Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/a2j7n1z9NWhh8EdaF_As-vXc-Tw.roa
File:                     a2j7n1z9NWhh8EdaF_As-vXc-Tw.roa (raw, json)
Hash identifier:          SzyEIC6PAz6+X8+sjXcd3kgZfvUsThkVGjb67YSGFT8=
Subject key identifier:   6B:68:FB:9F:5C:FD:35:68:61:F0:47:5A:17:F0:2C:FA:F5:DC:F9:3C
Certificate issuer:       /CN=c811722d9031563f6fcb87521fde0868010008ba
Certificate serial:       01856C6EDF2DA996FFCBCAE2994AD107B42C
Authority key identifier: C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/a2j7n1z9NWhh8EdaF_As-vXc-Tw.roa
Signing time:             Sun 01 Jan 2023 08:24:43 +0000
ROA not before:           Sun 01 Jan 2023 08:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        79.110.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6e:df:2d:a9:96:ff:cb:ca:e2:99:4a:d1:07:b4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c811722d9031563f6fcb87521fde0868010008ba
        Validity
            Not Before: Jan  1 08:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b68fb9f5cfd356861f0475a17f02cfaf5dcf93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:66:13:72:a5:d3:1d:5a:30:9f:51:4a:33:
                    b6:54:b1:03:89:23:74:45:cf:54:63:bf:cf:af:1c:
                    8f:7b:76:2f:79:63:9e:9b:03:4a:86:81:6a:c9:74:
                    5b:39:4b:c9:3e:4e:e3:f7:3d:91:62:75:c2:75:50:
                    d4:fb:fa:43:12:95:95:d8:c3:99:20:2a:8b:d7:44:
                    c8:76:75:47:55:50:62:b2:98:50:f9:95:bd:99:10:
                    13:05:98:ff:58:d6:01:70:58:f6:a5:ac:fb:a4:60:
                    70:8d:99:e6:89:d1:72:45:ae:f5:b4:23:bc:6d:9b:
                    73:32:e6:29:6c:6f:b3:7a:0c:37:31:71:39:c3:e8:
                    c4:15:18:4b:8b:a4:a4:1e:8e:c3:d2:bf:99:e1:31:
                    7d:01:c9:df:c7:1b:42:5b:e3:ae:bf:6c:08:6d:76:
                    66:e6:1a:38:e3:85:fb:b7:aa:26:14:5a:2d:97:fd:
                    1e:5b:22:0e:2c:c9:44:fd:9f:6d:90:5b:96:e9:3c:
                    b4:50:aa:ba:5b:54:5e:00:7b:f0:1d:1d:bd:6e:cd:
                    64:29:cc:de:d3:8b:71:69:e2:6b:92:b2:6c:b5:b9:
                    ff:00:ee:8e:18:9c:f2:c9:93:06:33:c3:a4:b8:1b:
                    f1:ec:04:d8:75:4b:95:27:b4:22:d1:3d:ec:ff:f9:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:68:FB:9F:5C:FD:35:68:61:F0:47:5A:17:F0:2C:FA:F5:DC:F9:3C
            X509v3 Authority Key Identifier:
                keyid:C8:11:72:2D:90:31:56:3F:6F:CB:87:52:1F:DE:08:68:01:00:08:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBFyLZAxVj9vy4dSH94IaAEACLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/a2j7n1z9NWhh8EdaF_As-vXc-Tw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ed21cc-ece2-4144-8dd7-0d07ae8a44fc/1/yBFyLZAxVj9vy4dSH94IaAEACLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:be:a7:21:50:66:2f:01:d5:f3:13:64:de:84:74:04:f6:2c:
         84:c5:1b:c3:00:c1:5b:52:7a:cf:d8:c7:c9:68:a4:72:58:d6:
         6f:c8:47:0b:b8:6d:d9:3b:e2:66:48:2a:b7:c4:0b:d3:19:d2:
         c1:2d:74:7e:1f:e8:e3:10:ed:c9:4f:ca:58:2f:49:5d:56:3a:
         68:a9:cd:c8:26:e3:d6:ce:74:f1:94:9e:e1:22:55:5a:0b:fe:
         53:57:9e:26:2b:c3:1a:62:80:41:25:e7:23:b8:9f:e9:c9:2a:
         d1:80:15:d6:59:7e:18:30:7b:17:d3:46:eb:77:3e:30:6b:76:
         cc:c0:3f:cf:98:90:e6:0b:c0:70:25:52:fd:07:3b:96:83:a2:
         3c:23:05:9f:43:7b:63:50:cf:26:ff:94:69:b2:d2:a3:3f:fc:
         55:67:33:41:e3:2e:70:7a:ec:31:f2:d0:bd:c6:6e:35:70:d3:
         4e:e9:98:72:46:b3:14:65:02:19:f4:bc:1f:25:73:ff:70:0d:
         3a:35:c8:2b:61:8d:40:e5:80:be:79:62:45:be:d0:5c:fa:58:
         f4:42:59:3e:bd:c1:f7:ee:69:96:8e:9e:8b:9a:4b:f0:76:b3:
         74:78:8d:e8:a8:5d:a5:bf:bc:98:42:d1:07:2c:87:62:33:94:
         97:52:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:43 2024 by rpki-client on console-fra.rpki-client.org