Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/2Rpde-cJCk72BViobrkPcSUf3JI.roa
File:                     2Rpde-cJCk72BViobrkPcSUf3JI.roa (raw, json)
Hash identifier:          2FugCMNahyeCIGdL6tTSx53tKXjGLuE1AWcjqW+ij6Y=
Subject key identifier:   D9:1A:5D:7B:E7:09:0A:4E:F6:05:58:A8:6E:B9:0F:71:25:1F:DC:92
Certificate issuer:       /CN=c811722d9031563f6fcb87521fde0868010008ba
Certificate serial:       01882086B6BE4C8A9F840D6E0834AFBB50A0
Authority key identifier: C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/2Rpde-cJCk72BViobrkPcSUf3JI.roa
Signing time:             Mon 15 May 2023 17:47:59 +0000
ROA not before:           Mon 15 May 2023 17:47:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        79.110.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:b6:be:4c:8a:9f:84:0d:6e:08:34:af:bb:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c811722d9031563f6fcb87521fde0868010008ba
        Validity
            Not Before: May 15 17:47:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d91a5d7be7090a4ef60558a86eb90f71251fdc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:4a:93:6b:40:f8:b8:24:e2:1c:e7:2f:a0:
                    a3:ee:04:14:19:c3:cc:4a:72:84:25:43:4a:18:a2:
                    5a:ea:18:43:08:c7:53:5e:b2:c4:ae:3c:64:65:59:
                    18:77:99:8e:97:04:d1:62:cb:7c:55:a2:43:79:0e:
                    f9:4b:35:5d:14:a2:42:6b:18:25:71:43:68:a4:6a:
                    74:a9:be:14:4d:9b:78:79:f7:06:45:ac:90:76:8f:
                    ed:6f:8c:36:88:71:db:c1:ce:92:4a:20:aa:2a:14:
                    d4:9c:d4:1a:ca:15:09:0e:ec:9c:4d:50:06:54:39:
                    1f:fc:d8:e8:e1:d3:b4:44:48:83:69:14:7c:d0:95:
                    69:02:5e:21:10:b6:f3:dd:38:69:c6:cf:66:c3:cf:
                    06:b4:b3:1a:29:f0:6b:b4:8b:69:a8:a5:2f:61:ee:
                    97:d7:f6:5e:e4:c5:66:f4:b7:90:a7:27:de:07:90:
                    a7:76:d8:d9:18:f9:e2:3b:4f:aa:b0:fa:0a:72:e4:
                    aa:a3:21:5c:21:ee:75:35:b1:b7:78:f3:79:c1:98:
                    3e:c0:2f:db:7e:2d:1e:1a:c7:c9:ae:ff:1d:0a:1c:
                    ae:64:ab:d5:79:7f:e6:52:33:b7:75:bf:7b:7e:29:
                    ef:c7:f0:14:4f:60:f6:ee:88:d3:7d:2b:57:ef:8e:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1A:5D:7B:E7:09:0A:4E:F6:05:58:A8:6E:B9:0F:71:25:1F:DC:92
            X509v3 Authority Key Identifier:
                keyid:C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/2Rpde-cJCk72BViobrkPcSUf3JI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/yBFyLZAxVj9vy4dSH94IaAEACLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:81:05:8b:aa:02:8e:97:e8:e5:3f:59:b5:28:f2:89:0f:
         84:96:62:37:44:19:82:00:64:8d:46:5d:2c:51:f3:af:a9:6b:
         7f:0c:bf:5b:12:57:85:47:23:be:bd:fa:cb:19:96:1c:69:64:
         97:db:48:e8:46:fb:45:ff:9d:50:9a:c2:79:05:41:4f:e8:63:
         2d:7a:91:2a:b1:37:cd:1e:8b:f4:29:f8:3d:6d:a4:99:c4:24:
         56:27:ec:70:0a:1a:40:99:cd:8a:d5:c9:d0:52:fb:e8:b4:cd:
         a6:ee:34:df:2b:3b:3d:9b:48:92:b4:a9:bf:f4:90:c2:34:3d:
         e4:34:5e:37:c5:cf:8f:e9:0c:e8:59:73:0c:5a:96:8a:ed:1e:
         ca:4a:3a:35:5f:63:47:52:49:f0:dc:07:e6:2c:c4:50:c8:eb:
         eb:98:33:03:c4:8d:79:e0:44:02:f2:4f:17:91:ad:4a:25:d1:
         53:0f:60:0a:f2:ca:00:b3:7a:d9:c4:58:9e:6c:ff:32:8b:04:
         75:aa:dd:ed:83:a0:b6:b8:2f:94:6e:87:7f:b0:52:d1:8e:7a:
         16:ff:7e:03:ef:e0:68:34:89:46:5a:5e:6b:7b:4c:05:31:58:
         94:fc:dc:44:3c:72:9f:b9:10:27:fc:2d:24:8c:62:88:f5:d1:
         49:9b:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:43 2024 by rpki-client on console-fra.rpki-client.org