Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/mnTqD6JxzalQKrs1_613UZCyCB8.roa
File:                     mnTqD6JxzalQKrs1_613UZCyCB8.roa (raw, json)
Hash identifier:          KIkMDzXtqJdY6sAiWx23bCM1trCWt7ITXTdRcR8C27g=
Subject key identifier:   9A:74:EA:0F:A2:71:CD:A9:50:2A:BB:35:FF:AD:77:51:90:B2:08:1F
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       094F85C7
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/mnTqD6JxzalQKrs1_613UZCyCB8.roa
Signing time:             Mon 14 Feb 2022 21:19:21 +0000
ROA not before:           Mon 14 Feb 2022 21:19:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        45.13.150.0/23 maxlen: 24
                          77.83.253.0/24 maxlen: 24
                          77.83.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156206535 (0x94f85c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Feb 14 21:19:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a74ea0fa271cda9502abb35ffad775190b2081f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:5a:de:db:a9:7d:86:98:fa:de:62:68:1f:
                    f3:fe:30:ac:7e:a2:66:a7:03:e1:93:22:5d:b3:59:
                    0d:f2:fe:cf:b2:eb:62:51:44:0b:1f:51:e2:e5:4a:
                    53:bc:f5:f3:8a:d5:b9:26:a2:e7:25:25:3d:fb:ef:
                    1d:05:12:9d:e9:21:64:56:dd:1d:51:9c:68:3a:a7:
                    f1:e7:e0:f7:c4:96:db:23:b8:66:c3:49:76:d1:f2:
                    f2:e2:75:ee:e9:eb:8b:b0:e9:55:7a:59:45:ec:bd:
                    e1:62:06:6e:b5:7f:30:f0:2a:66:a8:2f:8b:60:09:
                    1f:42:90:6d:bd:dd:c9:ca:03:23:94:0c:3a:e3:b4:
                    f0:f7:86:78:3f:a4:9a:7b:3b:18:32:24:c9:26:ae:
                    8d:1b:a3:ca:29:83:33:bf:ab:25:7b:f9:ad:6c:8e:
                    5e:c5:9c:5a:70:5c:92:4b:0a:a1:a7:7e:f0:53:e5:
                    43:ae:74:27:47:37:ce:c6:24:e6:39:ce:d3:6f:31:
                    07:00:e1:93:ef:2a:59:83:5f:e4:5e:bf:45:38:4e:
                    e3:7c:67:d3:ac:0f:c2:88:d9:19:30:e5:3a:5e:cc:
                    31:72:5e:5f:e2:ed:92:28:44:e2:6c:f5:51:3a:da:
                    ef:43:87:4f:88:1d:49:fb:e6:b6:6b:ee:41:29:71:
                    52:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:74:EA:0F:A2:71:CD:A9:50:2A:BB:35:FF:AD:77:51:90:B2:08:1F
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/mnTqD6JxzalQKrs1_613UZCyCB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.150.0/23
                  77.83.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:42:60:27:9f:f4:07:c6:67:49:52:13:3c:da:94:9a:a2:7b:
         55:6b:f6:f0:73:4e:cd:92:ed:bd:f2:3d:2e:08:97:38:22:fb:
         bd:ff:da:f8:3e:3f:f9:7d:7b:99:8d:49:96:2f:2c:52:74:bc:
         c6:af:eb:de:dd:e7:e9:76:65:76:07:38:74:0a:b9:04:35:95:
         23:5d:c8:3a:e8:e6:0c:2d:55:3d:d4:1d:ac:78:a0:3f:6f:48:
         30:cd:6d:91:a6:b0:41:e0:42:0d:18:75:d7:27:a8:6e:9e:85:
         e3:d0:01:8c:9f:2b:d5:e7:14:37:89:e9:ea:b1:b4:bf:f3:03:
         f4:44:6a:0d:4d:e9:c4:88:6a:10:cb:26:2c:c3:be:e1:d2:4b:
         aa:df:6b:65:a8:eb:71:db:7f:26:c4:a1:9c:99:55:ca:0c:44:
         1c:e4:47:41:56:0b:fd:f6:71:95:37:43:15:14:a9:43:63:ce:
         96:00:3f:e5:19:09:6b:be:1a:6d:30:1a:69:aa:29:8d:81:cf:
         60:7b:03:ad:f2:f8:c8:a0:7b:69:a0:d1:29:fc:db:0a:7e:d8:
         8d:18:85:3f:5a:69:fb:65:fc:ef:02:51:a8:cf:ab:06:1d:fb:
         d3:b8:bf:c0:a9:16:c9:d8:6a:23:9e:0a:df:a4:23:5f:f0:0a:
         70:39:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org