Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/N5198qH0VU6IyJuu1PZTioWkrvA.roa
File:                     N5198qH0VU6IyJuu1PZTioWkrvA.roa (raw, json)
Hash identifier:          0tD5KKxaSwTBgdcHH1E0Cb1WTtVPV387VNUhCYhb8fI=
Subject key identifier:   37:9D:7D:F2:A1:F4:55:4E:88:C8:9B:AE:D4:F6:53:8A:85:A4:AE:F0
Certificate issuer:       /CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Certificate serial:       017AEA8D
Authority key identifier: 34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/N5198qH0VU6IyJuu1PZTioWkrvA.roa
Signing time:             Sun 13 Mar 2022 14:42:37 +0000
ROA not before:           Sun 13 Mar 2022 14:42:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        79.110.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24832653 (0x17aea8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
        Validity
            Not Before: Mar 13 14:42:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=379d7df2a1f4554e88c89baed4f6538a85a4aef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:96:6a:04:85:cb:a0:84:14:8e:11:cd:88:
                    94:96:15:77:ef:47:29:80:f9:0c:81:5a:c9:b2:38:
                    d6:2f:6b:c6:86:6e:f7:5e:96:6a:c1:95:1e:86:a5:
                    16:a1:2c:d4:5a:ac:90:18:bf:5c:42:63:f1:08:a7:
                    e9:33:f5:8c:8e:48:45:f1:74:7c:7b:b8:05:50:27:
                    de:89:f2:a0:62:88:2a:43:09:88:b1:ea:53:cc:62:
                    59:c1:b7:05:e4:d2:47:f3:46:81:90:4b:33:8e:c5:
                    60:3c:38:40:aa:24:49:65:35:e1:17:27:8b:41:94:
                    85:84:c6:a6:7e:de:88:bd:03:0c:ba:90:17:16:db:
                    00:df:03:87:a5:9b:2f:32:c2:b6:ac:be:38:40:5d:
                    fe:f9:a4:34:d9:be:11:37:1b:a9:e0:f5:6c:c0:33:
                    88:96:00:d5:24:f5:54:e6:c3:2b:82:49:e3:8a:df:
                    73:1e:ca:bd:88:ff:45:5d:91:7a:fa:a2:3f:ad:f2:
                    21:c9:b7:00:98:f5:3f:d5:35:d8:f1:77:94:7c:94:
                    ca:a6:64:e1:61:b7:fa:e3:e0:fb:f1:8e:1d:4b:9a:
                    84:43:fb:0d:c3:99:75:4e:2a:e7:3d:ef:8e:4d:48:
                    46:72:35:a6:d0:10:00:af:55:0c:f8:80:3c:9e:af:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9D:7D:F2:A1:F4:55:4E:88:C8:9B:AE:D4:F6:53:8A:85:A4:AE:F0
            X509v3 Authority Key Identifier:
                keyid:34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/N5198qH0VU6IyJuu1PZTioWkrvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:35:d7:40:89:c6:a5:55:06:55:2a:6d:4f:5e:bd:be:15:0a:
         e7:69:57:b8:ce:26:80:85:09:b8:84:20:66:71:8f:7b:2c:c6:
         5a:99:42:a8:3d:fa:d5:ad:c4:ff:b4:3c:1f:3f:44:76:83:b7:
         fb:90:e7:68:01:5f:cc:ae:08:c6:96:4d:75:19:f2:75:d4:6f:
         c4:37:c1:65:57:1d:d6:81:75:60:ea:83:0e:0f:a7:fd:23:49:
         c2:70:bc:ae:5d:bb:db:26:22:95:54:ac:6e:f2:de:7d:51:b6:
         04:58:a4:19:54:ef:09:54:79:2c:d5:e5:4f:a5:9c:6e:3d:65:
         88:ba:6c:4e:81:3a:f9:ff:b9:b3:67:95:1a:a0:9a:b5:95:4c:
         1b:c3:46:56:a1:b6:77:54:65:23:0b:81:69:fd:29:13:84:9b:
         41:12:19:e7:db:4d:0e:22:82:ac:41:df:2f:cf:c2:0f:59:99:
         ec:1c:62:88:10:e2:21:2e:0e:f9:07:e8:ae:22:46:32:9e:da:
         bc:4d:5a:49:ef:c9:48:6e:6c:06:cc:46:95:26:8f:11:34:64:
         2c:b1:38:4e:cc:6a:59:ea:8f:99:31:2a:1d:c4:f7:64:2a:8e:
         5e:fc:d9:57:e0:16:39:56:3b:79:ec:bd:11:29:96:b1:38:75:
         9d:f8:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:18 2024 by rpki-client on console-fra.rpki-client.org