Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/uk8Ylojnh_HCWQl2M4GvUOFiiJU.roa
File:                     uk8Ylojnh_HCWQl2M4GvUOFiiJU.roa (raw, json)
Hash identifier:          J7V2bHb1QWUrUdcAFPHK6QS/vk4Qyu62VxAfZqmYzvI=
Subject key identifier:   BA:4F:18:96:88:E7:87:F1:C2:59:09:76:33:81:AF:50:E1:62:88:95
Certificate issuer:       /CN=7c20132883c41244eab1d8f32180709c5640cafa
Certificate serial:       0185724C74F980B0504E186108E67CBDB323
Authority key identifier: 7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/uk8Ylojnh_HCWQl2M4GvUOFiiJU.roa
Signing time:             Mon 02 Jan 2023 11:44:51 +0000
ROA not before:           Mon 02 Jan 2023 11:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29684
IP address blocks:        79.110.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:4c:74:f9:80:b0:50:4e:18:61:08:e6:7c:bd:b3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c20132883c41244eab1d8f32180709c5640cafa
        Validity
            Not Before: Jan  2 11:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba4f189688e787f1c25909763381af50e1628895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:38:a7:d8:64:69:3f:9a:32:d0:33:6a:60:
                    5a:63:31:fd:7a:e2:86:de:1a:8a:22:d0:a6:5b:f3:
                    68:f6:85:03:32:1b:87:7a:68:33:7c:81:f0:3a:9a:
                    20:1d:bd:83:7d:76:6e:45:25:1f:11:cc:a2:ad:5c:
                    ba:e9:61:9d:53:df:1a:cc:90:f2:31:29:46:a9:a3:
                    36:b3:c8:a9:c0:ba:a5:0d:76:67:b6:86:59:72:59:
                    59:cb:71:46:79:33:12:55:29:e1:23:76:8a:21:98:
                    ab:e4:21:7a:24:65:fb:77:5a:73:07:7b:79:6d:5a:
                    51:23:b0:18:26:91:57:35:10:ea:aa:13:c7:45:40:
                    be:cb:a9:13:82:c0:1e:b5:e4:36:0e:c3:b7:a0:2d:
                    90:cf:2d:d8:a6:13:79:68:6c:31:b5:b3:46:fb:01:
                    b2:8a:95:f4:d5:06:72:78:11:f2:f5:c3:51:bc:eb:
                    a4:ae:1e:ad:80:72:a8:18:d8:47:ae:4e:e2:d7:15:
                    e1:e8:6a:4d:48:aa:01:a7:b3:6f:4b:13:7c:35:45:
                    13:28:90:6c:ed:af:a7:d3:36:d1:5c:02:79:ce:de:
                    47:8d:aa:79:b5:e3:ba:30:3c:16:47:2b:f6:1e:43:
                    f4:ab:2c:72:8c:0d:59:4e:8e:b1:8b:9e:b6:06:93:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4F:18:96:88:E7:87:F1:C2:59:09:76:33:81:AF:50:E1:62:88:95
            X509v3 Authority Key Identifier:
                keyid:7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/uk8Ylojnh_HCWQl2M4GvUOFiiJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/fCATKIPEEkTqsdjzIYBwnFZAyvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a1:1e:f2:76:6e:30:d8:8d:bf:35:cc:ad:d4:26:b2:c6:1f:
         e9:1b:45:86:bf:b2:c2:d4:5c:f6:35:95:23:d0:8c:f1:b9:d6:
         17:21:f6:d2:c4:ec:d4:b0:49:f9:25:f0:09:c2:f6:3a:60:3f:
         bc:27:3b:23:d8:36:66:e4:04:8d:11:51:e6:f0:26:c7:76:1f:
         7b:75:4c:32:94:57:7d:7e:b1:cd:55:2f:cf:b7:f6:18:1e:ba:
         6c:d8:4b:e2:c8:10:c4:9c:d8:ad:fd:e9:fe:fa:ee:23:c3:f5:
         9f:1e:b1:50:0a:16:cf:26:c3:46:32:fa:18:a1:54:06:f7:b2:
         d0:4f:98:a4:98:a7:69:b0:d3:4d:24:52:83:89:0d:aa:3d:ab:
         fa:f4:e6:3d:53:0c:cd:b2:2e:ad:3c:52:e3:7a:bb:fb:b6:5f:
         78:b7:7f:97:db:8f:3a:58:d2:78:8f:ce:17:65:69:6b:61:b7:
         6b:94:b0:61:bb:57:a9:4f:a5:dc:d9:32:5d:6a:e8:b2:6f:61:
         13:c3:84:14:09:58:1d:a9:ed:13:31:6c:20:eb:f5:fe:76:26:
         c5:99:c0:b1:1f:7f:42:cf:f0:37:e9:44:be:e7:6a:15:4f:44:
         da:1c:3e:1b:85:85:12:03:e1:1c:11:49:d0:7a:89:8b:eb:a6:
         e2:ba:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:56 2024 by rpki-client on console-ams.rpki-client.org