Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/jUUTNGJLCbtqHYKN4Jrur0qpdaY.roa
File:                     jUUTNGJLCbtqHYKN4Jrur0qpdaY.roa (raw, json)
Hash identifier:          a0sYVSyM3Q/eZ1zRCiE5H3ntZ4umdEUA1UoEoil+o1s=
Subject key identifier:   8D:45:13:34:62:4B:09:BB:6A:1D:82:8D:E0:9A:EE:AF:4A:A9:75:A6
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       0193C5BA5261461F8F0ECCC758E33D16ADA6
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/jUUTNGJLCbtqHYKN4Jrur0qpdaY.roa
Signing time:             Sat 14 Dec 2024 15:12:22 +0000
ROA not before:           Sat 14 Dec 2024 15:12:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        77.90.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:c5:ba:52:61:46:1f:8f:0e:cc:c7:58:e3:3d:16:ad:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Dec 14 15:12:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8d451334624b09bb6a1d828de09aeeaf4aa975a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:11:32:4e:2c:1a:c4:3b:bf:1a:c3:32:11:
                    c6:6a:7f:98:a8:0b:c8:21:ac:c0:13:0c:c9:7b:6a:
                    9f:08:12:dd:0b:2f:12:b9:c5:ea:32:6b:10:38:71:
                    db:e0:02:0f:78:e3:c6:00:84:3b:8f:03:25:81:f7:
                    a4:6b:39:9f:b1:cc:39:31:ec:65:76:8e:ee:d0:a6:
                    bb:40:51:f9:c6:f4:9c:05:51:89:32:f4:45:4f:d4:
                    8b:30:81:87:c7:1b:ee:3d:ca:36:51:3a:59:1b:e5:
                    06:b2:2b:10:72:38:a8:52:13:6d:75:c0:ee:c6:df:
                    c5:5b:cb:53:9e:82:04:69:f0:d9:97:e9:8d:22:8f:
                    22:5a:29:7f:76:46:9a:c1:d0:52:20:8b:f6:1d:37:
                    8b:aa:80:36:fd:28:0d:d8:d5:64:d5:79:e1:50:81:
                    be:0e:a0:fb:d9:2a:3c:ab:ad:37:17:51:b8:21:05:
                    a0:1d:07:64:44:9c:72:30:25:b1:25:56:ad:c9:76:
                    22:bc:b6:41:8f:2a:52:a2:7c:55:0b:b3:c1:67:9d:
                    e1:a5:32:24:65:23:15:e2:c6:75:3c:27:7e:ad:9e:
                    94:e4:e4:78:22:f7:91:da:30:be:d5:1c:fc:2c:12:
                    d0:6b:e6:80:c3:65:4c:a4:6c:8f:57:29:d9:0d:ed:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:45:13:34:62:4B:09:BB:6A:1D:82:8D:E0:9A:EE:AF:4A:A9:75:A6
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/jUUTNGJLCbtqHYKN4Jrur0qpdaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.90.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:5d:51:10:ef:1d:a8:87:b7:57:b9:e2:ed:b2:e6:2f:c0:
         9d:f1:35:fd:e9:d5:88:d3:f6:82:a9:aa:12:5e:44:e6:65:ab:
         1b:c1:d5:a9:2d:39:3b:01:3d:14:11:d1:77:26:7e:3a:5f:89:
         b5:77:c4:a2:72:50:31:69:1b:b6:e4:d8:a8:b9:be:4b:e0:63:
         13:2f:db:4a:bc:49:f7:f8:77:83:37:3c:f7:6b:81:74:ec:ec:
         5b:49:b3:72:8f:8b:f5:86:bb:04:7c:19:f2:0d:42:ff:f1:58:
         8d:88:16:95:99:53:77:23:52:3f:f4:34:26:8d:13:f9:36:f7:
         49:7b:f6:b1:94:ec:01:ed:5b:d0:23:c6:9f:a7:b6:96:94:ba:
         78:34:e6:8c:d3:71:0c:4a:bc:9a:27:38:23:1b:37:f2:16:10:
         d4:53:19:81:c2:42:70:1d:18:9d:81:e2:60:4e:05:fe:d7:15:
         e1:08:34:b4:7e:6f:93:0c:06:8b:02:f1:0c:76:91:74:d0:91:
         d6:ab:77:ac:42:3a:70:9e:8a:9d:94:b7:1d:80:67:5a:37:86:
         ea:a3:58:03:c7:4c:a1:95:00:b7:44:45:8e:01:10:ca:68:06:
         28:75:13:1b:e5:af:51:c6:ec:e8:6f:1d:93:df:81:09:51:b5:
         cd:c3:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:51 2024 by rpki-client on console.sobornost.net