Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/URIQrA3emlUgPVB3i5C3SVhyYpE.roa
File:                     URIQrA3emlUgPVB3i5C3SVhyYpE.roa (raw, json)
Hash identifier:          zZ4aCbf205ED7paxe5jPMg2hPN/C793z0ZXUPl6W7To=
Subject key identifier:   51:12:10:AC:0D:DE:9A:55:20:3D:50:77:8B:90:B7:49:58:72:62:91
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27C382B74AFEF07F705A9E594CC26E
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/URIQrA3emlUgPVB3i5C3SVhyYpE.roa
Signing time:             Fri 28 Oct 2022 10:33:53 +0000
ROA not before:           Fri 28 Oct 2022 10:33:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        86.38.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:c3:82:b7:4a:fe:f0:7f:70:5a:9e:59:4c:c2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=511210ac0dde9a55203d50778b90b74958726291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:23:95:9b:d2:8d:53:13:86:7a:ac:33:a8:
                    9b:7b:e2:39:4e:b8:25:56:5c:6d:60:f1:dd:20:96:
                    00:8d:25:19:3c:56:30:19:45:75:c9:fc:3a:65:48:
                    dd:e8:26:cb:ae:94:77:b5:d6:af:44:9d:5e:c4:e6:
                    92:b4:f5:34:33:df:ec:96:0c:0a:2e:b4:0a:76:c4:
                    c5:7c:1a:67:2d:61:3c:38:25:55:24:20:ba:2f:eb:
                    27:02:25:28:3f:67:2f:7b:75:1f:dc:a0:58:83:04:
                    f6:e7:a9:ca:65:44:1e:fc:75:2d:58:11:44:43:36:
                    12:8a:31:4f:1c:43:71:ad:39:ad:00:e8:21:64:cc:
                    1c:70:8b:15:18:ff:d4:d9:39:83:9f:2c:56:f2:03:
                    63:71:ae:5f:29:50:63:3b:50:1f:e4:a9:fd:00:9a:
                    ca:d2:23:30:2b:77:6f:b1:f5:46:19:64:9c:c6:1a:
                    76:5f:3c:13:2a:55:22:76:a3:dc:1d:2d:4b:34:7a:
                    84:15:3c:ef:81:4a:b3:e8:0a:6c:7e:44:b1:21:2d:
                    1b:63:3b:31:73:0c:4b:56:a5:b0:e9:08:64:ce:22:
                    15:a7:c2:fa:87:70:df:ca:89:f7:43:23:64:7e:0b:
                    6d:08:15:ad:7d:20:88:d1:41:83:28:58:5f:d0:9a:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:12:10:AC:0D:DE:9A:55:20:3D:50:77:8B:90:B7:49:58:72:62:91
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/URIQrA3emlUgPVB3i5C3SVhyYpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1e:ca:d5:a4:5d:64:68:5d:33:81:f2:17:67:68:d1:7c:58:
         1d:0b:d4:7f:92:28:07:a9:47:7b:19:3f:5f:9a:da:0f:7c:f4:
         37:5b:a1:87:f5:03:3c:83:94:da:60:1d:34:85:5f:17:67:c0:
         9e:14:9f:a1:c9:7b:3d:1c:66:38:88:ad:9e:d9:18:e8:82:c1:
         df:f2:a6:3c:f6:1b:37:b6:55:fe:e7:18:50:67:e0:35:4f:d1:
         ca:2d:f3:7b:72:d4:10:5e:ea:82:68:ca:5d:f5:1a:f1:52:15:
         fd:0d:4a:67:03:08:bc:7e:0a:36:f6:49:bf:40:24:d3:5b:58:
         36:c9:90:26:db:a1:3d:19:b4:ff:b0:a9:3f:64:57:5a:03:86:
         2b:ec:1b:90:3b:e9:7f:2a:9e:34:07:d2:08:38:fa:e0:2d:0d:
         eb:53:da:a6:af:06:45:de:26:7d:f1:ac:ed:36:69:2d:6c:6c:
         35:ee:dd:ea:76:5d:7c:b3:19:c2:12:e2:1c:91:94:47:ae:87:
         75:5e:65:13:1a:81:72:5a:da:9d:89:e1:ca:cf:ab:f7:44:bb:
         74:0b:0c:34:dc:af:cf:cf:38:13:a9:7a:6c:6a:14:e6:1a:2d:
         b8:2e:35:f9:f6:c9:33:bf:24:90:42:8f:e0:cb:fc:e7:5d:b7:
         ea:2f:d2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org