Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/FamdeEKdDVu-Kv0rM5inDXr46Fc.roa
File:                     FamdeEKdDVu-Kv0rM5inDXr46Fc.roa (raw, json)
Hash identifier:          fjPyyA+rv1UGkaaVi7NFDZQf36CrPiCjwqhnjC9wnIg=
Subject key identifier:   15:A9:9D:78:42:9D:0D:5B:BE:2A:FD:2B:33:98:A7:0D:7A:F8:E8:57
Certificate issuer:       /CN=273c2a39983bcd03551853447847c1e1861ec732
Certificate serial:       018627568F603C4DCBDEFFAE836DB9023906
Authority key identifier: 27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/FamdeEKdDVu-Kv0rM5inDXr46Fc.roa
Signing time:             Mon 06 Feb 2023 15:27:09 +0000
ROA not before:           Mon 06 Feb 2023 15:27:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42313
IP address blocks:        79.106.255.0/24 maxlen: 24
                          185.171.146.0/24 maxlen: 24
                          185.171.144.0/23 maxlen: 24
                          79.106.97.0/24 maxlen: 24
                          79.106.98.0/24 maxlen: 24
                          79.106.104.0/24 maxlen: 24
                          79.106.102.0/24 maxlen: 24
                          79.106.100.0/24 maxlen: 24
                          79.106.101.0/24 maxlen: 24
                          79.106.99.0/24 maxlen: 24
                          79.106.109.0/24 maxlen: 24
                          79.106.107.0/24 maxlen: 24
                          79.106.108.0/24 maxlen: 24
                          79.106.106.0/24 maxlen: 24
                          79.106.124.0/24 maxlen: 24
                          79.106.120.0/24 maxlen: 24
                          79.106.127.0/24 maxlen: 24
                          79.106.204.0/24 maxlen: 24
                          79.106.209.0/24 maxlen: 24
                          79.106.207.0/24 maxlen: 24
                          79.106.220.0/24 maxlen: 24
                          79.106.0.0/21 maxlen: 21
                          79.106.0.0/16 maxlen: 24
                          79.106.8.0/21 maxlen: 21
                          79.106.16.0/23 maxlen: 23
                          79.106.16.0/20 maxlen: 20
                          217.24.240.0/22 maxlen: 22
                          217.24.240.0/21 maxlen: 21
                          217.24.240.0/20 maxlen: 21
                          217.24.248.0/21 maxlen: 24
                          217.24.252.0/24 maxlen: 24
                          217.24.254.0/24 maxlen: 24
                          2a05:fdc0::/32 maxlen: 32
                          2a05:fdc0:3100::/40 maxlen: 40
                          2a05:fdc0:2100::/40 maxlen: 40
                          2a05:fdc0:2200::/40 maxlen: 40
                          2a05:fdc0:3200::/40 maxlen: 40
                          2a05:fdc0:2300::/40 maxlen: 40
                          2a05:fdc2:6000::/36 maxlen: 36
                          2a05:fdc2:4000::/36 maxlen: 36
                          2a05:fdc2:9000::/36 maxlen: 36
                          2a05:fdc2:1000::/36 maxlen: 36
                          2a05:fdc2:2000::/36 maxlen: 36
                          2a05:fdc2:7000::/36 maxlen: 36
                          2a05:fdc2:5000::/36 maxlen: 36
                          2a05:fdc2:8000::/36 maxlen: 36
                          2a05:fdc2::/32 maxlen: 32
                          2a05:fdc2:3000::/36 maxlen: 36
                          2a05:fdc0::/29 maxlen: 29
                          2a05:fdc1::/32 maxlen: 32
                          2a05:fdc0:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:27:56:8f:60:3c:4d:cb:de:ff:ae:83:6d:b9:02:39:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273c2a39983bcd03551853447847c1e1861ec732
        Validity
            Not Before: Feb  6 15:27:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=15a99d78429d0d5bbe2afd2b3398a70d7af8e857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:40:7b:e7:18:26:76:78:86:64:d0:85:3b:
                    55:73:89:79:f4:a5:4a:38:1c:f8:11:b1:1d:f2:60:
                    2c:e2:8c:79:00:c4:39:17:77:63:18:26:e3:3b:ae:
                    bc:84:ac:0d:ca:d3:dd:07:24:92:90:a9:55:29:23:
                    fe:c0:e5:86:8e:20:34:92:4f:b3:16:69:3c:de:23:
                    8e:df:1e:61:0d:c1:fd:07:62:50:bf:31:5f:09:1b:
                    78:66:ef:26:d9:93:3c:bf:7b:db:90:76:1b:22:bb:
                    9d:f2:11:85:cf:18:6f:55:e7:08:dc:46:9a:51:fc:
                    e0:6b:68:46:9f:dc:19:1e:3a:96:d9:53:30:a4:c6:
                    75:97:c2:0e:61:e4:bd:fe:d4:84:17:b1:c5:77:b6:
                    cd:c6:99:a3:61:6d:7f:22:5d:b3:6a:50:05:09:7e:
                    15:14:ea:3b:1b:90:a8:8f:51:07:8b:e5:b4:e9:93:
                    11:b8:32:f1:20:56:37:93:4e:6c:72:8d:95:49:04:
                    28:93:61:31:26:df:d2:9e:54:0f:bb:f6:ba:0e:58:
                    f3:04:06:e4:a8:29:e3:13:dc:35:45:5f:ce:1b:53:
                    d8:0c:13:12:5f:04:c8:29:2e:df:89:2c:f1:f0:6d:
                    ce:fb:2b:3b:40:bd:74:36:a3:9d:ff:f4:f9:3f:45:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A9:9D:78:42:9D:0D:5B:BE:2A:FD:2B:33:98:A7:0D:7A:F8:E8:57
            X509v3 Authority Key Identifier:
                keyid:27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/FamdeEKdDVu-Kv0rM5inDXr46Fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JzwqOZg7zQNVGFNEeEfB4YYexzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.106.0.0/16
                  185.171.144.0-185.171.146.255
                  217.24.240.0/20
                IPv6:
                  2a05:fdc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:b7:4a:14:17:4e:a9:4b:3c:59:9e:7e:4a:4a:72:bd:94:2f:
         7b:12:1e:e0:f4:99:62:ae:4e:b5:ff:9a:55:b1:6e:3c:de:f2:
         f4:40:48:89:97:e6:1c:24:4e:e2:96:a6:37:d8:54:f0:0a:fd:
         f1:8d:9d:db:c2:e0:51:d3:99:d2:de:6b:0d:56:29:70:30:66:
         98:cf:a5:c6:0a:6e:dd:d0:7d:84:ee:83:74:a0:33:3a:b2:69:
         64:fc:67:95:b0:02:33:10:dd:58:25:ea:8b:ce:cd:a4:17:25:
         c3:7e:84:14:c3:0c:bf:95:e0:3c:c9:b7:c4:95:2a:aa:b5:37:
         0e:33:ba:b7:66:7f:28:92:94:72:37:41:f4:31:7e:e7:43:df:
         d5:1b:7c:8e:b4:57:5f:90:bc:c8:06:93:c8:6f:3f:22:7f:ed:
         bb:ca:96:a5:8b:b5:d7:43:40:c5:79:52:cd:59:71:22:24:e1:
         20:9f:31:d4:eb:c4:67:2c:b7:bd:75:7c:a6:18:f7:2a:74:30:
         23:86:d6:5e:b7:19:74:15:9e:6d:ae:2a:dd:bb:ac:85:bd:c4:
         c3:09:c1:1d:c1:e5:b9:17:3c:f1:ed:76:b7:2f:0f:3c:0c:59:
         28:91:f4:bd:97:34:77:3f:a1:1f:83:9d:84:d0:24:91:15:38:
         4e:4c:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:49 2024 by rpki-client on console-fra.rpki-client.org