Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/GvB2uyDZQKQBw0_uSW58Z7UzMIU.roa
File:                     GvB2uyDZQKQBw0_uSW58Z7UzMIU.roa (raw, json)
Hash identifier:          LLahDYAKoIx9yC4hF5zhrdoL/7VSGQ4uYFS9DcbzXMk=
Subject key identifier:   1A:F0:76:BB:20:D9:40:A4:01:C3:4F:EE:49:6E:7C:67:B5:33:30:85
Certificate issuer:       /CN=7c20132883c41244eab1d8f32180709c5640cafa
Certificate serial:       0185724C736B234487A8CA8CEE374AD24AD6
Authority key identifier: 7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/GvB2uyDZQKQBw0_uSW58Z7UzMIU.roa
Signing time:             Mon 02 Jan 2023 11:44:50 +0000
ROA not before:           Mon 02 Jan 2023 11:44:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6453
IP address blocks:        79.110.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:4c:73:6b:23:44:87:a8:ca:8c:ee:37:4a:d2:4a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c20132883c41244eab1d8f32180709c5640cafa
        Validity
            Not Before: Jan  2 11:44:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1af076bb20d940a401c34fee496e7c67b5333085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:cb:16:ae:93:08:46:94:d5:16:08:f5:f5:
                    ff:4f:ca:0b:e9:d4:33:6a:b3:7c:26:6d:32:d0:a6:
                    22:a5:57:8f:62:f2:41:80:6f:e6:3e:f4:f1:75:9a:
                    72:0c:63:b9:b7:d1:91:8b:40:fa:a8:6b:24:44:00:
                    93:49:f6:19:46:61:93:fc:77:a6:d5:27:7f:5c:4a:
                    74:11:d4:b2:c3:63:b9:05:5d:90:24:44:16:76:d4:
                    ed:48:33:e7:4f:ae:ed:62:3e:1f:6f:7e:1f:72:20:
                    0b:1f:c5:93:ca:a7:c1:52:af:c3:f2:d7:32:f1:16:
                    78:58:61:1e:e4:6f:85:a9:47:b2:22:7e:18:30:3a:
                    e5:3f:7b:6d:47:b7:0c:17:46:17:c0:4c:3b:8e:27:
                    30:3f:ab:b6:b6:6a:29:84:d0:7a:28:98:66:79:72:
                    0c:dc:07:bd:62:59:c4:34:00:04:57:2a:21:09:50:
                    ac:d6:38:e2:4c:f3:21:82:59:e0:18:80:ed:1d:8e:
                    1d:33:d4:c2:6a:e2:6a:2d:34:d9:c0:d0:c0:d7:5b:
                    63:6f:8c:f5:3a:b1:01:ee:ce:9e:8c:e7:ef:4d:d7:
                    2b:6c:ea:27:f2:f8:40:fc:1b:95:23:6c:49:a0:07:
                    d0:58:5c:42:0b:f1:f4:7d:9d:cf:c3:84:a7:3a:38:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F0:76:BB:20:D9:40:A4:01:C3:4F:EE:49:6E:7C:67:B5:33:30:85
            X509v3 Authority Key Identifier:
                keyid:7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/GvB2uyDZQKQBw0_uSW58Z7UzMIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/fCATKIPEEkTqsdjzIYBwnFZAyvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:5e:b2:9c:3f:6d:10:4b:34:d1:44:ff:ae:50:f5:26:c9:c3:
         44:80:e9:e4:b9:19:69:4b:aa:c2:77:bd:93:47:49:75:9d:4c:
         ac:18:ad:c4:6e:c3:2c:74:ae:6b:4e:8a:9d:eb:bb:7c:14:9a:
         b0:d7:05:02:6e:61:2a:7b:49:67:e9:21:4b:e0:3b:03:39:be:
         7e:c6:5e:b2:81:bc:57:54:6a:d4:f0:c4:47:9c:2d:bb:17:fb:
         f0:67:b4:a8:a1:fd:62:4e:df:54:5c:71:f0:64:35:ae:66:26:
         f9:42:07:38:89:e8:ea:fd:aa:cc:9d:b6:1e:b3:8a:b7:de:63:
         8d:71:bf:b9:86:5e:54:36:e7:a3:e5:87:4d:cf:6c:72:d3:72:
         22:db:36:3a:0c:37:aa:1a:19:9a:dd:b6:8b:be:9b:a5:58:da:
         91:e9:f9:62:b2:c1:ac:91:91:18:4c:26:86:81:55:db:e7:74:
         0a:5c:2e:ba:8a:cf:6b:2a:6e:1c:09:a7:31:74:17:70:6d:76:
         5b:ad:70:62:41:af:5c:0b:eb:88:91:80:43:05:53:e3:dd:2e:
         0e:6c:3d:78:da:63:8b:86:bc:d5:76:39:05:ca:44:b4:c0:ff:
         cb:f6:91:ac:3b:b9:22:be:55:db:12:8c:6b:db:dd:00:1f:67:
         2e:fe:2e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:56 2024 by rpki-client on console-ams.rpki-client.org