Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/3ecab3-de1f-45d1-8aec-9f0021aecae4/1/5f_IaX-9FQjA56-hVimAJXmVxqI.roa
File:                     5f_IaX-9FQjA56-hVimAJXmVxqI.roa (raw, json)
Hash identifier:          Mn0Ni8kPasdyGeYVGXV0yDZiuLJgUweEASPlxr3NEJM=
Subject key identifier:   E5:FF:C8:69:7F:BD:15:08:C0:E7:AF:A1:56:29:80:25:79:95:C6:A2
Certificate issuer:       /CN=e52eb4867dd618e3a8fe826b2ad99f38ecb4abf7
Certificate serial:       0189654A8DBC963F95A97DC31D8B61A54224
Authority key identifier: E5:2E:B4:86:7D:D6:18:E3:A8:FE:82:6B:2A:D9:9F:38:EC:B4:AB:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5S60hn3WGOOo_oJrKtmfOOy0q_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/3ecab3-de1f-45d1-8aec-9f0021aecae4/1/5f_IaX-9FQjA56-hVimAJXmVxqI.roa
Signing time:             Mon 17 Jul 2023 19:18:52 +0000
ROA not before:           Mon 17 Jul 2023 19:18:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        89.107.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:65:4a:8d:bc:96:3f:95:a9:7d:c3:1d:8b:61:a5:42:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52eb4867dd618e3a8fe826b2ad99f38ecb4abf7
        Validity
            Not Before: Jul 17 19:18:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5ffc8697fbd1508c0e7afa1562980257995c6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:06:38:42:ba:53:d0:83:9d:c1:6a:f1:b5:
                    39:e8:5d:47:f0:b2:5b:19:37:b0:67:37:3b:8f:ac:
                    62:ea:30:78:38:7b:57:fc:1b:bd:19:7f:71:2e:63:
                    ca:b5:79:f3:9c:ca:66:ba:d7:87:4a:08:22:83:bc:
                    c5:18:82:9e:cd:1c:96:59:22:24:f4:12:1c:65:c1:
                    c6:27:28:91:c0:87:92:dd:4a:5c:d6:68:e7:c6:ad:
                    40:3d:3a:fd:db:55:eb:d4:9f:86:a5:83:cd:b9:1a:
                    9b:75:29:79:2e:81:ef:e4:14:c5:01:e5:28:a4:fc:
                    0e:8c:df:17:c1:c4:c1:4e:96:20:0d:13:f2:fe:56:
                    0e:a5:6b:a3:b7:57:31:20:28:36:cf:4e:24:e4:20:
                    58:99:1a:87:bc:c2:64:47:c6:f0:0e:cd:e1:74:61:
                    59:b3:ea:62:c4:fc:dd:98:d2:f0:af:3b:10:0a:22:
                    3b:cd:b8:5a:0b:2b:79:b3:7c:2b:6b:c5:10:93:7e:
                    51:fd:0e:f3:b9:f7:17:05:2a:13:c9:7b:75:89:f1:
                    8e:4a:a6:b5:27:f1:14:1f:84:a7:a0:a1:b6:f2:42:
                    a0:61:9e:8e:57:d3:9a:9e:11:13:9e:c9:f2:69:63:
                    39:83:45:83:f8:a1:67:b3:25:1e:35:52:c4:46:a6:
                    e3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:C8:69:7F:BD:15:08:C0:E7:AF:A1:56:29:80:25:79:95:C6:A2
            X509v3 Authority Key Identifier:
                keyid:E5:2E:B4:86:7D:D6:18:E3:A8:FE:82:6B:2A:D9:9F:38:EC:B4:AB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S60hn3WGOOo_oJrKtmfOOy0q_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3ecab3-de1f-45d1-8aec-9f0021aecae4/1/5f_IaX-9FQjA56-hVimAJXmVxqI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3ecab3-de1f-45d1-8aec-9f0021aecae4/1/5S60hn3WGOOo_oJrKtmfOOy0q_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:19:2d:b7:52:f0:fb:36:7d:6b:91:f2:d7:56:69:b9:2e:36:
         6b:69:07:0c:31:5b:c3:11:5e:03:c1:bd:7c:85:4c:9a:44:43:
         8f:4b:ff:3d:23:4b:e2:28:19:19:12:76:5b:3e:2f:cb:4e:72:
         77:c5:ae:a0:43:7e:d1:45:8e:a1:92:7e:3d:c4:b7:f8:ea:86:
         fd:b4:5b:ad:75:b8:75:bf:44:22:84:86:25:a5:14:a7:d9:fe:
         95:91:ea:39:64:e3:d9:67:b9:17:c2:37:0a:bf:ea:cc:65:af:
         04:a0:7f:fc:1a:44:ca:75:87:b3:db:8c:1e:e3:34:39:9e:56:
         42:10:2a:ba:c6:2a:25:07:dd:a4:76:e8:ab:bc:ce:ef:46:ef:
         ea:9f:50:72:d1:bf:84:2c:47:45:db:0c:eb:2d:88:c6:e9:19:
         85:25:77:e9:d7:eb:ad:e0:2d:cf:ce:fe:43:51:1f:0c:f6:95:
         0b:ed:fa:65:3e:a9:1e:e7:5a:d4:fb:6f:e4:1a:72:8e:07:a6:
         79:58:db:c6:33:21:5f:37:f7:24:97:ea:8a:cd:15:fe:c2:e1:
         e1:98:19:12:26:3b:43:fa:6d:83:ec:76:51:2c:ca:c1:be:28:
         52:41:db:5a:e2:04:0e:57:89:39:41:3c:5f:93:17:5e:6f:3e:
         ea:b4:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org