Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/79YNX6qr527FVVwr-xkCNkbVUFU.roa
File:                     79YNX6qr527FVVwr-xkCNkbVUFU.roa (raw, json)
Hash identifier:          M7lU911Jbta6JtESxlLEpkWUeXV5Gz2U/T6hO4Tmv3Q=
Subject key identifier:   EF:D6:0D:5F:AA:AB:E7:6E:C5:55:5C:2B:FB:19:02:36:46:D5:50:55
Certificate issuer:       /CN=dd4ea3fc8b485501f7220e61382abd73211ee2a8
Certificate serial:       01A9D6AD
Authority key identifier: DD:4E:A3:FC:8B:48:55:01:F7:22:0E:61:38:2A:BD:73:21:1E:E2:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/79YNX6qr527FVVwr-xkCNkbVUFU.roa
Signing time:             Sat 01 Jan 2022 11:59:21 +0000
ROA not before:           Sat 01 Jan 2022 11:59:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203061
IP address blocks:        185.25.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27907757 (0x1a9d6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4ea3fc8b485501f7220e61382abd73211ee2a8
        Validity
            Not Before: Jan  1 11:59:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=efd60d5faaabe76ec5555c2bfb19023646d55055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:51:61:0e:df:2d:7b:25:5f:13:11:49:28:
                    bd:db:83:b0:d0:7f:cb:23:46:1a:22:db:6a:7d:3b:
                    bb:23:8b:12:cc:62:42:8b:1f:a9:7e:c8:80:14:3a:
                    f3:4a:85:09:41:95:d2:a0:5f:9d:e2:7c:cd:e5:b5:
                    ca:15:0d:d9:18:0b:dd:00:d6:f9:2f:f7:50:d2:30:
                    12:aa:48:b3:fa:dc:7f:a2:81:ca:6e:79:0e:6e:88:
                    0d:cb:7d:ce:f8:cf:58:4d:e3:1b:f1:17:41:e1:99:
                    8c:93:89:c7:c3:48:d3:2a:ff:c9:d8:54:8d:95:f1:
                    02:05:eb:c4:d1:60:0e:d5:93:60:98:de:b4:e4:a1:
                    02:06:c1:7f:6e:84:92:0c:e4:d6:c1:bf:50:c9:50:
                    44:d9:b8:35:91:14:26:01:f9:c1:c5:b6:29:f9:be:
                    70:09:46:8b:e6:f9:a0:be:3c:f2:4a:fc:9f:79:9e:
                    36:9d:de:4e:99:5c:d9:ca:65:bb:0f:13:55:11:be:
                    f5:cd:6a:e4:88:bf:72:b2:ab:08:d2:17:b8:94:df:
                    3a:98:e5:ba:dd:f8:59:56:07:52:d7:ed:59:c1:e4:
                    a6:4a:fa:cd:66:75:4c:4e:c4:5c:37:c5:84:fc:2d:
                    f6:eb:fc:7c:bf:36:14:5a:a7:57:1a:9c:03:03:de:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:0D:5F:AA:AB:E7:6E:C5:55:5C:2B:FB:19:02:36:46:D5:50:55
            X509v3 Authority Key Identifier:
                keyid:DD:4E:A3:FC:8B:48:55:01:F7:22:0E:61:38:2A:BD:73:21:1E:E2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/79YNX6qr527FVVwr-xkCNkbVUFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.25.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:55:84:c7:fe:e8:b9:df:7f:19:9a:4e:b4:a2:72:05:3d:
         7e:ed:9b:4d:4f:0a:3a:a7:4e:95:6b:5e:92:1d:9f:b2:0a:4f:
         54:8f:de:4a:2e:4b:69:27:f7:14:f4:33:6c:85:bb:02:35:16:
         db:1a:fb:e1:aa:04:d7:e8:3d:98:39:75:a2:e0:58:52:b5:2b:
         08:59:e4:50:a7:f2:ca:ea:d8:ec:27:35:67:18:77:e4:20:c7:
         0a:8f:5e:ba:f0:7d:f1:2f:11:1e:84:36:2a:11:95:8f:70:fc:
         d7:9d:0f:e6:af:af:02:49:c7:59:7b:af:0e:59:8d:a3:b4:0a:
         5e:89:fc:aa:bd:09:5b:03:88:33:59:6e:a3:c9:51:70:27:a3:
         98:b5:b1:ad:a4:25:63:29:a1:4a:0b:cb:3f:b2:b7:d2:7e:96:
         45:e6:db:34:4b:cf:ca:a2:f9:f9:13:dc:51:e8:30:ea:de:32:
         21:ef:a2:bd:3f:9e:a3:23:0c:6b:69:87:ae:b6:63:d6:f8:29:
         14:3c:74:e3:eb:f2:69:22:8f:21:1e:fb:9d:b5:dd:14:9b:3e:
         a7:5b:cc:f9:a9:cf:4a:d0:9b:6a:f2:1e:83:bf:9c:f8:26:99:
         52:a2:31:8e:17:cc:86:e6:00:4d:96:02:8d:e4:15:36:2c:ef:
         c1:3d:98:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:17 2023 by rpki-client on console.sobornost.net