Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/75LFecpeWpJqfvmHIswepDP5Ak4.roa
File:                     75LFecpeWpJqfvmHIswepDP5Ak4.roa (raw, json)
Hash identifier:          ZvTc5Ykdopud1rekvjVmaN3CFCKI7XFqMohABeMO5Nc=
Subject key identifier:   EF:92:C5:79:CA:5E:5A:92:6A:7E:F9:87:22:CC:1E:A4:33:F9:02:4E
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0A7926C1
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/75LFecpeWpJqfvmHIswepDP5Ak4.roa
Signing time:             Sun 24 Apr 2022 22:33:11 +0000
ROA not before:           Sun 24 Apr 2022 22:33:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19437
IP address blocks:        89.117.70.0/23 maxlen: 24
                          89.117.226.0/23 maxlen: 24
                          89.117.158.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175711937 (0xa7926c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Apr 24 22:33:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ef92c579ca5e5a926a7ef98722cc1ea433f9024e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:71:c4:fb:5f:54:39:fd:29:a9:c0:05:66:
                    a3:76:41:3b:01:12:c9:69:0f:08:60:6e:f5:f2:fa:
                    e2:f8:60:b1:a7:04:f7:ed:92:17:fb:9f:22:40:c9:
                    7a:25:5f:46:4c:6e:b3:90:e2:e4:90:ac:3e:e3:12:
                    10:fa:c6:ca:ba:e3:c0:e2:b4:f8:db:7a:4b:e7:31:
                    fd:84:ef:12:e7:65:95:ec:b9:fd:bb:d1:f2:ee:96:
                    bb:ad:af:9f:bb:bf:02:fb:a2:54:69:75:87:1c:3b:
                    3c:2a:bc:12:7b:e4:d0:a0:7f:b2:21:f0:08:48:5d:
                    46:c4:53:30:2e:24:c8:b6:ce:97:61:e0:dd:f0:e6:
                    77:25:c4:e9:21:d1:b4:3e:c0:08:a9:74:18:03:da:
                    88:36:97:8e:a8:61:28:03:8b:27:51:89:3a:b0:8b:
                    dd:ca:25:67:2a:95:df:44:c9:a6:6b:20:57:da:18:
                    e4:ed:1e:c1:d7:91:9c:80:41:a3:5c:60:49:1f:0d:
                    dd:6b:6e:2f:c9:a9:85:6f:a1:2f:3d:cb:91:56:dd:
                    92:fb:82:5e:94:29:ab:73:44:49:a3:3f:f4:e4:ef:
                    3d:cd:61:e5:bb:92:5f:1c:11:99:03:70:37:e0:fd:
                    ab:2d:cb:d6:08:21:99:a0:87:24:15:a0:16:01:cb:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:92:C5:79:CA:5E:5A:92:6A:7E:F9:87:22:CC:1E:A4:33:F9:02:4E
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/75LFecpeWpJqfvmHIswepDP5Ak4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.70.0/23
                  89.117.158.0/23
                  89.117.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:3e:b6:a7:42:c7:17:81:d6:7b:c5:6b:ac:d3:a5:20:35:
         b7:fd:f7:45:77:cd:f2:29:96:54:20:8c:08:94:8f:a1:55:84:
         6e:08:88:39:5d:a4:d8:57:b8:28:e3:6d:52:c6:75:8f:d2:cb:
         dd:9d:fb:11:bf:7d:ff:9b:0a:cd:90:26:a3:48:30:34:70:79:
         b4:25:54:7f:a5:2b:32:fb:74:bd:0f:d1:0f:9e:73:04:df:24:
         fe:30:2f:af:dc:2e:1b:7c:29:74:37:2f:d0:b6:03:7a:e8:9b:
         cb:40:a0:96:2d:39:e0:0c:6f:ee:49:ba:8a:b6:40:83:a1:e8:
         72:29:d4:3a:5e:2f:c2:5e:64:08:cb:17:14:15:6d:aa:b4:86:
         2a:fc:18:28:8e:1a:bd:4b:16:44:5b:5e:f9:c9:8e:ec:00:3a:
         8e:42:02:2e:06:cb:85:08:de:41:cc:f7:fe:73:d9:36:06:8a:
         4c:43:21:fc:e2:05:1d:74:a9:8d:9b:f0:d9:a0:cf:e0:c3:fd:
         ed:75:d6:51:67:fd:4c:cd:b4:a7:df:cc:37:af:fc:f8:30:3c:
         81:c6:97:fe:6f:82:0e:64:fd:81:ca:2b:93:28:21:d8:6b:8c:
         88:35:e7:5d:29:53:c5:b5:79:98:40:df:6f:45:b9:11:53:4c:
         19:df:0b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org