Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/BHQASRICITiozNgZG1NMEwQ4rQ0.roa
File:                     BHQASRICITiozNgZG1NMEwQ4rQ0.roa (raw, json)
Hash identifier:          v4QZPpXQ3v3MsebIuGg1YbtkhyYnLPbKGgOpuY3SyB0=
Subject key identifier:   04:74:00:49:12:02:21:38:A8:CC:D8:19:1B:53:4C:13:04:38:AD:0D
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27CEAC70002BBFA0B15620B505EFD9
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/BHQASRICITiozNgZG1NMEwQ4rQ0.roa
Signing time:             Fri 28 Oct 2022 10:33:56 +0000
ROA not before:           Fri 28 Oct 2022 10:33:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55720
IP address blocks:        89.116.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:ce:ac:70:00:2b:bf:a0:b1:56:20:b5:05:ef:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0474004912022138a8ccd8191b534c130438ad0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:7c:5c:92:f8:10:95:59:4c:24:42:bf:d4:
                    b3:05:8a:7a:7a:b4:a5:58:23:63:dc:44:46:fd:e4:
                    56:89:2b:b7:23:7b:76:54:d5:49:30:4d:33:7d:86:
                    05:99:7e:6d:94:bb:eb:19:0e:60:e3:e3:fa:09:7c:
                    e3:1f:52:11:e3:3d:40:78:29:d9:77:79:18:40:31:
                    5b:f3:7a:c2:32:0d:0d:ca:8d:da:f4:e6:61:f2:ed:
                    9c:28:48:c0:1a:e5:cb:68:bf:48:26:fd:b6:1a:85:
                    06:42:28:2a:38:42:2c:48:65:1a:c3:e7:f7:a6:d3:
                    db:7a:7b:4c:51:18:d7:fc:61:fa:78:8a:94:e4:42:
                    93:5e:0f:c2:36:18:46:6a:73:48:91:5a:e4:c2:b4:
                    3d:26:c0:31:11:20:8e:f0:af:65:01:be:93:54:10:
                    85:fd:94:33:d6:c6:b6:ba:ac:7b:54:58:77:06:d3:
                    8f:d8:ef:43:e9:cd:e1:2c:c8:a9:ed:68:59:57:ab:
                    17:16:ed:6f:ab:0f:1e:0d:11:00:5e:4a:25:6a:a6:
                    68:dc:5e:30:47:d6:cb:a2:6d:4e:9e:66:77:1f:03:
                    2b:5e:ac:7f:63:e9:f1:5c:1d:3e:eb:73:f7:36:6f:
                    0c:56:5d:ad:17:0d:03:44:29:24:de:ea:f4:be:ee:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:74:00:49:12:02:21:38:A8:CC:D8:19:1B:53:4C:13:04:38:AD:0D
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/BHQASRICITiozNgZG1NMEwQ4rQ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:ee:1e:45:ad:94:7d:74:d5:64:fd:0d:f8:6b:55:cc:fc:
         84:b7:33:62:c1:84:73:ad:99:45:cd:6f:f8:9f:b6:0a:f4:43:
         e3:5f:5d:ed:cb:77:cc:10:40:78:07:5a:e9:a8:4b:1a:9a:35:
         7c:82:ae:25:a8:fd:4c:9e:b0:99:4b:f0:21:c5:85:94:36:07:
         1e:86:df:c2:9a:91:d8:45:d8:75:d0:fc:9f:9a:18:83:fd:d8:
         26:5f:36:2f:0f:3c:38:1d:47:9e:cb:62:d2:d3:11:65:da:2e:
         4c:04:6d:35:77:cc:15:e2:40:c0:a2:0a:b9:44:9f:cd:ee:78:
         98:6f:da:64:71:66:b0:61:82:16:dc:c2:13:87:60:8f:3f:d1:
         37:02:e2:ad:59:dd:b2:60:b9:fc:c5:32:c2:f2:04:83:ca:7c:
         ef:09:9c:90:26:84:38:c9:a3:20:81:0e:62:e4:80:21:23:a8:
         70:af:9a:f3:1d:cd:84:75:70:de:0f:81:3f:c8:96:64:be:0f:
         15:c0:ec:51:dc:cc:70:32:b5:c9:6e:b4:73:dc:89:44:a3:8c:
         20:6f:24:cc:bf:04:91:bb:cb:87:6a:6e:82:3f:75:63:b8:c3:
         c9:7c:e5:07:c1:67:c1:ac:6c:d5:c1:97:de:d3:b7:ec:8d:52:
         ad:a5:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org