Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/eIDt8e8FEvsjPiB1ZGO96RsKGSM.roa
File:                     eIDt8e8FEvsjPiB1ZGO96RsKGSM.roa (raw, json)
Hash identifier:          nxUhkQzRphJc0ZsdazXKnB5fBeg4uQubfKfqqgmmDB4=
Subject key identifier:   78:80:ED:F1:EF:05:12:FB:23:3E:20:75:64:63:BD:E9:1B:0A:19:23
Certificate issuer:       /CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
Certificate serial:       018BE66D
Authority key identifier: 87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/eIDt8e8FEvsjPiB1ZGO96RsKGSM.roa
Signing time:             Fri 28 Jan 2022 14:16:29 +0000
ROA not before:           Fri 28 Jan 2022 14:16:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        77.72.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25945709 (0x18be66d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
        Validity
            Not Before: Jan 28 14:16:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7880edf1ef0512fb233e20756463bde91b0a1923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:01:38:eb:3c:20:da:24:5c:0f:b1:7a:61:
                    14:70:c6:44:b9:40:69:99:b4:76:f9:9f:16:dd:cb:
                    fb:47:d5:c4:b8:47:89:07:b2:b1:ec:bd:e6:fc:83:
                    89:13:97:1a:3b:2a:a0:b4:ab:cd:21:3d:7a:db:03:
                    92:c8:04:da:a5:5b:48:54:6a:7b:03:4d:f4:65:21:
                    58:cb:99:ef:4a:d8:ee:d5:f0:1b:ae:b9:86:63:d4:
                    d0:00:13:d2:0f:14:80:39:b4:19:66:50:2d:8f:e0:
                    dc:55:18:91:46:44:fd:a0:c0:84:9f:6d:54:3a:f0:
                    29:22:06:1a:c4:c5:5b:67:3d:f2:73:ca:17:ff:10:
                    33:72:6f:f0:e2:05:2f:1c:da:d3:6c:6d:d5:8a:6e:
                    c0:2b:d3:c6:ed:26:4b:39:89:35:52:a1:2c:5a:c1:
                    83:ac:ce:76:2d:24:84:74:e7:e3:f5:c3:d2:c2:49:
                    4a:ee:43:ed:5c:24:8d:19:0c:bd:c8:79:3a:e0:65:
                    9f:92:45:51:ca:9a:b1:b3:1e:b2:15:3a:94:79:e3:
                    9d:96:b2:c1:97:ce:90:3c:14:cc:91:20:0c:de:1a:
                    a8:07:3c:fd:26:9e:3e:4d:97:88:72:b3:fa:ac:c2:
                    25:94:f2:d0:9c:5a:97:d7:50:a9:cc:b6:78:7a:16:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:80:ED:F1:EF:05:12:FB:23:3E:20:75:64:63:BD:E9:1B:0A:19:23
            X509v3 Authority Key Identifier:
                keyid:87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/eIDt8e8FEvsjPiB1ZGO96RsKGSM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:31:88:3c:c4:df:23:89:5a:a5:3a:9f:f7:8a:fc:05:4b:47:
         6f:6f:0f:40:a9:ae:fd:92:99:b6:d9:07:bf:a2:d8:9f:d6:75:
         42:09:a6:d2:fa:1e:87:31:b0:ab:82:fb:90:39:2b:3b:e7:f0:
         4a:3e:c4:21:3e:a1:46:09:c4:13:61:39:a4:9d:d3:0e:65:62:
         1e:7e:88:5e:32:df:ee:a6:fd:ca:a9:08:ad:44:0d:0c:df:0e:
         71:39:ac:8b:cc:9d:e9:05:10:c9:44:a4:5f:bd:4f:d4:82:69:
         c9:82:8c:eb:cd:40:e9:5e:43:82:1c:7d:81:34:8b:7d:03:5f:
         05:29:7a:6d:58:5c:ba:2b:97:e4:2f:6c:2d:db:df:51:e0:3b:
         18:7b:f4:d5:14:d7:bf:7f:61:77:51:86:00:4c:d2:ca:2b:aa:
         2b:f0:18:6c:5d:36:4b:d5:fd:3d:1e:80:4e:eb:aa:de:9d:a5:
         9c:a5:93:61:eb:1e:f8:03:c8:13:64:2d:ea:43:3c:4f:c5:98:
         ef:90:5e:e2:20:61:97:ce:92:f9:e4:0b:da:09:77:28:60:8b:
         ab:b7:20:45:78:77:a7:b3:0e:0b:f9:cd:50:2d:de:b1:f2:4a:
         5e:de:50:f8:fd:af:a4:89:44:ff:ae:2d:38:0c:30:12:34:2c:
         1c:dc:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net