Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/d6f2PnfW85elWss5yhWVFWKjcP0.roa
File:                     d6f2PnfW85elWss5yhWVFWKjcP0.roa (raw, json)
Hash identifier:          ByM+Q8yLSP+957gmat/ckgSyMTTWrrwZ6dC5kQaJa+c=
Subject key identifier:   77:A7:F6:3E:77:D6:F3:97:A5:5A:CB:39:CA:15:95:15:62:A3:70:FD
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       018CC6B88DB0308049C967C4656C49EE4B50
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/d6f2PnfW85elWss5yhWVFWKjcP0.roa
Signing time:             Mon 01 Jan 2024 20:30:32 +0000
ROA not before:           Mon 01 Jan 2024 20:30:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     30952
IP address blocks:        80.79.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:8d:b0:30:80:49:c9:67:c4:65:6c:49:ee:4b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  1 20:30:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=77a7f63e77d6f397a55acb39ca15951562a370fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:2a:c9:26:47:06:88:ff:03:38:4d:e2:8f:
                    0f:2d:83:18:f5:0f:51:03:2e:a9:cd:e9:4d:db:1b:
                    9b:da:51:e5:04:cc:92:11:b9:a0:d0:23:2a:c9:2e:
                    b1:66:9a:18:9b:ef:70:b6:d8:95:02:c1:37:48:95:
                    e0:19:6d:1d:1a:0a:c0:40:13:97:60:c7:5e:2d:71:
                    bf:53:3e:31:64:aa:69:d8:9c:72:ef:07:37:ae:c9:
                    9e:c7:85:d4:c4:c4:e1:f2:aa:91:2f:1e:af:3e:71:
                    0e:0c:08:01:00:de:64:b2:76:e1:7a:c6:2c:93:e2:
                    31:6e:b1:eb:c4:f5:0f:9f:de:6a:56:59:3b:94:c6:
                    76:29:5d:fa:d6:3d:20:52:85:3d:39:98:96:7d:91:
                    d5:fa:b1:71:3c:e6:e7:42:79:8b:84:49:28:8c:71:
                    41:68:d9:98:7d:5c:df:ad:e3:cb:e0:80:37:b4:13:
                    f5:0d:8f:76:02:80:fe:bf:fc:e2:6d:f6:4c:61:74:
                    23:a1:c6:a1:ca:2b:69:95:de:22:38:47:59:2f:95:
                    92:8a:d8:e3:a8:c0:be:8d:8b:08:69:49:3d:ba:8e:
                    9b:1e:33:02:de:e8:ca:c3:25:d2:7f:2d:97:9a:7a:
                    83:86:db:52:0e:5a:9f:13:5a:25:32:27:db:6a:71:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A7:F6:3E:77:D6:F3:97:A5:5A:CB:39:CA:15:95:15:62:A3:70:FD
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/d6f2PnfW85elWss5yhWVFWKjcP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.79.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:37:a3:b8:d1:29:21:24:dc:7a:be:74:42:a4:57:a5:b7:ef:
         15:68:a8:8a:f2:89:84:ea:36:d4:67:2f:c4:0c:ca:a3:7c:17:
         e3:31:dc:3a:0c:81:a8:90:04:b5:f7:c5:b1:6c:9a:38:f5:e0:
         99:c9:aa:2c:9e:6d:f7:ae:ad:55:4a:c6:0e:d0:8e:f1:91:2c:
         17:86:37:e9:8c:9a:7e:20:e5:da:99:2f:d3:77:f6:cf:ee:c7:
         3f:8b:00:56:a8:99:41:ea:b2:26:35:4a:f4:fd:7b:16:08:ff:
         3e:0a:35:9b:c3:0e:fd:db:75:e4:3e:e3:b1:84:e9:2a:5c:0e:
         b9:71:55:32:68:84:93:9f:30:6e:2c:43:8e:0e:48:27:97:16:
         75:b8:62:1d:9c:4e:62:7a:ae:f5:31:e9:4e:90:ef:c9:e8:6e:
         0b:0b:31:4e:6e:24:e6:2d:01:0f:e0:23:23:84:59:ae:29:0a:
         ef:0e:2f:76:9e:ff:b3:e0:bc:5c:4b:ce:de:25:82:b2:1f:d7:
         68:e7:ac:9e:c6:c3:94:60:81:ef:af:d2:e5:de:50:90:83:9d:
         14:e3:0f:49:bc:a8:5f:80:5c:55:52:ae:63:9c:c4:6d:11:20:
         1d:ae:ee:5c:67:11:62:38:82:e3:80:fb:bb:4b:f4:21:4e:7c:
         42:40:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net