Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/H2ebT_0ZPbL4risjnjz05jJ6zlQ.roa
File:                     H2ebT_0ZPbL4risjnjz05jJ6zlQ.roa (raw, json)
Hash identifier:          qiMkYC8T/1N5ZPIsJqne/uzzy5ElcY3z1Sf4rybMQSY=
Subject key identifier:   1F:67:9B:4F:FD:19:3D:B2:F8:AE:2B:23:9E:3C:F4:E6:32:7A:CE:54
Certificate issuer:       /CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
Certificate serial:       018A7DA2BF1603F3DF4786EE308AB083AEB5
Authority key identifier: 47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/H2ebT_0ZPbL4risjnjz05jJ6zlQ.roa
Signing time:             Sun 10 Sep 2023 05:48:52 +0000
ROA not before:           Sun 10 Sep 2023 05:48:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        79.110.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7d:a2:bf:16:03:f3:df:47:86:ee:30:8a:b0:83:ae:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
        Validity
            Not Before: Sep 10 05:48:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f679b4ffd193db2f8ae2b239e3cf4e6327ace54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:af:fa:84:48:c5:b0:da:06:97:31:ac:1c:
                    f9:ee:42:51:c6:cb:39:f7:70:36:bb:8d:9a:d1:6b:
                    a4:07:a0:e1:eb:ec:27:35:5e:da:eb:86:e8:24:2f:
                    3d:8d:9c:1e:d6:be:f9:e0:46:a7:a3:aa:b4:53:cb:
                    0d:05:42:cb:82:1d:36:94:29:b6:b0:8e:5c:6e:36:
                    88:91:dd:7d:56:cb:1b:7c:0a:bb:eb:38:fd:25:c4:
                    4f:b0:88:50:e8:4b:1b:6a:e3:70:77:e3:1c:b5:2c:
                    54:3c:e3:b6:4a:68:f1:d5:d3:3b:80:c3:31:e1:d1:
                    c7:67:df:4d:52:5c:04:74:c0:7f:3b:62:70:2a:59:
                    70:7d:9f:7d:50:27:09:90:60:a0:40:d2:c4:37:07:
                    b7:ee:b8:e1:9f:40:ac:42:f5:ec:d3:9b:d4:d7:18:
                    32:ad:38:4d:3b:4d:de:b5:4c:87:b5:36:64:93:9c:
                    b9:90:c0:7c:8e:5b:fd:6b:88:a7:37:a2:ee:74:72:
                    a3:ee:af:54:b8:97:93:62:fa:4a:67:cb:ad:43:f0:
                    14:58:1b:7c:a1:14:91:09:c2:bc:14:a1:88:58:a0:
                    2c:85:b8:55:ae:78:a7:21:22:cf:08:80:15:5b:28:
                    d8:18:24:ba:97:0e:3f:a1:f9:c9:ee:dc:5c:99:c9:
                    46:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:67:9B:4F:FD:19:3D:B2:F8:AE:2B:23:9E:3C:F4:E6:32:7A:CE:54
            X509v3 Authority Key Identifier:
                keyid:47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/H2ebT_0ZPbL4risjnjz05jJ6zlQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:34:be:ec:42:37:8c:54:13:ce:25:f1:0f:fd:ee:0a:7b:24:
         5b:a7:e2:0a:61:41:a1:82:02:01:8c:0b:d1:9f:7f:4a:1e:74:
         2d:85:ec:48:48:c9:1c:99:10:d4:cf:18:5e:64:f5:0c:10:4d:
         25:4c:00:9a:c5:3e:2d:be:9b:92:c6:f2:fd:95:39:0b:81:6b:
         a8:56:08:46:0e:ec:51:d9:22:b2:8d:d4:2f:7b:1d:d3:6d:1f:
         8c:d3:31:de:d5:e0:5d:20:46:37:f0:ee:81:81:57:08:a7:ba:
         4a:46:dd:38:39:3f:ad:96:ca:2d:eb:3e:63:9d:c9:ee:52:57:
         70:d8:c4:64:09:04:ed:33:49:8a:e7:62:49:f9:30:0b:56:72:
         c8:5a:d5:a0:86:5f:50:bc:d6:d3:65:15:31:57:20:40:1e:f4:
         bd:6e:c3:76:36:fe:f3:79:6d:5b:af:7b:0b:78:80:34:41:69:
         df:15:b8:ad:5e:13:50:71:e4:f6:bc:e2:0a:31:5d:b2:70:c4:
         b4:1b:ee:ec:e6:cd:0e:e0:66:0d:53:bf:57:4f:04:70:db:2b:
         97:45:3e:26:9d:f1:53:08:bd:22:1c:39:9d:8a:30:e1:02:46:
         a3:25:b6:2d:ff:7a:4a:31:c2:28:0d:0f:51:2b:26:68:d8:53:
         ae:35:e3:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYp9or8WA/PfR4buMIqwg661MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzY0ZmY3MjMwZTg5OTI2NDg0NDQ1ZDRhYzg2MmIzZTlm
YWZlNGQwHhcNMjMwOTEwMDU0ODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjY3OWI0ZmZkMTkzZGIyZjhhZTJiMjM5ZTNjZjRlNjMyN2FjZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCuv+oRIxbDaBpcxrBz57kJRxss5
93A2u42a0WukB6Dh6+wnNV7a64boJC89jZwe1r754Eano6q0U8sNBULLgh02lCm2
sI5cbjaIkd19VssbfAq76zj9JcRPsIhQ6EsbauNwd+MctSxUPOO2Smjx1dM7gMMx
4dHHZ99NUlwEdMB/O2JwKllwfZ99UCcJkGCgQNLENwe37rjhn0CsQvXs05vU1xgy
rThNO03etUyHtTZkk5y5kMB8jlv9a4inN6LudHKj7q9UuJeTYvpKZ8utQ/AUWBt8
oRSRCcK8FKGIWKAshbhVrninISLPCIAVWyjYGCS6lw4/ofnJ7txcmclGnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9nm0/9GT2y+K4rI5489OYyes5UMB8GA1UdIwQY
MBaAFEfGT/cjDomSZIREXUrIYrPp+v5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhaUDl5TU9pWkpraEVSZFNzaGlzLW42X2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lMmE0OTctNGRiOC00YzRhLTg1OGUt
MGZiZTdjYmJmZjFkLzEvSDJlYlRfMFpQYkw0cmlzam5qejA1ako2emxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lMmE0OTctNGRiOC00YzRhLTg1OGUtMGZiZTdjYmJmZjFk
LzEvUjhaUDl5TU9pWkpraEVSZFNzaGlzLW42X2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27jMA0G
CSqGSIb3DQEBCwUAA4IBAQCxNL7sQjeMVBPOJfEP/e4KeyRbp+IKYUGhggIBjAvR
n39KHnQthexISMkcmRDUzxheZPUMEE0lTACaxT4tvpuSxvL9lTkLgWuoVghGDuxR
2SKyjdQvex3TbR+M0zHe1eBdIEY38O6BgVcIp7pKRt04OT+tlsot6z5jncnuUldw
2MRkCQTtM0mK52JJ+TALVnLIWtWghl9QvNbTZRUxVyBAHvS9bsN2Nv7zeW1br3sL
eIA0QWnfFbitXhNQceT2vOIKMV2ycMS0G+7s5s0O4GYNU79XTwRw2yuXRT4mnfFT
CL0iHDmdijDhAkajJbYt/3pKMcIoDQ9RKyZo2FOuNeMj
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net