Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZI05en2I1lHyTiCh6AssPdGoDD4.roa
File:                     ZI05en2I1lHyTiCh6AssPdGoDD4.roa (raw, json)
Hash identifier:          2wSv0RB7SjKggN3NfmL3aEXcy6BTNXvXCTLPPlhERIU=
Subject key identifier:   64:8D:39:7A:7D:88:D6:51:F2:4E:20:A1:E8:0B:2C:3D:D1:A8:0C:3E
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       0996B464
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZI05en2I1lHyTiCh6AssPdGoDD4.roa
Signing time:             Sat 12 Mar 2022 22:14:19 +0000
ROA not before:           Sat 12 Mar 2022 22:14:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        77.83.255.0/24 maxlen: 24
                          2.58.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160871524 (0x996b464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Mar 12 22:14:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=648d397a7d88d651f24e20a1e80b2c3dd1a80c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:de:2c:7b:56:5e:bd:86:88:a6:03:35:f5:
                    52:1a:23:24:d0:34:d3:e4:93:1c:c0:59:c7:6f:d3:
                    0e:87:5b:7e:9c:6a:22:de:4b:c0:d5:85:e4:1e:7e:
                    9f:f5:56:4b:d0:96:84:90:24:7b:aa:4f:e0:52:eb:
                    a5:44:ba:96:ef:e2:3b:e7:7d:20:f3:75:23:02:ec:
                    45:a6:0d:bd:18:b9:b1:e9:b5:aa:d1:12:7d:0f:be:
                    ec:01:28:73:94:76:ae:ae:07:28:45:95:8a:a3:62:
                    c2:78:29:f2:d0:9b:1a:99:8d:c0:b8:f8:8b:3e:1d:
                    a3:74:22:39:b7:7f:19:07:b9:9d:43:d1:41:d6:48:
                    bf:37:ec:e2:68:67:88:2d:b0:6d:9a:2e:ff:8c:60:
                    8b:7e:e4:79:58:c7:6a:6e:33:33:cf:51:42:c2:50:
                    8a:a3:39:63:9d:b7:9f:d8:d9:ed:12:01:39:dc:27:
                    3c:31:53:3e:ba:86:00:f6:88:bc:b0:d6:4c:99:f4:
                    14:55:83:19:3e:d5:de:5d:a0:88:6d:60:80:7c:2f:
                    45:4d:dc:5f:a7:d1:29:ea:e5:4c:6f:ea:21:a8:2a:
                    03:da:68:cc:37:3d:5b:ed:6f:b9:56:d1:d8:e3:b8:
                    36:08:8c:4a:12:2b:65:cc:38:d4:30:96:97:a1:24:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8D:39:7A:7D:88:D6:51:F2:4E:20:A1:E8:0B:2C:3D:D1:A8:0C:3E
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ZI05en2I1lHyTiCh6AssPdGoDD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.84.0/22
                  77.83.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:39:21:d4:eb:ac:44:e4:62:14:80:56:f4:62:0f:bf:34:b9:
         09:6a:83:7e:f0:99:ff:07:50:5b:28:5d:c6:59:b7:24:1b:18:
         7e:c4:ad:f2:e9:ec:93:f4:e2:d9:1b:ee:cf:7c:c9:96:00:5e:
         7d:ec:65:38:cc:b7:29:a6:df:ce:a6:9c:89:0f:00:15:86:1f:
         a7:b5:2b:e6:bf:b3:01:df:10:6f:c8:0a:70:8d:d1:8b:3d:af:
         2c:6b:c0:10:97:d7:1a:83:06:d0:65:9c:dd:93:65:12:69:ab:
         5b:93:d0:f4:9a:4d:0e:44:9a:4c:c0:28:77:1b:66:2b:4b:12:
         77:f1:6e:aa:9e:dd:aa:5a:3f:39:ae:9d:c5:0a:6d:9e:b6:b0:
         29:27:b1:f6:0a:6b:be:89:29:01:c4:a4:32:4f:f8:c4:68:46:
         b1:58:cf:23:d2:2e:a4:92:6a:9a:6c:ea:07:4e:9f:43:1f:38:
         6c:40:0e:b7:38:87:f9:97:25:94:0b:e6:0b:93:23:a0:b9:42:
         06:5d:78:d7:7b:ef:5d:19:15:70:21:22:46:23:e1:02:01:af:
         1f:ca:46:1a:65:56:29:85:88:5a:06:7d:3c:58:42:9f:15:96:
         5f:fd:93:d1:77:32:48:ac:3a:af:08:b4:21:f3:80:82:3b:5c:
         ad:8d:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org