Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/dnjpT-EQRmxjnvRkL4qYokBGLA4.roa
File:                     dnjpT-EQRmxjnvRkL4qYokBGLA4.roa (raw, json)
Hash identifier:          LxuGVkrTVaH8YPaOXjvvoKrJJ8nRWH7mQGQnmRYbACY=
Subject key identifier:   76:78:E9:4F:E1:10:46:6C:63:9E:F4:64:2F:8A:98:A2:40:46:2C:0E
Certificate issuer:       /CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
Certificate serial:       E22394
Authority key identifier: 47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/dnjpT-EQRmxjnvRkL4qYokBGLA4.roa
Signing time:             Sat 01 Jan 2022 11:58:44 +0000
ROA not before:           Sat 01 Jan 2022 11:58:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        79.110.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14820244 (0xe22394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
        Validity
            Not Before: Jan  1 11:58:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7678e94fe110466c639ef4642f8a98a240462c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:c2:db:89:31:5b:1f:67:dd:7f:f7:f8:4f:
                    73:1b:07:1f:c8:cc:fd:ba:30:e7:d4:78:70:c7:3a:
                    58:35:19:d7:f6:43:c9:81:02:65:2f:21:88:35:4b:
                    01:20:2c:57:57:33:f8:16:17:90:57:b4:1c:cf:fc:
                    ab:d1:28:89:94:71:cb:f1:cc:4d:98:bd:7d:e2:d4:
                    00:74:ea:7b:3c:a7:e3:81:e1:8f:b2:cd:5f:32:8a:
                    53:ad:ae:19:e9:ed:a2:1e:c7:bb:3c:d9:09:c3:a9:
                    50:bf:9c:8a:6b:9b:93:28:8d:52:74:06:ce:6c:c7:
                    a1:ec:82:7b:63:f6:d1:93:59:63:5e:b3:ea:46:27:
                    45:cb:b8:ba:3b:aa:e6:97:5d:b3:5b:d3:f9:f3:0c:
                    4a:5f:5b:13:93:77:97:d8:be:3a:33:35:4c:c4:3e:
                    df:12:52:b0:00:4e:f6:91:84:bd:c0:85:c0:48:ee:
                    48:da:2c:59:17:61:48:a9:ca:b7:34:f2:50:aa:4a:
                    ca:be:73:7c:70:08:02:2a:df:d1:2d:13:2c:35:83:
                    ca:e3:e9:6e:fe:fa:4b:5a:fb:54:70:f5:bf:ee:62:
                    55:ed:29:2c:29:f1:08:27:67:e2:8d:3a:58:59:ca:
                    ce:bc:f0:ad:49:61:5d:72:27:8e:03:e9:8b:be:5a:
                    2b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:78:E9:4F:E1:10:46:6C:63:9E:F4:64:2F:8A:98:A2:40:46:2C:0E
            X509v3 Authority Key Identifier:
                keyid:47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/dnjpT-EQRmxjnvRkL4qYokBGLA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:7a:d8:f8:47:cd:00:56:46:26:04:8f:7a:c8:40:eb:40:08:
         c8:d0:e0:57:c3:b7:77:5b:cb:36:4b:3c:f7:c5:02:8f:7d:54:
         2d:46:d2:2e:2a:ab:fe:2e:4a:60:66:df:a3:ac:4f:94:63:6b:
         6a:39:71:90:31:65:67:1b:30:a0:1c:fb:31:5b:12:c6:43:6c:
         a9:87:3f:36:bb:3a:f5:10:d1:df:e7:3b:17:3c:94:49:a1:63:
         d7:dd:5f:65:d3:f8:36:1f:a4:6f:46:9c:97:2c:af:c3:42:7f:
         06:db:16:80:df:97:70:4f:0c:ca:6b:15:bd:5e:5c:02:6a:44:
         09:bd:69:c3:84:2e:8a:08:4b:40:28:42:02:0f:51:6d:b5:3d:
         77:09:23:46:72:60:85:92:20:eb:a6:08:f9:01:b3:9b:98:af:
         c4:75:c4:f7:7a:89:4f:1c:68:60:b0:8a:b2:af:ba:e8:f5:b6:
         bc:c4:b7:f8:c9:80:15:a7:a8:9b:a3:a2:07:50:22:ca:3e:6c:
         3a:b0:c1:22:a1:59:5c:50:80:7f:fd:6b:15:c5:f8:78:4f:58:
         a2:32:b4:d1:36:57:9d:3c:1e:57:15:28:21:57:66:62:d0:66:
         9d:46:40:ae:62:4c:58:56:70:a6:4b:e5:ea:9a:c9:ff:83:74:
         da:b8:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org