e:5f:
                    71:69:58:7d:ea:99:0c:31:3f:08:01:92:0c:c0:ed:
                    11:8c:ff:16:78:a6:30:45:34:bb:6c:41:36:5a:35:
                    4f:37:04:34:d7:1e:4f:d4:32:09:3c:08:78:7d:e9:
                    d5:53:bd:3a:e6:1d:5d:51:a5:51:a9:71:f7:46:35:
                    da:f2:07:d5:4a:d2:95:28:8e:c9:98:a7:a0:dd:8d:
                    5b:ff:cb:98:4b:bb:26:f7:0a:41:40:b4:2b:aa:85:
                    4f:4a:f4:16:5e:3e:e1:08:1d:33:93:ac:23:9e:cf:
                    4e:de:b1:24:7a:7f:4d:20:f7:34:7a:16:43:b7:31:
                    ef:03:c3:22:81:b7:b6:f5:e5:8c:c6:34:e4:a4:bb:
                    49:ef:01:f3:db:b3:01:85:7f:f1:06:2a:00:85:11:
                    ee:5b:10:79:2b:db:82:a1:f6:83:9f:24:8d:30:6f:
                    88:1a:b4:91:e7:7e:7e:c9:36:d8:c4:49:ee:83:85:
                    de:53:39:fd:fa:a9:11:9a:60:6a:7d:6e:db:d7:97:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3C:62:1F:27:A1:8D:A0:9F:7A:17:42:A9:29:8A:C3:C6:E8:2D:2A
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/YzxiHyehjaCfehdCqSmKw8boLSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:90:4c:f6:87:4b:48:5e:95:28:29:a9:69:55:ef:d5:34:87:
         82:61:4b:fc:b6:82:54:40:d2:d0:1f:62:ca:c1:df:9c:cc:a1:
         a8:b0:99:0e:ef:0a:79:ad:14:fc:dd:72:62:2a:8c:af:4c:be:
         f4:9a:ab:f7:25:03:9b:13:c9:ea:b3:01:e3:44:ad:39:e8:a8:
         f8:21:74:dd:a8:19:68:a0:21:79:0d:b0:aa:95:0a:b1:16:aa:
         aa:73:cf:9f:3e:6b:6a:d3:5e:38:b3:a1:f2:92:0e:24:b3:22:
         ca:2a:10:6a:d6:01:e1:24:d0:7b:06:f1:cd:68:37:1a:21:19:
         f2:35:e1:b6:da:7b:b8:b9:b7:9e:37:5f:5a:09:35:c5:f4:81:
         56:f6:c5:ce:67:2a:1f:a6:c3:24:b3:47:36:1a:47:17:fe:0b:
         b8:f8:81:7c:9d:c4:f0:ae:56:90:e7:d8:d0:94:46:b7:96:eb:
         52:b3:e4:e3:10:09:cf:02:4a:63:21:51:10:f2:80:2f:6a:74:
         3c:5c:dd:92:e9:4c:ca:8a:0c:33:80:78:df:61:e6:4d:14:52:
         15:61:8b:72:df:9a:a3:a1:f6:f3:06:59:3e:8f:2d:8c:0f:fe:
         be:6c:9d:c9:0a:8f:86:ad:41:a9:1b:c0:50:61:d2:3b:50:bb:
         47:70:07:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org