Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/bl_7kpYjzAp9hpxQbyT-puwvJr8.roa
File:                     bl_7kpYjzAp9hpxQbyT-puwvJr8.roa (raw, json)
Hash identifier:          FgikhgawzS1avlkOiYtHjQ2h6M5ceyOOti5uuj0EamA=
Subject key identifier:   6E:5F:FB:92:96:23:CC:0A:7D:86:9C:50:6F:24:FE:A6:EC:2F:26:BF
Certificate issuer:       /CN=4cd25482a7d739913551e1de151bfecc417f8770
Certificate serial:       141B40F4
Authority key identifier: 4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/bl_7kpYjzAp9hpxQbyT-puwvJr8.roa
Signing time:             Sat 01 Jan 2022 16:11:35 +0000
ROA not before:           Sat 01 Jan 2022 16:11:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44078
IP address blocks:        79.135.216.0/22 maxlen: 22
                          46.37.192.0/19 maxlen: 19
                          79.135.220.0/22 maxlen: 22
                          79.135.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337330420 (0x141b40f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cd25482a7d739913551e1de151bfecc417f8770
        Validity
            Not Before: Jan  1 16:11:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e5ffb929623cc0a7d869c506f24fea6ec2f26bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:d6:da:db:9e:6d:70:22:6f:08:5a:a5:93:
                    cb:8d:79:ba:2e:d8:b8:26:30:89:77:2b:ce:cc:59:
                    d8:af:1d:09:cd:49:dd:8d:3c:7e:1f:6d:a0:25:34:
                    24:8b:a3:45:1a:18:d1:e8:8d:e5:a1:f6:7c:cd:a8:
                    8d:96:d2:fe:59:c1:c4:03:d6:6d:25:37:a1:2e:0a:
                    e8:e6:cf:52:fa:23:39:41:5b:0c:24:b1:82:45:85:
                    0a:f9:a3:43:d6:10:05:83:b0:17:2a:df:d8:83:53:
                    5a:56:1f:d9:0b:de:7a:b2:d1:ce:23:bb:e5:1a:3b:
                    73:c3:35:f6:30:be:4b:95:8b:5b:59:ec:77:ab:81:
                    b4:40:45:15:5f:66:bc:9e:6f:04:cb:d0:21:68:11:
                    32:a6:7f:ee:c4:5b:8b:2e:5e:ea:64:3b:d0:be:5a:
                    e4:d4:43:f6:9b:cc:65:d6:7e:5c:4b:14:d4:75:50:
                    11:86:db:71:6a:23:75:30:04:4f:6a:24:1c:f9:ce:
                    aa:d6:7e:a5:4a:9f:64:54:59:fe:81:7f:c3:e1:ee:
                    cf:f5:4c:c8:86:99:92:66:f8:37:f0:82:ab:66:d8:
                    f4:56:82:55:64:0b:e5:20:d5:bb:3f:fa:4b:85:82:
                    4c:f7:8f:f5:52:0e:32:05:9b:f4:08:61:85:48:15:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5F:FB:92:96:23:CC:0A:7D:86:9C:50:6F:24:FE:A6:EC:2F:26:BF
            X509v3 Authority Key Identifier:
                keyid:4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/bl_7kpYjzAp9hpxQbyT-puwvJr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.192.0/19
                  79.135.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:a4:a2:5d:f4:3d:da:d7:5a:0b:77:4b:9a:1f:b6:86:fe:6a:
         dd:76:c1:9a:15:14:15:61:ea:de:13:26:cb:47:31:c3:9f:77:
         93:dc:96:d9:97:a7:e5:e6:64:1e:df:f3:07:b1:8d:f7:e5:16:
         a1:4c:8f:54:ad:fb:fd:d7:c0:bd:5d:23:17:d6:1e:f8:0e:39:
         af:e7:e3:ff:ca:63:f3:0c:17:d0:bd:7d:36:d5:8b:79:82:19:
         50:fc:e2:b2:75:ea:91:22:c9:4b:18:c2:d0:7f:90:2c:bb:82:
         57:3e:58:61:4b:0a:ab:98:4c:15:f6:4e:23:c9:d4:66:34:ea:
         f6:f3:0f:61:94:f6:4f:6d:cd:1a:0e:13:51:b2:07:f2:39:be:
         e7:91:53:f9:8f:4a:06:00:f9:1f:c2:be:71:38:a7:7e:69:ba:
         21:d1:24:50:ca:91:3f:60:ab:96:c9:79:70:63:f8:5d:42:48:
         d1:e6:d8:cb:5f:fc:c3:93:2e:2d:6e:8f:2b:b0:2d:9a:09:a4:
         bd:b6:9e:7f:d3:2c:98:d4:f3:8d:c9:2e:36:e3:1a:61:38:d6:
         d0:bc:0c:dc:e1:1e:e7:c0:86:c7:07:38:87:60:da:1b:44:b7:
         c1:1d:26:81:a5:e2:d2:0d:2c:e4:d1:2d:d5:2b:90:17:e7:bf:
         18:e2:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:31 2024 by rpki-client on console-fra.rpki-client.org