Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/b74bLCaXzs3AMYw82JXEUegGfjM.roa
File:                     b74bLCaXzs3AMYw82JXEUegGfjM.roa (raw, json)
Hash identifier:          r7NVS5TjpTQzvxj6DutAR3xAYd3nb8ol+NvGEzvQL3M=
Subject key identifier:   6F:BE:1B:2C:26:97:CE:CD:C0:31:8C:3C:D8:95:C4:51:E8:06:7E:33
Certificate issuer:       /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial:       147804F4
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/b74bLCaXzs3AMYw82JXEUegGfjM.roa
Signing time:             Sat 01 Jan 2022 03:59:02 +0000
ROA not before:           Sat 01 Jan 2022 03:59:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60893
IP address blocks:        89.18.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343409908 (0x147804f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
        Validity
            Not Before: Jan  1 03:59:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6fbe1b2c2697cecdc0318c3cd895c451e8067e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:9c:ca:15:b1:9d:67:b9:42:bc:81:e3:66:
                    6b:9a:46:e8:0f:7f:ac:55:e1:d8:d6:24:ca:93:23:
                    b4:73:c3:b7:c2:0a:f8:9e:42:61:9b:ea:60:67:35:
                    8f:78:3f:9b:e8:46:81:29:db:e8:8a:db:74:11:42:
                    a8:f4:92:18:b2:2e:df:ff:5b:0a:a5:2b:ef:60:b3:
                    fe:20:e1:f8:d6:d7:43:8b:64:66:6f:f2:08:15:2d:
                    dd:fd:8a:54:02:aa:d5:9d:aa:42:09:b5:1d:4a:13:
                    01:a9:d2:7b:21:80:a1:bd:e2:52:ae:25:ed:94:1f:
                    4c:ba:64:6f:51:c0:cb:6b:1f:28:7e:fc:d7:76:cf:
                    d2:43:fb:93:0e:cc:f2:d5:1a:56:35:c3:d7:5c:f9:
                    1f:88:96:c5:19:d7:ab:ed:bb:de:4f:45:a3:34:5b:
                    0d:52:f1:6e:b9:9e:db:a9:56:9b:e7:a1:9f:3c:b1:
                    9a:ed:ec:79:e1:06:8e:dc:45:c6:6f:68:7d:09:cb:
                    13:f7:61:ce:1e:79:68:60:2e:b1:75:1a:e0:ab:c0:
                    7c:33:4f:44:e8:bb:64:f1:f7:83:73:56:e2:20:f4:
                    8c:f3:59:fe:af:24:08:67:98:da:70:87:b8:70:eb:
                    f4:57:a5:9a:0f:80:85:d1:e9:34:38:6e:dd:aa:06:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BE:1B:2C:26:97:CE:CD:C0:31:8C:3C:D8:95:C4:51:E8:06:7E:33
            X509v3 Authority Key Identifier:
                keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/b74bLCaXzs3AMYw82JXEUegGfjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.18.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:f7:8c:09:c1:f8:55:72:bb:4d:79:b4:f6:69:f8:6e:db:
         93:2e:dd:20:c2:d1:b5:24:49:73:ac:0b:22:32:89:86:8d:c9:
         75:46:e8:22:94:db:af:a1:16:08:79:9d:2e:2b:a5:0e:e6:60:
         d7:8a:e5:9c:d5:06:73:2e:32:6a:6e:1d:8e:37:25:33:d4:e1:
         6e:67:31:94:95:62:b9:49:2a:31:e0:45:a2:ea:18:cc:3e:53:
         29:7c:01:c2:d1:e6:ed:5c:3d:59:6b:a0:0f:a8:3c:06:7e:48:
         90:cc:67:12:69:c9:2f:58:9c:46:08:06:d1:b9:c3:1b:a4:79:
         9b:49:1c:dd:84:e7:90:93:a4:9d:08:01:b7:95:8c:c5:64:86:
         b2:66:5d:53:5f:f4:13:1a:c6:c3:f8:90:68:0a:71:01:51:75:
         38:52:1a:0e:6e:03:01:87:5b:94:82:32:6c:26:c7:fd:ff:9a:
         6a:b4:e7:26:a8:d2:bf:9e:1d:80:49:53:52:42:12:71:28:f8:
         a7:cd:e7:f4:a5:66:8d:9c:9e:84:20:15:e6:a9:c9:1b:9a:f8:
         1a:b5:a5:5e:22:54:0a:93:52:c0:1d:49:f5:c2:3f:ac:3f:e5:
         ce:22:45:d6:e7:bb:6f:02:c9:dc:0b:69:0d:43:20:1e:ff:dd:
         71:26:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org