Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/jlnac3jqNDkM0mIaEa2q76b6wrM.roa
File:                     jlnac3jqNDkM0mIaEa2q76b6wrM.roa (raw, json)
Hash identifier:          yYO/rSCPapj+hMqhQ3zfG2X20o/zyFQ6VQ7ybN+pk2A=
Subject key identifier:   8E:59:DA:73:78:EA:34:39:0C:D2:62:1A:11:AD:AA:EF:A6:FA:C2:B3
Certificate issuer:       /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial:       2AAFF37C
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/jlnac3jqNDkM0mIaEa2q76b6wrM.roa
Signing time:             Sat 01 Jan 2022 09:03:32 +0000
ROA not before:           Sat 01 Jan 2022 09:03:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60722
IP address blocks:        92.255.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716174204 (0x2aaff37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8912e418225da95d6a21302407923ff94549572b
        Validity
            Not Before: Jan  1 09:03:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e59da7378ea34390cd2621a11adaaefa6fac2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:a8:8d:36:1d:85:1d:8a:c2:66:fd:61:64:
                    07:e6:77:22:e5:ce:d5:be:e7:01:67:bc:65:d8:93:
                    1d:6f:42:f1:8a:05:59:c7:62:23:a1:1d:31:10:41:
                    27:02:ed:45:96:ce:e5:ba:69:fc:ea:00:b7:52:40:
                    ef:4b:9c:87:28:4c:8b:ca:ba:cc:9c:75:3d:93:d2:
                    57:af:fe:15:96:a5:dc:11:84:af:f4:22:c4:66:d7:
                    37:0c:36:f6:02:56:8e:a5:c0:b8:9f:6d:29:df:c1:
                    01:5d:bd:b6:c5:2a:78:05:72:a2:65:8c:83:07:d5:
                    cf:a0:71:77:89:af:b9:03:41:5d:85:35:85:8b:2e:
                    b1:71:fa:4e:bb:e1:29:b6:be:d8:f2:93:92:9d:3e:
                    1f:96:d8:b4:bd:c5:56:c5:f9:d4:6a:c0:7d:7b:0c:
                    aa:81:6c:b8:52:9f:cc:07:38:ec:60:cd:b1:49:4e:
                    25:2c:6c:4c:3b:8e:64:a9:99:bb:e1:06:02:13:f9:
                    5c:35:07:50:16:f7:7a:be:c0:e2:cc:a6:a6:5f:94:
                    28:c5:cd:55:e4:0d:8e:89:cc:fd:e4:d5:85:b2:ba:
                    5f:fe:d7:28:8d:8f:76:6e:c6:bc:f2:40:29:98:82:
                    09:97:6b:a0:21:5e:de:fb:cd:1c:81:8e:d5:d3:20:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:DA:73:78:EA:34:39:0C:D2:62:1A:11:AD:AA:EF:A6:FA:C2:B3
            X509v3 Authority Key Identifier:
                keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/jlnac3jqNDkM0mIaEa2q76b6wrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.255.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:d5:29:4b:c0:4e:36:27:ad:ad:45:e9:54:a1:43:73:62:
         3b:98:5f:96:e6:c8:84:09:3d:3d:a8:01:80:41:94:f5:a6:ee:
         cf:a4:16:0a:50:4c:37:50:61:a3:f1:88:d8:76:82:24:fc:71:
         e6:12:0e:d0:b8:db:1e:00:e7:b1:1b:44:2c:40:a7:04:b1:f5:
         f4:ee:5c:19:83:d8:73:3e:47:3f:ca:64:dd:eb:0c:49:91:fb:
         6e:24:6b:b5:22:1f:89:82:bb:10:e5:cb:91:ff:33:62:a9:fa:
         14:bc:be:1c:c3:6d:51:d5:7b:da:52:37:0c:bd:1b:87:47:d9:
         b1:e4:e5:ba:f7:8e:16:3b:7d:08:54:5f:e0:2d:31:0e:25:1d:
         0e:ed:cb:bc:72:39:b8:74:8a:d4:d6:35:50:d5:bb:c9:83:8b:
         76:12:6a:16:98:6f:b2:d1:7e:e5:49:e3:d0:dc:3a:83:f4:7c:
         01:f0:d2:ce:21:00:c2:25:59:9c:df:e6:f0:ef:32:d9:84:d4:
         9a:b0:75:48:c8:92:15:be:f9:d0:cf:5c:40:3d:d6:a5:04:4d:
         c0:e4:e4:07:35:e7:12:3c:6e:15:ed:a1:37:94:8a:56:b0:80:
         c2:3e:61:81:a0:c2:0c:0f:dd:68:38:de:ca:34:87:df:c7:93:
         68:b3:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-fra.rpki-client.org