Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa
File:                     GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa (raw, json)
Hash identifier:          vZKsH3v+CEUH8wNsPT59ekO+MKuXRzlgCRd9boAgfOY=
Subject key identifier:   19:93:99:FD:59:60:45:48:18:98:07:58:D0:A5:76:FF:60:C7:46:B8
Certificate issuer:       /CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Certificate serial:       0185738FC50D81B9A73E3406C741DBA08D22
Authority key identifier: 08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa
Signing time:             Mon 02 Jan 2023 17:37:59 +0000
ROA not before:           Mon 02 Jan 2023 17:37:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        77.246.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:8f:c5:0d:81:b9:a7:3e:34:06:c7:41:db:a0:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
        Validity
            Not Before: Jan  2 17:37:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=199399fd5960454818980758d0a576ff60c746b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:fa:2d:c4:3e:56:7b:a8:f4:9d:e3:c3:c9:
                    68:9e:fa:56:76:c3:61:cb:ac:51:13:cc:02:d4:dc:
                    36:78:c9:78:a8:5c:e9:02:8f:44:1b:79:13:64:a5:
                    06:ce:3b:85:d9:dd:eb:a7:fd:fb:3b:b8:79:5a:9e:
                    53:41:70:fc:00:5b:0b:67:fa:eb:34:05:ca:ce:ab:
                    8a:a0:8b:ac:1f:35:d6:6c:73:0a:f2:df:c8:87:da:
                    59:a0:11:9a:3e:2f:17:1a:59:ac:a1:ed:87:57:78:
                    1e:c6:10:7a:42:d2:a1:7e:3f:83:f2:8a:74:2d:28:
                    86:7a:e3:d1:8f:2e:ee:ed:a6:a3:5b:d8:3e:6e:7e:
                    71:a8:59:1f:78:9a:d9:ff:77:f3:bb:d3:c0:a4:96:
                    8b:ea:c4:bc:37:85:9e:19:25:c2:a1:9b:8c:10:0d:
                    ed:5b:58:d5:ff:b2:25:04:90:38:60:3b:b5:a5:97:
                    0a:35:41:25:6a:75:11:bd:21:0f:10:8c:4d:d7:df:
                    9f:7d:30:12:78:e0:5d:ed:d2:0c:54:53:de:a1:84:
                    7b:9a:c3:40:ca:d3:89:98:b8:b9:74:ff:a4:8a:e7:
                    18:12:47:a7:5c:2a:00:74:4d:a3:ab:6d:1c:b6:1c:
                    74:71:af:ba:3c:d5:15:b9:74:fa:36:3e:7e:54:0d:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:93:99:FD:59:60:45:48:18:98:07:58:D0:A5:76:FF:60:C7:46:B8
            X509v3 Authority Key Identifier:
                keyid:08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/GZOZ_VlgRUgYmAdY0KV2_2DHRrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:cb:0e:e5:2d:f5:c5:38:f2:54:62:7f:20:8e:3a:25:16:b7:
         76:93:03:e1:8c:e0:f4:d0:2c:90:97:2b:b5:ef:fc:35:de:0a:
         10:1a:70:7d:8f:19:93:34:f6:41:96:d2:45:f3:c7:1b:e3:ed:
         f7:b7:be:73:34:0b:65:fe:0d:e5:23:56:7c:5f:7b:7c:72:a6:
         f1:13:1f:8c:f5:35:1c:cb:fa:30:3a:ef:4c:fb:e9:ee:ce:d3:
         18:b9:e5:62:c3:06:72:57:97:4f:8a:46:65:99:3c:c4:f7:01:
         25:48:42:09:e6:a7:0d:2c:cc:4b:34:a0:28:54:e9:07:cb:60:
         bd:a0:1c:19:41:5b:49:2d:45:b7:bb:06:83:1e:55:10:1e:19:
         6b:73:19:07:1d:ab:e3:e0:e1:b6:38:c0:00:ee:79:81:20:0e:
         1e:c5:e4:30:b5:65:50:8a:0f:a7:ea:88:c3:e2:94:80:cf:10:
         7c:b9:ba:64:ab:4a:4e:d7:92:0f:ac:3a:82:a0:de:fa:f6:e3:
         2a:fd:c8:d1:b2:f2:b9:27:de:bd:73:bd:e4:e8:f7:7d:a1:96:
         29:e2:67:7a:42:b3:42:92:f5:98:69:9e:85:1f:5b:10:01:a8:
         e2:1c:88:fa:d1:f8:95:2e:c2:f9:51:a4:bc:89:fc:6b:94:3e:
         4b:df:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:45 2024 by rpki-client on console-fra.rpki-client.org