Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS47479.roa
File:                     AS47479.roa (raw, json)
Hash identifier:          eHVW7SGsG3GLUmPYSLnoPUEP1Ge8c3QRgYVGjcC2+5A=
Subject key identifier:   39:53:0A:C2:A3:3D:1D:5D:D8:2E:80:22:A9:DF:56:7A:48:36:BC:A9
Certificate issuer:       /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial:       2E85389E32CD0EC105F7917447B21190567EBEE8
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS47479.roa
Signing time:             Tue 06 Jun 2023 09:25:58 +0000
ROA not before:           Tue 06 Jun 2023 09:20:58 +0000
ROA not after:            Tue 04 Jun 2024 09:25:58 +0000
asID:                     47479
IP address blocks:        178.254.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:85:38:9e:32:cd:0e:c1:05:f7:91:74:47:b2:11:90:56:7e:be:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
        Validity
            Not Before: Jun  6 09:20:58 2023 GMT
            Not After : Jun  4 09:25:58 2024 GMT
        Subject: CN=39530AC2A33D1D5DD82E8022A9DF567A4836BCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:b9:09:ac:7a:dc:43:39:0c:ba:0e:2a:63:
                    88:43:5a:f4:2f:c8:cb:4f:19:dd:64:0d:da:f6:82:
                    c1:9d:6e:d0:8d:47:8c:25:ab:4b:8e:6d:cf:7a:46:
                    1b:d6:02:16:2a:99:f6:4c:91:52:dc:8c:5f:e0:36:
                    7f:2a:62:28:0c:d4:ba:aa:dc:9d:e6:b9:5b:5d:f0:
                    74:cf:43:86:9c:4b:1c:25:dd:68:83:c3:a4:30:1b:
                    3a:6e:57:5e:eb:fa:57:e2:38:9e:31:36:c9:58:61:
                    11:14:e0:20:fa:c5:2d:02:05:9b:32:a7:a4:6f:99:
                    a3:73:7f:9d:8e:1c:6e:a5:f3:ed:8e:c8:3a:21:55:
                    8c:08:ac:bd:12:b9:b3:19:1f:7f:a5:7e:e3:36:f9:
                    b2:cd:9a:95:34:75:3c:27:a3:6f:67:ab:df:1d:c3:
                    bb:c9:35:2c:c8:b0:e0:6c:ad:87:c8:4f:89:55:df:
                    66:8a:34:cf:72:24:a0:08:f4:ed:42:02:c5:b3:26:
                    8a:a5:75:4b:63:08:80:a8:ba:b5:f1:82:21:94:dd:
                    00:e4:05:6b:0a:f6:61:96:81:8e:ac:d1:1f:12:90:
                    50:63:67:73:df:65:05:9a:8a:5c:81:a2:94:c4:fd:
                    d3:7a:85:25:0a:43:80:60:bf:5a:5e:84:bf:e4:92:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:53:0A:C2:A3:3D:1D:5D:D8:2E:80:22:A9:DF:56:7A:48:36:BC:A9
            X509v3 Authority Key Identifier:
                keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS47479.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:99:dc:25:4f:8f:07:bc:84:ca:a5:70:74:d5:8a:17:21:8b:
         a8:f2:52:4e:64:5a:66:c4:a0:51:5f:7a:6c:73:c1:48:fc:27:
         0a:3a:a3:4f:54:1b:d4:24:69:3f:84:d6:6b:8b:a3:f0:8d:5f:
         3d:25:23:3a:23:8e:51:a0:32:2e:2b:0d:fb:97:8a:0a:d4:a9:
         0b:89:39:a3:8f:e3:52:39:81:30:2c:36:a0:b5:9c:54:98:c0:
         31:ff:06:2f:54:92:f5:33:46:be:78:47:70:34:b5:d0:ad:89:
         a8:8e:68:51:80:46:8c:3b:ec:72:e8:21:51:81:94:cc:fa:27:
         7a:96:d6:e0:ba:8b:9e:85:91:83:4c:52:01:d4:b5:d1:da:82:
         de:f5:fb:2b:74:79:3f:4e:6e:1b:90:7e:62:70:a5:5c:44:67:
         29:20:a8:6f:0d:f6:54:fb:49:9e:f4:4c:15:a3:7f:4a:e3:cb:
         89:50:65:bb:3d:46:1a:f9:84:eb:07:c7:19:c2:d3:6b:e0:de:
         22:f0:64:d8:cb:58:57:7c:cf:a5:07:86:f1:87:37:6b:a1:18:
         d5:07:01:37:ce:a6:1b:ea:d8:45:81:7a:e1:9c:e0:68:f8:64:
         c7:36:87:dc:3c:69:7f:87:1f:55:22:cf:e1:25:9a:28:ff:4e:
         f6:b1:70:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org