Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/0jxJFEZjjtSyT2oQMz6SA22cUbk.roa
File:                     0jxJFEZjjtSyT2oQMz6SA22cUbk.roa (raw, json)
Hash identifier:          PCrtmf6o4GZRiPhvRzeaFYqDeHd8GGpspGpXFeTYzDo=
Subject key identifier:   D2:3C:49:14:46:63:8E:D4:B2:4F:6A:10:33:3E:92:03:6D:9C:51:B9
Certificate issuer:       /CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
Certificate serial:       027065ED
Authority key identifier: 47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/0jxJFEZjjtSyT2oQMz6SA22cUbk.roa
Signing time:             Mon 27 Jun 2022 09:19:42 +0000
ROA not before:           Mon 27 Jun 2022 09:19:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207633
IP address blocks:        79.110.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40920557 (0x27065ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
        Validity
            Not Before: Jun 27 09:19:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d23c491446638ed4b24f6a10333e92036d9c51b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d6:41:fc:bc:4a:bf:40:18:f8:f0:ad:9b:32:
                    b9:1e:c2:3a:19:8e:05:d2:fd:8e:9d:91:99:f0:88:
                    b8:f1:63:e8:78:2c:b4:95:89:7f:c9:4b:96:0d:23:
                    1a:13:84:26:2e:6a:37:2c:81:d9:29:b0:f4:51:15:
                    51:74:03:ba:d2:73:ac:87:8d:90:f1:35:cd:dd:df:
                    4d:79:ab:c1:1e:62:14:5d:62:82:4d:11:d8:3e:b7:
                    be:46:5d:7b:42:d2:26:37:2f:6f:d9:47:86:08:d1:
                    ca:90:21:89:96:c7:33:1a:8b:36:40:72:fd:ae:c7:
                    90:16:b0:02:30:71:08:72:ac:7a:25:0c:25:d5:4b:
                    40:7e:0e:8d:05:ee:3e:48:65:7d:da:b5:7d:a9:70:
                    98:5f:6b:85:53:09:a1:da:79:e0:0a:84:c8:5b:12:
                    2e:6c:9f:de:f6:6a:24:07:7c:a8:31:98:a1:7f:c1:
                    b9:a9:82:7c:be:f5:54:af:10:0f:8b:60:2a:4e:50:
                    94:5d:58:9b:25:d6:11:04:7f:e6:79:21:b0:0a:f2:
                    df:ea:e8:08:fc:b8:59:40:74:70:1f:24:3c:4f:1d:
                    e7:5c:9c:c2:b5:67:03:73:70:77:0e:0c:73:c3:f7:
                    dd:c2:d5:68:d6:a8:49:65:86:27:e9:91:7a:74:eb:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3C:49:14:46:63:8E:D4:B2:4F:6A:10:33:3E:92:03:6D:9C:51:B9
            X509v3 Authority Key Identifier:
                keyid:47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/0jxJFEZjjtSyT2oQMz6SA22cUbk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:b6:8e:74:c9:54:5f:25:ff:8a:3f:06:7f:34:d1:b7:67:
         28:02:91:a1:40:e6:7a:78:22:e5:59:52:85:5f:56:08:12:4d:
         e2:f6:8b:da:2e:12:e7:43:db:19:d9:99:5e:73:47:3b:04:f5:
         23:94:22:2f:9a:0c:ae:60:2c:19:de:61:ed:d3:bf:60:25:25:
         49:5f:c3:cd:5c:61:0f:f4:b7:1d:ef:04:63:63:a4:46:bc:af:
         87:9d:86:b1:aa:f0:6f:d4:ed:30:d9:fa:c1:7f:ab:6e:6a:53:
         a6:2a:9d:4c:0d:da:0d:f3:c1:fc:f3:c6:28:bf:98:3e:62:c7:
         9c:2d:36:e9:42:35:81:a2:b9:cc:a9:a2:89:86:7f:d4:75:4d:
         70:db:2f:7a:f7:c4:de:e5:61:88:08:85:af:0e:f9:28:1a:79:
         7c:71:3f:da:fc:83:82:c4:b1:ef:0a:01:25:cb:4d:04:81:c5:
         71:a1:e7:f0:84:4e:ee:eb:a3:bf:5c:04:8a:0a:86:72:5c:ed:
         f9:bf:55:6d:2b:db:a4:50:a9:45:41:17:aa:52:3f:19:ab:1b:
         c5:e2:0a:6f:66:e4:79:76:ca:c7:6c:e4:f3:17:0b:1e:ff:d6:
         5a:22:99:9b:bf:3d:0e:d2:8e:7e:05:44:33:88:b0:2f:6e:49:
         9d:67:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org