Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/Bw3vB5WtjGy3W2tFfZICmyVsp5E.roa
File:                     Bw3vB5WtjGy3W2tFfZICmyVsp5E.roa (raw, json)
Hash identifier:          LsfTvqoGyZLpbPVNOSNOuHHCLSBC4hElOeP4oMs3PJs=
Subject key identifier:   07:0D:EF:07:95:AD:8C:6C:B7:5B:6B:45:7D:92:02:9B:25:6C:A7:91
Certificate issuer:       /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial:       018CC6B84BD5F53B4B9A947667245A23EB11
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/Bw3vB5WtjGy3W2tFfZICmyVsp5E.roa
Signing time:             Mon 01 Jan 2024 20:30:15 +0000
ROA not before:           Mon 01 Jan 2024 20:30:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41171
IP address blocks:        178.212.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:4b:d5:f5:3b:4b:9a:94:76:67:24:5a:23:eb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
        Validity
            Not Before: Jan  1 20:30:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=070def0795ad8c6cb75b6b457d92029b256ca791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:24:44:6f:79:33:3d:d3:2d:a8:22:03:a5:12:
                    b9:92:93:9b:6f:7e:7f:4f:86:a5:93:ea:93:3b:77:
                    ac:12:8f:83:88:fd:54:6b:74:85:e2:8a:1a:ba:27:
                    18:bb:96:47:76:05:2a:b4:f2:c6:77:e7:c1:13:24:
                    06:d5:29:79:38:30:fe:78:c6:b7:5c:0f:d4:ea:41:
                    9e:66:2d:51:a9:f9:97:18:f0:01:a8:7f:de:b9:7f:
                    d7:3c:0d:7c:a9:36:42:60:80:79:48:aa:1a:6f:eb:
                    1a:33:32:b5:74:8f:5c:10:d4:7d:9e:ae:64:ac:e4:
                    d2:89:50:47:75:ec:f2:42:aa:a9:d7:83:dd:f7:67:
                    63:49:49:4d:26:e6:6d:7c:77:f4:7d:29:a7:5f:b2:
                    7d:1c:ee:42:bf:1a:7b:7a:b6:53:e7:b9:28:16:5c:
                    de:70:80:7c:45:e9:eb:bd:d7:dd:c5:48:f5:05:92:
                    65:55:fe:a4:3b:b3:20:5f:b5:40:9a:c6:a8:d6:2a:
                    c4:6c:91:2d:de:f5:5b:1f:ad:50:c9:5d:35:45:73:
                    1f:a8:45:d5:2d:7f:95:20:8c:98:5a:53:b2:b9:56:
                    dd:79:66:f1:37:71:71:e2:e0:30:45:e2:99:6b:ed:
                    76:df:6c:f1:87:16:a9:3d:e0:ad:33:8b:32:39:8b:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:EF:07:95:AD:8C:6C:B7:5B:6B:45:7D:92:02:9B:25:6C:A7:91
            X509v3 Authority Key Identifier:
                keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/Bw3vB5WtjGy3W2tFfZICmyVsp5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ae:a2:2f:ab:03:f7:a3:6f:56:e7:ac:38:24:29:d7:f4:32:
         2b:3c:08:f8:63:b6:df:df:32:81:84:f3:14:72:f0:3f:50:4d:
         eb:c6:ce:4e:25:7a:bf:1e:01:40:35:72:5c:90:4e:9d:a3:fd:
         06:28:ea:3b:37:e6:a0:26:19:a3:e1:6f:0c:1d:b3:d8:82:12:
         a6:19:2b:12:5a:d9:b2:15:6c:b7:b2:61:e3:f2:d9:ed:37:7e:
         90:3e:a7:31:a6:72:52:6d:7a:24:b1:c2:94:58:2f:77:f6:c1:
         a1:e6:82:14:f6:04:94:bd:9a:df:67:46:b9:3c:5f:2a:c1:7d:
         6e:0e:23:89:dc:21:4c:2e:66:7b:b5:e0:76:13:e8:c1:55:af:
         09:bc:df:5c:25:5b:6f:81:5b:59:a9:4d:ee:9d:5e:08:41:71:
         0c:4e:9c:70:f5:e6:69:c7:ab:10:98:c7:4f:23:0e:db:43:95:
         2f:41:14:8b:7a:45:22:15:6e:71:68:e1:57:41:3f:9c:7c:df:
         df:b7:3e:87:40:ed:01:8f:36:74:e7:01:85:a1:75:c9:c4:fb:
         d4:c2:5f:82:b5:07:f6:c0:2e:82:5a:c3:e6:38:3d:6d:f3:32:
         e0:16:cd:9d:20:64:b4:d8:e7:e3:27:4d:2e:61:10:a8:a9:71:
         e3:eb:05:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 12:38:59 2024 by rpki-client on console-ams.rpki-client.org