Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/PreJFhktnU9jE8d3LUOFCi_jisA.roa
File:                     PreJFhktnU9jE8d3LUOFCi_jisA.roa (raw, json)
Hash identifier:          r7f+gc0Ie8zaV236OTxnhpjhVzGZAtNd9wCUKgeEg2M=
Subject key identifier:   3E:B7:89:16:19:2D:9D:4F:63:13:C7:77:2D:43:85:0A:2F:E3:8A:C0
Certificate issuer:       /CN=c811722d9031563f6fcb87521fde0868010008ba
Certificate serial:       CC0B31
Authority key identifier: C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/PreJFhktnU9jE8d3LUOFCi_jisA.roa
Signing time:             Sat 01 Jan 2022 03:57:48 +0000
ROA not before:           Sat 01 Jan 2022 03:57:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        79.110.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13372209 (0xcc0b31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c811722d9031563f6fcb87521fde0868010008ba
        Validity
            Not Before: Jan  1 03:57:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3eb78916192d9d4f6313c7772d43850a2fe38ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:71:8e:2c:72:f0:97:43:ed:72:71:1f:0c:
                    bf:3d:f0:3a:ca:fd:4e:f4:24:05:34:d3:44:34:12:
                    03:ff:97:55:1c:66:99:0c:21:a0:a5:26:6e:a8:35:
                    56:11:42:67:94:d4:3c:8b:60:33:c6:eb:94:c1:99:
                    4a:99:61:40:fc:0b:64:92:74:71:dc:97:e3:17:b6:
                    4d:19:52:2c:8e:f9:4a:07:7c:a8:7c:fa:b5:a9:47:
                    b4:8d:b2:dd:d3:7d:7d:d8:2a:15:6f:fc:45:6a:c6:
                    cf:f7:33:53:2f:fd:e4:4f:05:b6:e6:57:7a:f8:f4:
                    fd:36:7e:33:2f:b3:0d:a7:58:75:a2:58:c2:c6:51:
                    75:6a:37:6e:ec:cc:2a:f9:3a:56:d7:23:4c:1a:13:
                    6b:42:ba:1f:c6:cd:b6:fa:28:50:66:9b:1a:7c:e8:
                    17:29:ae:43:0a:ec:27:d9:05:84:99:d2:2a:19:35:
                    ab:27:a5:cd:e9:79:17:7d:ab:29:f2:2c:34:94:86:
                    98:4d:5b:e4:88:fa:01:a9:4e:43:98:71:61:dd:a0:
                    4a:9a:1b:de:6a:84:7f:e0:97:bd:e1:30:ed:a9:73:
                    a7:83:38:3e:cb:58:5e:cf:7b:e1:2c:9b:2f:c2:b1:
                    ba:8b:80:6c:37:b8:7d:49:be:5c:29:82:2f:3a:92:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B7:89:16:19:2D:9D:4F:63:13:C7:77:2D:43:85:0A:2F:E3:8A:C0
            X509v3 Authority Key Identifier:
                keyid:C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/PreJFhktnU9jE8d3LUOFCi_jisA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/yBFyLZAxVj9vy4dSH94IaAEACLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b4:7e:26:93:88:1c:2d:66:f2:9e:72:0d:25:54:ba:f5:e8:
         e3:77:59:43:39:1a:b6:77:51:d0:5a:d0:11:73:37:fb:09:7f:
         8f:87:6f:80:3f:c4:d1:73:55:cc:b5:cf:61:36:cf:cf:e6:55:
         6d:5a:d1:22:a5:57:52:7e:b0:7d:4c:bd:37:5f:37:a0:3d:2e:
         a4:14:f8:60:41:f0:83:b4:62:f0:4e:00:fa:ad:f6:cc:4c:a4:
         0c:10:a8:39:6e:6c:04:21:ad:49:3f:d7:64:05:59:91:b3:7b:
         cb:8a:71:00:80:db:a3:7b:c4:1b:ee:67:d2:a7:92:93:f7:e1:
         b4:df:3f:cd:81:0c:49:87:eb:3f:5c:3e:db:0f:4f:81:e8:98:
         d0:0a:38:be:70:3e:73:be:13:a5:55:1b:58:fd:a7:64:b4:e4:
         97:9d:70:77:ac:11:43:1c:c4:8a:32:23:f2:ad:43:e7:d3:49:
         51:81:54:d3:7a:c5:1c:71:8a:34:ff:a0:0a:1b:73:6d:c1:8b:
         13:8f:9f:6d:c5:96:43:5d:47:1d:9e:5c:5a:fe:8d:a1:bd:0d:
         35:30:01:1e:15:85:b3:2b:9e:5c:04:52:b7:a9:05:b9:b1:8d:
         02:35:65:39:82:5e:4b:2a:5e:4c:c4:d7:e3:b9:10:f7:b7:31:
         1a:c0:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:43 2024 by rpki-client on console-fra.rpki-client.org