Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/zIWoW0DZ1VL4ehk91cGjtBNW8Lw.roa
File:                     zIWoW0DZ1VL4ehk91cGjtBNW8Lw.roa (raw, json)
Hash identifier:          1utUOvQR27r7YT5zviFDf/dNKgaWUEw8hrhpzrU/4Dw=
Subject key identifier:   CC:85:A8:5B:40:D9:D5:52:F8:7A:19:3D:D5:C1:A3:B4:13:56:F0:BC
Certificate issuer:       /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial:       018431DD2F17C535BBBF21355679EAB5E56B
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/zIWoW0DZ1VL4ehk91cGjtBNW8Lw.roa
Signing time:             Tue 01 Nov 2022 06:24:49 +0000
ROA not before:           Tue 01 Nov 2022 06:24:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        77.83.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:31:dd:2f:17:c5:35:bb:bf:21:35:56:79:ea:b5:e5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
        Validity
            Not Before: Nov  1 06:24:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc85a85b40d9d552f87a193dd5c1a3b41356f0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:5a:4d:f4:4f:b3:19:2c:40:5e:78:65:71:
                    f2:9e:99:df:3a:79:22:99:6b:55:07:1f:9f:f3:6b:
                    24:bf:fe:e2:e0:12:c5:bc:f1:8f:80:00:42:83:ea:
                    33:bf:8d:3e:19:ae:53:48:d8:cc:4f:21:a1:f2:bf:
                    0c:42:fb:6b:26:fd:ff:01:70:3f:92:b9:68:90:31:
                    7c:92:4c:b9:75:da:e7:71:61:22:e7:eb:b1:16:a4:
                    df:78:7b:76:67:14:db:57:13:10:f2:07:78:4f:be:
                    3e:0b:35:0e:09:db:28:2d:ba:67:c0:8b:8b:12:74:
                    16:cc:a8:50:40:62:00:8c:2a:e4:35:c7:15:1b:c1:
                    81:d3:d7:72:34:91:b1:2d:53:fe:8e:b6:da:8f:02:
                    d9:7a:a0:8d:79:82:b9:53:08:00:79:55:36:df:d5:
                    ad:41:e3:15:a6:ad:db:22:b1:f9:96:d7:00:36:8b:
                    96:29:4a:c5:c1:80:7c:3c:25:8b:f2:ae:cf:e0:74:
                    00:13:e9:5c:18:f4:92:3c:62:18:8c:1f:70:8c:50:
                    f1:11:43:21:62:5c:75:b3:83:bf:50:95:bf:fa:12:
                    5b:3f:2c:18:e2:df:79:35:ab:51:d7:b4:95:c1:0c:
                    9c:b8:a6:b3:43:2b:9d:5e:68:32:20:3f:67:77:6b:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:A8:5B:40:D9:D5:52:F8:7A:19:3D:D5:C1:A3:B4:13:56:F0:BC
            X509v3 Authority Key Identifier:
                keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/zIWoW0DZ1VL4ehk91cGjtBNW8Lw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a4:42:c3:6b:33:44:21:cd:2c:22:e0:22:15:f1:1d:b4:14:
         9a:46:cd:8f:9d:c2:5b:2d:59:dc:9b:da:89:44:ae:cd:81:1e:
         69:d2:f9:26:03:f2:dd:f9:09:8a:b3:f4:18:9d:b3:3e:a6:4e:
         1a:20:1f:fe:d3:86:fa:9c:51:82:98:0f:c3:ae:a1:49:5f:a3:
         b7:f5:e0:bb:df:6b:05:bd:ba:90:37:3f:7a:f3:64:0c:db:e7:
         f0:39:c1:e0:a8:a9:a1:da:9e:ea:b1:20:d9:d7:ab:83:b7:77:
         df:71:88:6a:18:1a:ee:2c:ba:44:ad:5d:ad:66:e6:f0:31:59:
         48:ee:67:fe:20:a8:ec:8a:16:55:34:b0:c2:b5:8c:81:d4:8c:
         8b:5b:8a:60:da:ec:9e:09:6c:5f:83:5f:21:bf:49:49:2a:37:
         48:2f:08:71:c5:43:53:a0:a1:59:25:9a:e0:ae:01:82:3a:49:
         72:8e:ef:7a:78:6b:94:ff:8e:a3:d6:0f:47:ee:14:b4:16:cd:
         64:cd:65:80:c8:1f:a7:1d:1d:67:0c:ce:26:f9:39:5e:ae:a9:
         83:28:27:d9:ef:82:28:ec:28:ff:76:09:7a:dc:db:45:5d:56:
         e4:dd:04:2b:16:b7:2d:27:b5:25:c1:48:d1:73:df:a2:a6:fb:
         a1:0f:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org