Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/wUbHhyYztvNHhY_wibTXcRwXeAU.roa
File:                     wUbHhyYztvNHhY_wibTXcRwXeAU.roa (raw, json)
Hash identifier:          DjPpu6RovGs3rXjBgJtvlq7XFNwAGmCgAUu0s1kHezo=
Subject key identifier:   C1:46:C7:87:26:33:B6:F3:47:85:8F:F0:89:B4:D7:71:1C:17:78:05
Certificate issuer:       /CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
Certificate serial:       E279FF
Authority key identifier: 47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/wUbHhyYztvNHhY_wibTXcRwXeAU.roa
Signing time:             Sat 01 Jan 2022 11:58:44 +0000
ROA not before:           Sat 01 Jan 2022 11:58:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        79.110.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14842367 (0xe279ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
        Validity
            Not Before: Jan  1 11:58:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c146c7872633b6f347858ff089b4d7711c177805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:b0:d4:a6:62:b6:2f:8c:4c:2f:e2:0f:00:
                    ea:c0:fa:12:ba:4d:5a:b1:a3:90:5b:0b:0d:93:d6:
                    dd:69:d5:df:1b:1f:0e:78:a0:a5:7a:0e:57:d3:58:
                    19:c2:d4:a6:a3:df:28:79:11:32:23:22:d8:6e:0d:
                    85:6f:c9:f9:82:14:8c:b1:02:95:68:31:0d:4c:f6:
                    28:76:c4:9f:6e:ef:4b:a2:2d:80:af:f5:be:74:61:
                    36:dc:80:5d:46:6a:fc:76:08:d8:dd:8b:fb:dd:d4:
                    ac:e7:84:95:69:02:76:2f:21:ea:3c:30:cc:52:fc:
                    d5:64:d4:3f:a4:e3:54:ad:65:1a:07:78:bf:4d:e3:
                    3b:b4:8b:48:23:83:04:bb:ce:0c:6c:11:fd:46:f2:
                    97:bc:be:43:c0:21:d1:ea:35:77:ab:e5:3b:42:ef:
                    58:bd:c6:47:44:bd:2b:99:12:e7:69:74:f5:2e:9b:
                    1d:07:c4:35:89:db:c9:43:6c:2f:7f:9f:ac:b4:94:
                    38:ad:40:47:22:b9:bc:d1:01:52:1f:87:bf:d8:df:
                    a0:bd:c5:4b:9c:41:0c:34:5c:62:d3:2e:7d:6a:bb:
                    09:8e:c4:9d:2f:b9:6b:ae:2c:84:0b:09:4a:5e:3a:
                    29:ba:07:66:cf:f2:b0:8c:95:1f:a1:55:b3:77:ef:
                    c1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:46:C7:87:26:33:B6:F3:47:85:8F:F0:89:B4:D7:71:1C:17:78:05
            X509v3 Authority Key Identifier:
                keyid:47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/wUbHhyYztvNHhY_wibTXcRwXeAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6c:8b:9c:a5:59:a1:a0:6d:1a:6a:05:51:90:d6:31:38:f4:
         f0:88:33:f1:40:d1:74:6f:39:ba:36:ce:bb:25:8c:94:98:0a:
         8e:4d:8d:3a:9f:79:23:d7:63:20:96:30:0d:b2:78:e4:71:6c:
         4c:bb:93:a4:c3:3f:e3:f1:85:49:3c:30:13:f8:41:f0:96:75:
         ae:24:6e:63:bb:e8:13:9e:88:97:03:bf:2a:82:d2:24:59:78:
         83:67:42:88:93:7e:32:ea:88:64:2b:9a:f4:1f:8d:9e:c8:11:
         79:5a:89:0b:b1:e6:5d:8b:5a:fd:75:af:eb:d3:2a:ac:84:54:
         a4:59:f4:f8:ff:51:59:93:43:87:53:ff:82:3b:88:9b:69:f4:
         25:8d:e6:25:a5:d3:ab:eb:4e:2d:8d:0a:72:1f:b9:15:c5:8d:
         63:77:6f:fe:c9:90:3d:f6:7b:45:72:76:4b:89:44:d9:87:9c:
         a1:48:53:62:22:56:a1:f2:4a:c3:0d:58:f9:ca:38:c2:0a:ce:
         e0:5a:fb:9c:fe:86:2a:82:12:89:d7:27:f8:5c:d6:0c:4d:ca:
         0c:96:bf:6d:8b:50:fe:39:db:ce:de:6b:0e:d2:7d:d3:e1:af:
         dc:d2:0d:ba:25:fc:eb:5a:6c:33:42:ce:13:56:a4:08:87:57:
         33:1f:fc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net