Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/wWSlQtTQH67zEyhzDN0yCUOxJtU.roa
File:                     wWSlQtTQH67zEyhzDN0yCUOxJtU.roa (raw, json)
Hash identifier:          37qSjcZatIj/b24u/8P38OVgTxL5ssD6L18TjlHcHSs=
Subject key identifier:   C1:64:A5:42:D4:D0:1F:AE:F3:13:28:73:0C:DD:32:09:43:B1:26:D5
Certificate issuer:       /CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Certificate serial:       0185738FC619882510F485F264703179E59F
Authority key identifier: 08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/wWSlQtTQH67zEyhzDN0yCUOxJtU.roa
Signing time:             Mon 02 Jan 2023 17:38:00 +0000
ROA not before:           Mon 02 Jan 2023 17:38:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211373
IP address blocks:        77.246.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:8f:c6:19:88:25:10:f4:85:f2:64:70:31:79:e5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
        Validity
            Not Before: Jan  2 17:38:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c164a542d4d01faef31328730cdd320943b126d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2d:b3:57:ef:7a:2a:81:a4:fd:43:a4:1f:1d:
                    b0:ae:81:76:84:01:e9:39:b2:fb:0a:04:3d:ba:79:
                    4c:e1:dc:eb:bc:c8:8a:94:19:23:9b:2f:03:2a:be:
                    7a:71:21:dc:b1:f6:bb:89:1e:42:b6:3b:19:f3:c1:
                    37:9c:c3:c3:c5:50:dc:af:42:2e:be:c1:46:0a:62:
                    3c:97:77:d8:e3:b4:a2:5f:34:be:26:d7:03:f7:e2:
                    b6:82:5c:1d:20:f0:c9:42:56:1b:33:49:9e:3c:96:
                    7b:ad:c9:48:33:bf:54:07:41:3f:93:f8:7b:d6:97:
                    70:be:22:d3:fe:91:30:d3:8d:26:f6:ff:72:77:09:
                    6c:40:c1:be:a3:2c:39:d6:11:5b:38:95:8a:c2:4b:
                    f0:7c:fb:a1:85:e2:f2:f7:34:f6:47:de:e1:f3:c3:
                    6d:8b:0c:0e:e5:5d:58:88:b6:ee:df:24:55:d3:41:
                    cd:1a:4d:ac:3f:71:bf:76:44:16:b0:9a:e9:be:02:
                    22:44:51:38:97:4f:1f:59:1c:c6:81:30:27:58:07:
                    02:6b:d5:65:1a:08:59:dc:2e:d1:04:54:98:3d:3b:
                    70:cd:85:2b:11:cf:2a:5e:5b:9d:0e:9c:66:1c:b4:
                    53:1f:c8:fe:d8:d4:f7:08:09:b2:bc:75:b7:d6:08:
                    22:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:64:A5:42:D4:D0:1F:AE:F3:13:28:73:0C:DD:32:09:43:B1:26:D5
            X509v3 Authority Key Identifier:
                keyid:08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/wWSlQtTQH67zEyhzDN0yCUOxJtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:fd:7e:8b:a2:95:ae:77:19:33:d3:4a:02:a2:67:4d:33:fc:
         d6:89:f3:7d:8f:31:fa:07:d0:9c:40:4d:63:a4:ff:8f:93:60:
         a8:cc:c4:cb:7b:61:eb:eb:a1:93:85:a4:a8:91:16:d2:9a:41:
         f3:03:96:23:92:34:46:3c:aa:29:b0:2a:68:39:c6:5d:f8:39:
         b7:fd:d4:8f:40:bf:65:f7:a1:05:3b:79:bc:86:ae:79:9b:0d:
         0e:68:aa:ec:1d:0a:39:cb:36:3a:b1:f7:50:d6:aa:d9:26:8f:
         c8:13:52:62:ef:b4:ca:48:97:dc:7f:37:f7:d7:d5:6a:17:ef:
         cc:56:07:1d:36:6b:c2:b0:d4:1e:7f:f1:fe:ed:7c:55:e1:f5:
         21:36:5e:a2:5a:f4:9e:61:0e:71:fe:03:2a:5a:ce:76:0b:a6:
         e0:16:1b:94:0d:7a:51:53:23:18:3f:75:a2:99:66:30:69:71:
         4a:44:57:65:92:59:4b:49:33:d6:64:74:d2:8d:f8:5a:8d:92:
         bf:96:02:c0:df:5f:6f:67:71:f3:f6:f6:7d:76:6f:d1:55:27:
         72:83:53:e7:78:07:7e:1f:ef:c0:a0:64:ca:a5:98:3a:8a:63:
         1a:a6:b8:1a:8f:9e:f1:47:f9:d2:9b:24:59:dc:2c:16:ec:7e:
         f3:03:91:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:46 2024 by rpki-client on console-fra.rpki-client.org