Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/1GlERZ7c1yNPIyuBdkyYOgsDzJE.roa
File:                     1GlERZ7c1yNPIyuBdkyYOgsDzJE.roa (raw, json)
Hash identifier:          UyFjJq76QLW8gwI6CInjziBK+3286HXN6wDLl+e/kVg=
Subject key identifier:   D4:69:44:45:9E:DC:D7:23:4F:23:2B:81:76:4C:98:3A:0B:03:CC:91
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27C6D8B88ECD5DDB3DC34F2AEF916E
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/1GlERZ7c1yNPIyuBdkyYOgsDzJE.roa
Signing time:             Fri 28 Oct 2022 10:33:54 +0000
ROA not before:           Fri 28 Oct 2022 10:33:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        89.116.58.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:c6:d8:b8:8e:cd:5d:db:3d:c3:4f:2a:ef:91:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d46944459edcd7234f232b81764c983a0b03cc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:ad:ba:1a:44:d4:3f:ac:ba:fb:8d:c2:03:
                    5f:b1:ff:91:91:94:73:7a:60:4d:af:de:66:b2:e2:
                    29:89:04:fc:c3:5e:87:6d:11:7d:6c:4e:2a:17:cd:
                    93:06:de:6e:57:5b:08:06:62:ea:bb:e2:e5:28:15:
                    72:64:cc:43:5b:74:56:21:53:19:cb:ca:c3:ef:8d:
                    50:1d:91:73:97:cf:fd:88:86:f5:60:5c:f7:7a:29:
                    b6:ff:56:d9:21:9c:32:f2:12:42:14:d0:ff:9b:d7:
                    2d:8a:ff:eb:fe:b4:a1:31:9e:5d:58:58:2b:a8:36:
                    3a:49:ac:3d:47:3e:2e:a5:43:0e:a5:4d:d2:d8:98:
                    68:30:bc:be:51:92:67:f9:a8:d0:15:7b:ef:73:bf:
                    c1:a6:a6:a1:e6:2e:9b:65:b2:6d:72:2b:16:65:8b:
                    f9:a7:81:81:f0:64:fc:8e:94:a0:96:47:69:81:f6:
                    94:91:6f:d1:75:bc:48:ca:d3:67:29:1f:26:3b:e2:
                    69:fe:63:c3:94:8f:bc:66:ac:86:e3:40:a8:18:59:
                    3f:4a:d7:17:5c:e8:df:d3:ae:10:4b:55:ec:87:8a:
                    4d:da:78:eb:13:06:8c:5f:44:90:33:d2:62:d6:3a:
                    b9:ac:d6:7d:99:4c:45:94:c1:c3:70:45:d8:47:28:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:44:45:9E:DC:D7:23:4F:23:2B:81:76:4C:98:3A:0B:03:CC:91
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/1GlERZ7c1yNPIyuBdkyYOgsDzJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:bf:b4:39:bd:78:4d:9b:60:48:ca:71:7d:81:e2:5a:a6:07:
         d4:e0:05:cc:1c:6b:22:d8:85:84:22:81:1d:f8:a3:5c:5f:b7:
         f7:b3:08:98:70:a3:14:d2:dc:b7:f9:75:87:77:1c:5f:41:aa:
         ab:9e:99:3f:df:38:01:dd:75:65:13:c6:90:c8:03:bb:27:cd:
         88:ee:51:9e:66:c3:84:f6:82:3c:78:34:7c:90:a8:18:4a:21:
         92:4a:d8:7c:8c:91:52:21:ae:9f:c5:a4:a5:f3:f7:8f:44:9e:
         9b:4b:e4:7c:4e:e5:01:d4:c3:61:6a:cf:c0:5f:dc:65:88:d2:
         f5:2f:8e:6b:dd:79:15:99:a9:c9:78:4a:fe:b2:67:d2:51:7e:
         ef:f9:bd:3f:bb:d9:f7:93:ed:2f:66:63:c2:07:93:6a:10:ef:
         5a:c3:50:33:15:6f:fe:ab:4c:5e:e5:33:1b:46:89:55:91:56:
         f8:57:ac:27:b6:ba:ef:4b:f4:c7:42:c9:ef:f1:bf:84:19:2b:
         69:94:62:08:55:d8:ac:14:f9:4f:56:9e:ab:36:b4:a4:f5:82:
         1b:e6:71:58:e5:f7:8e:de:87:5d:67:0b:ea:36:90:2a:8b:ff:
         44:ae:63:34:4f:1b:7a:ce:3c:13:62:a4:b9:ae:ec:de:04:4f:
         97:ff:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org