Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/bGYGRvJrrRyXb-84lxy845Rbrd8.roa
File:                     bGYGRvJrrRyXb-84lxy845Rbrd8.roa (raw, json)
Hash identifier:          Pq4HdE28Ele2bzMnbNQfuppXQjW+Zmev//bIh0I4FO8=
Subject key identifier:   6C:66:06:46:F2:6B:AD:1C:97:6F:EF:38:97:1C:BC:E3:94:5B:AD:DF
Certificate issuer:       /CN=da245d89e135bd95e348ee4c49fa0e7f2f56dbdf
Certificate serial:       012B83
Authority key identifier: DA:24:5D:89:E1:35:BD:95:E3:48:EE:4C:49:FA:0E:7F:2F:56:DB:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2iRdieE1vZXjSO5MSfoOfy9W298.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/bGYGRvJrrRyXb-84lxy845Rbrd8.roa
Signing time:             Thu 24 Mar 2022 11:36:45 +0000
ROA not before:           Thu 24 Mar 2022 11:36:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        79.142.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76675 (0x12b83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da245d89e135bd95e348ee4c49fa0e7f2f56dbdf
        Validity
            Not Before: Mar 24 11:36:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c660646f26bad1c976fef38971cbce3945baddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:76:7e:c2:22:a2:a6:17:49:10:3c:1a:5f:
                    a8:55:21:0c:d1:ee:14:b9:b3:9a:61:dd:82:35:71:
                    f4:5a:22:e6:56:14:fb:c0:2e:c9:ce:43:3a:50:86:
                    f1:94:24:9d:9c:c2:f4:e3:0a:5d:97:3c:53:d1:a0:
                    7b:aa:59:9a:fb:09:8a:69:bd:cb:97:46:1f:f0:f8:
                    01:14:fa:2f:5f:64:a3:ac:34:4f:0a:9c:49:77:c7:
                    19:6d:86:85:bb:df:13:01:40:0a:df:15:66:1f:c3:
                    05:bc:37:75:d3:6a:84:9a:db:42:34:21:dd:8a:fc:
                    3f:4c:7f:32:d1:e7:34:4b:1a:aa:08:88:ec:cd:12:
                    bc:80:8d:8c:5c:77:04:ed:ba:3b:5a:09:46:e1:ce:
                    60:a6:b6:7c:de:8d:43:96:54:6e:02:e7:25:ee:c3:
                    74:76:2b:78:90:c9:a0:83:34:59:88:49:8c:2b:cb:
                    a6:62:71:98:4a:bb:0c:e8:b0:9a:d9:8a:30:e4:e9:
                    bf:53:63:a0:20:4f:69:5b:fd:a3:08:e2:a8:62:b3:
                    95:8b:b8:23:b7:f0:81:10:eb:78:bf:75:32:24:0e:
                    4e:01:8f:8e:83:d0:e0:dc:4b:43:84:9b:b7:2e:24:
                    ea:26:f5:cb:50:24:1d:0f:1c:96:05:5f:4e:7f:50:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:66:06:46:F2:6B:AD:1C:97:6F:EF:38:97:1C:BC:E3:94:5B:AD:DF
            X509v3 Authority Key Identifier:
                keyid:DA:24:5D:89:E1:35:BD:95:E3:48:EE:4C:49:FA:0E:7F:2F:56:DB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iRdieE1vZXjSO5MSfoOfy9W298.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/bGYGRvJrrRyXb-84lxy845Rbrd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/903f00-afbb-4cf9-b641-50a830163027/1/2iRdieE1vZXjSO5MSfoOfy9W298.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.142.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:27:dd:6b:21:53:72:3b:67:f9:02:57:31:6b:2a:0a:03:2e:
         0a:3b:56:ab:af:19:80:7b:fb:c1:f6:32:ba:d6:fe:60:a0:1d:
         0e:c7:3b:b1:62:c4:ce:0e:b1:7c:bf:74:1e:44:fb:13:1b:1e:
         5a:8c:45:de:0b:9f:b9:36:3f:2e:fa:a0:64:cf:0f:04:40:66:
         fa:3e:bc:22:3b:0a:22:82:d7:5d:30:e3:32:8f:bd:71:ef:f8:
         f4:6c:85:0f:9d:7c:20:76:8e:43:83:41:12:ea:e4:c0:80:9e:
         e3:49:87:39:91:e1:12:d7:42:7a:fa:4d:bb:5a:57:c2:a3:33:
         aa:c5:c8:38:36:c8:88:f9:f5:30:5c:21:ac:28:ac:03:ac:18:
         e8:f3:6d:1a:f7:8f:a9:41:14:3b:5f:bb:26:f1:53:d0:b3:48:
         95:82:96:0a:4d:01:28:8e:3f:19:b2:fa:d0:3f:c6:cf:eb:3e:
         a2:97:43:30:47:d4:51:5e:58:b6:c9:6a:c3:21:8d:a3:d7:75:
         31:83:c0:58:88:48:56:37:91:df:c9:27:1a:5f:18:1c:1a:73:
         c8:56:a0:29:70:67:8e:4f:1b:47:58:ca:31:0d:f9:01:77:10:
         0c:81:90:9d:2f:a0:99:26:6b:7b:96:21:a7:7b:b1:be:63:ba:
         24:5b:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:00 2024 by rpki-client on console-ams.rpki-client.org