Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JlJwM0z0DUQLnlh3SajJ4vFxGBU.roa
File:                     JlJwM0z0DUQLnlh3SajJ4vFxGBU.roa (raw, json)
Hash identifier:          iDELQjpJzeLa7ujFji1xT0yh4GVaD0pAI5q0rmeQJyA=
Subject key identifier:   26:52:70:33:4C:F4:0D:44:0B:9E:58:77:49:A8:C9:E2:F1:71:18:15
Certificate issuer:       /CN=273c2a39983bcd03551853447847c1e1861ec732
Certificate serial:       1535EF38
Authority key identifier: 27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JlJwM0z0DUQLnlh3SajJ4vFxGBU.roa
Signing time:             Sat 01 Jan 2022 13:58:34 +0000
ROA not before:           Sat 01 Jan 2022 13:58:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42313
IP address blocks:        79.106.255.0/24 maxlen: 24
                          185.171.146.0/24 maxlen: 24
                          185.171.144.0/23 maxlen: 24
                          79.106.97.0/24 maxlen: 24
                          79.106.98.0/24 maxlen: 24
                          79.106.104.0/24 maxlen: 24
                          79.106.102.0/24 maxlen: 24
                          79.106.100.0/24 maxlen: 24
                          79.106.101.0/24 maxlen: 24
                          79.106.99.0/24 maxlen: 24
                          79.106.109.0/24 maxlen: 24
                          79.106.107.0/24 maxlen: 24
                          79.106.108.0/24 maxlen: 24
                          79.106.106.0/24 maxlen: 24
                          79.106.120.0/24 maxlen: 24
                          79.106.127.0/24 maxlen: 24
                          79.106.204.0/24 maxlen: 24
                          79.106.209.0/24 maxlen: 24
                          79.106.207.0/24 maxlen: 24
                          79.106.220.0/24 maxlen: 24
                          79.106.0.0/21 maxlen: 21
                          79.106.0.0/16 maxlen: 24
                          79.106.8.0/21 maxlen: 21
                          79.106.16.0/23 maxlen: 23
                          79.106.16.0/20 maxlen: 20
                          217.24.240.0/22 maxlen: 22
                          217.24.240.0/21 maxlen: 21
                          217.24.240.0/20 maxlen: 21
                          217.24.248.0/21 maxlen: 24
                          217.24.252.0/24 maxlen: 24
                          217.24.254.0/24 maxlen: 24
                          2a05:fdc0::/32 maxlen: 32
                          2a05:fdc0:2300::/40 maxlen: 40
                          2a05:fdc0:3200::/40 maxlen: 40
                          2a05:fdc0:2200::/40 maxlen: 40
                          2a05:fdc0:2100::/40 maxlen: 40
                          2a05:fdc0:3100::/40 maxlen: 40
                          2a05:fdc2:1000::/36 maxlen: 36
                          2a05:fdc2:9000::/36 maxlen: 36
                          2a05:fdc2:3000::/36 maxlen: 36
                          2a05:fdc2:4000::/36 maxlen: 36
                          2a05:fdc2:8000::/36 maxlen: 36
                          2a05:fdc2:5000::/36 maxlen: 36
                          2a05:fdc2::/32 maxlen: 32
                          2a05:fdc2:7000::/36 maxlen: 36
                          2a05:fdc2:2000::/36 maxlen: 36
                          2a05:fdc2:6000::/36 maxlen: 36
                          2a05:fdc0::/29 maxlen: 29
                          2a05:fdc1::/32 maxlen: 32
                          2a05:fdc0:1000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355856184 (0x1535ef38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273c2a39983bcd03551853447847c1e1861ec732
        Validity
            Not Before: Jan  1 13:58:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=265270334cf40d440b9e587749a8c9e2f1711815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:fa:0a:e7:55:44:e3:58:a5:88:2d:41:cb:
                    19:3c:28:56:ff:56:d4:8e:7b:d8:e3:9d:fc:82:43:
                    b9:bd:cc:17:16:ec:9b:6e:84:93:c7:ae:9e:1e:b6:
                    3d:86:ec:6b:38:5f:fb:f8:be:4a:20:eb:8f:8d:9c:
                    6f:a5:cf:af:e0:62:7a:c7:87:e4:2e:56:c1:f8:04:
                    d9:50:a9:56:d8:e4:32:9f:25:b8:ba:77:12:ac:3a:
                    1c:4b:71:74:a7:51:83:62:0e:50:bd:9b:df:a0:84:
                    20:16:d8:c2:2b:2b:6e:19:bd:01:a8:6d:1e:20:e6:
                    c7:7d:93:43:60:88:93:a6:9a:77:55:03:15:90:98:
                    cc:db:e8:43:60:6a:ab:33:cc:1d:5f:a5:bd:e3:53:
                    45:c1:aa:8c:6a:3e:92:96:1d:65:b4:da:f1:1c:7a:
                    ff:cb:01:31:e9:8d:d3:e3:e5:69:8e:9c:75:7b:09:
                    4e:1f:18:d5:b7:1a:1e:7e:dc:ef:7b:aa:5d:2f:65:
                    cc:ff:ad:f2:bc:24:fb:95:59:c8:02:62:92:27:38:
                    e6:5e:bb:b1:64:cd:70:d7:ec:2b:41:d4:3f:f1:b5:
                    8c:a7:35:18:1a:6b:f0:7f:fc:ad:cb:d6:99:a8:e3:
                    b3:10:2d:60:90:12:30:b2:bc:3c:fd:04:58:cc:b4:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:52:70:33:4C:F4:0D:44:0B:9E:58:77:49:A8:C9:E2:F1:71:18:15
            X509v3 Authority Key Identifier:
                keyid:27:3C:2A:39:98:3B:CD:03:55:18:53:44:78:47:C1:E1:86:1E:C7:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzwqOZg7zQNVGFNEeEfB4YYexzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JlJwM0z0DUQLnlh3SajJ4vFxGBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f86f3-7465-43be-b72a-a79c759bdb7d/1/JzwqOZg7zQNVGFNEeEfB4YYexzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.106.0.0/16
                  185.171.144.0-185.171.146.255
                  217.24.240.0/20
                IPv6:
                  2a05:fdc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:28:0e:fd:5c:a1:e4:99:96:b4:27:80:cc:42:1f:d6:bc:
         3f:9b:9b:0f:9a:31:2d:d0:f6:87:d1:fe:1c:33:bc:14:77:df:
         69:b1:0a:f1:8b:ee:54:b6:9f:94:e1:a8:d1:5e:de:a6:5f:10:
         53:c4:ac:82:19:43:97:db:62:e7:ef:61:5a:12:98:ef:75:be:
         86:b3:40:f4:70:e3:5d:71:20:62:a0:c6:d1:ca:a5:81:2d:22:
         d4:3e:03:c4:ea:20:fa:e5:d1:3e:d4:4c:24:ae:5c:0e:03:7d:
         0e:a3:9b:6f:e4:3f:30:2b:1d:fe:69:6f:32:35:44:31:17:3d:
         d1:d0:fe:f7:cb:10:70:27:4e:61:a2:60:7c:f3:29:bc:bf:df:
         3d:9c:2f:4e:9d:0b:97:29:aa:ee:24:43:73:bd:0a:a7:97:78:
         26:6b:9a:6c:8f:3a:f3:b6:f3:53:1b:dc:2d:f1:22:bc:b5:44:
         97:1e:05:12:3d:63:7e:6d:d5:6d:68:b9:39:31:82:b1:47:26:
         e5:8a:63:15:f3:03:af:f5:77:bf:df:d8:98:8e:c8:2c:51:77:
         13:d4:83:bf:9b:0b:fd:a5:8c:39:74:92:c5:06:4e:8b:9f:ec:
         eb:29:0c:ce:3e:4a:d5:b4:09:48:4d:15:dd:91:9a:c5:2d:b5:
         62:c0:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:37 2024 by rpki-client on console-ams.rpki-client.org