Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/GS9UAgH_0HfPVx2VTQcey7jTQ8E.roa
File:                     GS9UAgH_0HfPVx2VTQcey7jTQ8E.roa (raw, json)
Hash identifier:          PM+OoFURuNO/aJUdbA4W99PBUsIs9IDzPv1beIM8Q40=
Subject key identifier:   19:2F:54:02:01:FF:D0:77:CF:57:1D:95:4D:07:1E:CB:B8:D3:43:C1
Certificate issuer:       /CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
Certificate serial:       01824A2AB5A2C254801D8D87AA073E642C76
Authority key identifier: 47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/GS9UAgH_0HfPVx2VTQcey7jTQ8E.roa
Signing time:             Fri 29 Jul 2022 13:34:49 +0000
ROA not before:           Fri 29 Jul 2022 13:34:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        79.110.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:4a:2a:b5:a2:c2:54:80:1d:8d:87:aa:07:3e:64:2c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
        Validity
            Not Before: Jul 29 13:34:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=192f540201ffd077cf571d954d071ecbb8d343c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:51:9c:a0:e6:cb:96:f5:1b:8e:84:ac:1f:
                    a4:12:ab:69:56:5a:ac:9e:ab:0e:e8:93:1f:c7:ee:
                    a8:b2:c3:a9:08:51:d2:c0:c5:77:1a:c8:90:d1:c5:
                    c2:16:a6:fd:99:64:da:74:e0:1b:ab:50:1d:58:7c:
                    81:9b:db:71:42:28:80:40:e6:e1:f1:aa:f0:b1:c9:
                    08:1c:c1:cf:b1:e8:ea:ab:73:92:12:17:e1:1c:8b:
                    1d:6d:22:83:04:5c:f5:83:d9:13:a5:71:b4:5d:eb:
                    1e:e0:78:13:39:95:0c:ed:fd:fa:21:cd:55:e5:77:
                    d4:05:c6:68:54:f9:64:c4:51:e4:c7:bd:2a:53:bc:
                    3f:77:d0:61:d1:75:9c:ad:2a:12:15:23:59:a3:33:
                    45:73:56:ce:61:02:21:29:a7:13:a7:9b:8f:5a:86:
                    6d:e2:96:17:e5:4f:8c:de:84:58:5e:92:e0:52:52:
                    d7:89:bf:ca:73:9d:5c:45:4e:00:24:ea:a7:66:f1:
                    93:da:0f:30:1a:73:f4:5b:95:7d:c5:7a:c0:23:b7:
                    ff:d5:f4:43:f7:37:37:1e:ae:98:61:42:ad:9f:5d:
                    8d:b8:e3:03:ce:e9:c7:00:7b:13:7e:33:44:d2:fe:
                    de:5c:9a:62:b5:f1:02:64:40:57:f0:5b:de:ab:e2:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:54:02:01:FF:D0:77:CF:57:1D:95:4D:07:1E:CB:B8:D3:43:C1
            X509v3 Authority Key Identifier:
                keyid:47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/GS9UAgH_0HfPVx2VTQcey7jTQ8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:35:8e:ce:62:9e:e7:29:95:f0:e8:6a:48:5a:96:2b:62:
         d6:34:99:d0:d1:75:66:3c:a4:96:40:48:e7:f5:d8:aa:55:4b:
         6f:bb:8f:77:41:23:20:95:80:17:fd:6e:13:2f:e2:38:f2:60:
         75:a2:42:d2:f0:7b:52:d6:87:97:3f:4d:84:f4:29:93:c7:b8:
         85:41:ee:bf:e3:e8:c3:17:f1:a1:f2:2e:f2:b0:ab:a4:0e:26:
         b4:bd:9d:7c:5b:2d:53:7b:2f:d1:f3:c8:1f:cb:f2:f6:bf:c7:
         56:53:69:ec:b8:24:5f:f2:f1:9f:04:a9:45:e6:b5:f4:42:2d:
         94:f3:59:67:4d:09:f8:3d:25:d5:cf:67:e8:dc:23:f6:6a:17:
         e8:89:2a:5b:14:ad:51:31:f7:4c:e3:14:97:c7:a1:b1:f5:82:
         fd:c0:a7:d0:65:ac:80:0b:47:a2:5d:48:e6:60:b3:54:ea:24:
         9c:91:c7:c1:4e:96:f0:76:25:b4:92:2a:57:22:d8:a7:32:13:
         e6:40:c0:f8:e6:29:70:fe:6f:6b:33:1d:2c:e0:d2:b7:db:25:
         08:03:88:3e:96:97:fe:c7:83:2a:b4:d9:bc:3c:fd:ac:c4:06:
         aa:c7:b9:e9:8e:4d:fb:c6:da:96:90:4b:e4:3a:96:09:a8:64:
         ac:4c:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org