Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a89de-8712-4842-a053-34f24feee664/1/gY5QyRkRInUrtM-jZzit8hHdx2w.roa
File:                     gY5QyRkRInUrtM-jZzit8hHdx2w.roa (raw, json)
Hash identifier:          YBAJi3MAvooVfeiS6vDKkhnKlWggO0Gf/qzcZ2Lo5y4=
Subject key identifier:   81:8E:50:C9:19:11:22:75:2B:B4:CF:A3:67:38:AD:F2:11:DD:C7:6C
Certificate issuer:       /CN=4f9eb093ca13375a2fcdd0198da5501dd6af9486
Certificate serial:       01581A01
Authority key identifier: 4F:9E:B0:93:CA:13:37:5A:2F:CD:D0:19:8D:A5:50:1D:D6:AF:94:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T56wk8oTN1ovzdAZjaVQHdavlIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/2a89de-8712-4842-a053-34f24feee664/1/gY5QyRkRInUrtM-jZzit8hHdx2w.roa
Signing time:             Sat 01 Jan 2022 13:03:44 +0000
ROA not before:           Sat 01 Jan 2022 13:03:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199496
IP address blocks:        185.249.79.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22551041 (0x1581a01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9eb093ca13375a2fcdd0198da5501dd6af9486
        Validity
            Not Before: Jan  1 13:03:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=818e50c9191122752bb4cfa36738adf211ddc76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:75:db:f2:6d:d4:9e:2b:04:d2:30:4d:c5:
                    7d:87:49:c8:65:30:76:6b:25:d9:b9:b3:b6:72:c5:
                    1c:af:13:c3:53:d4:f0:3a:ca:7b:64:b3:b4:5e:69:
                    66:61:3f:c1:54:f6:f6:bb:4c:a1:47:f7:36:22:87:
                    56:ee:08:dc:b5:7b:9d:b7:37:6e:fe:6d:63:65:87:
                    2b:e1:90:9b:f8:e5:ae:ba:58:b5:d8:b9:c6:35:d4:
                    59:61:b4:9f:20:b1:93:38:e1:b0:6f:37:b5:ad:28:
                    ec:75:2a:e6:5b:8d:ea:e2:6b:37:b5:8a:0d:5d:ff:
                    44:1d:63:f4:f2:ba:cf:01:1e:39:bd:cb:6d:46:5f:
                    c3:f1:8b:48:18:9c:c7:05:e0:dd:1e:0b:70:08:cb:
                    15:f0:b1:0e:dc:82:85:f7:61:80:e7:38:31:45:06:
                    bb:fd:34:a9:9e:e6:14:36:5c:2a:0c:14:de:f7:c5:
                    0a:65:51:fa:6e:42:dc:b0:ef:1b:83:9a:f0:d4:1b:
                    45:bf:b7:f1:31:85:d6:ae:be:9a:1d:ac:3a:fd:b3:
                    ba:33:ee:ac:49:fb:13:5e:5c:1b:dc:fb:16:b0:bd:
                    cd:30:0b:bd:13:15:00:a7:e2:b4:83:f4:5f:3f:1b:
                    e9:6c:02:a0:1a:33:0d:ef:95:b8:c1:9d:3f:5d:e8:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:50:C9:19:11:22:75:2B:B4:CF:A3:67:38:AD:F2:11:DD:C7:6C
            X509v3 Authority Key Identifier:
                keyid:4F:9E:B0:93:CA:13:37:5A:2F:CD:D0:19:8D:A5:50:1D:D6:AF:94:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T56wk8oTN1ovzdAZjaVQHdavlIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a89de-8712-4842-a053-34f24feee664/1/gY5QyRkRInUrtM-jZzit8hHdx2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a89de-8712-4842-a053-34f24feee664/1/T56wk8oTN1ovzdAZjaVQHdavlIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.249.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:28:98:14:a9:92:2e:a0:89:62:1c:4e:09:30:93:84:03:
         e1:1b:c7:24:a8:3b:45:61:c7:16:4c:4b:e3:ed:fc:ce:89:c3:
         66:a5:06:3c:ee:63:51:cf:3d:7e:79:98:74:17:4d:9e:3f:f6:
         25:8c:85:8b:15:c1:71:a9:28:ef:f6:13:0e:e0:b3:63:5b:53:
         da:5e:92:0f:c8:07:b3:dc:20:3d:47:31:2b:c0:0c:31:20:ef:
         ca:e6:12:64:02:5e:fb:a9:24:7d:52:31:07:27:f7:7b:d2:87:
         10:62:7a:15:f2:bd:88:d0:72:fc:fd:bf:bb:51:be:78:47:9d:
         9f:db:f7:3b:fa:68:17:f2:d9:a2:40:64:af:b3:7f:aa:73:b5:
         ca:68:0c:53:38:50:cf:15:0f:28:f3:32:43:78:72:ec:6d:25:
         8b:78:94:7b:7f:e2:70:3e:7c:2c:2f:0a:2c:38:30:bc:e2:94:
         9b:b9:89:ff:fc:6d:e8:4d:81:2f:30:c3:26:1f:23:da:71:f0:
         97:2f:fe:2b:df:ad:76:e8:6c:9f:d0:bf:4b:d7:cb:f1:f6:69:
         cd:b7:53:22:f2:05:da:ac:15:64:4e:67:47:34:e8:24:af:6d:
         55:0c:3b:95:11:dd:20:9a:ab:63:62:78:4f:a1:cc:36:ff:c2:
         50:cd:67:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:50 2024 by rpki-client on console-fra.rpki-client.org