Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/eomM1xI7h2Z6TEqt0Bk3i4dQu9g.roa
File:                     eomM1xI7h2Z6TEqt0Bk3i4dQu9g.roa (raw, json)
Hash identifier:          d/Sm82MO6r7cgrNB+8s+LgV+zQtOGlrRa4QWH+c5egE=
Subject key identifier:   7A:89:8C:D7:12:3B:87:66:7A:4C:4A:AD:D0:19:37:8B:87:50:BB:D8
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27DB1EDC599761C59738332EC6451E
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/eomM1xI7h2Z6TEqt0Bk3i4dQu9g.roa
Signing time:             Fri 28 Oct 2022 10:33:59 +0000
ROA not before:           Fri 28 Oct 2022 10:33:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209242
IP address blocks:        89.116.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:db:1e:dc:59:97:61:c5:97:38:33:2e:c6:45:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a898cd7123b87667a4c4aadd019378b8750bbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:46:35:6b:1c:ee:62:58:d5:8f:b5:a3:e7:
                    f0:d8:27:94:da:9c:68:0f:01:5f:b2:9a:fc:06:0a:
                    13:3f:44:82:9c:40:db:a8:8b:46:eb:09:e7:c7:23:
                    99:ed:bf:86:d1:a9:a6:d6:35:db:3a:b5:75:f8:5e:
                    62:8a:51:ea:68:2d:d9:c8:2a:c1:cf:61:83:fa:d7:
                    ab:b2:6b:c4:6c:72:96:f9:9b:23:86:9c:ab:ea:e0:
                    01:0c:60:a4:1f:65:c4:79:ab:4d:11:83:6b:b0:df:
                    ae:14:42:bf:b7:08:ee:fd:0c:23:96:ac:ec:d6:24:
                    cc:d9:3f:d9:96:9f:4b:a5:89:64:11:ef:d2:d6:52:
                    ae:59:f6:26:a6:21:4f:fe:a3:8c:a2:ca:65:06:01:
                    67:24:31:9e:5f:9d:cf:bb:9b:99:6e:8a:1c:81:7f:
                    7f:b1:8d:1a:3c:c1:5a:a6:e4:3d:db:4b:5a:0b:83:
                    b5:11:17:8f:5e:64:37:03:71:c6:7f:26:65:68:42:
                    7c:1a:58:bb:68:49:51:13:3b:d1:aa:3f:0c:18:45:
                    be:71:f3:a8:67:d7:ae:55:7c:ae:cd:9a:6f:bf:dc:
                    df:34:b1:9e:a8:ae:8d:68:d1:a1:33:20:93:c4:88:
                    0e:2b:d8:d3:a8:5c:ae:e7:75:c4:e5:df:1b:c6:58:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:8C:D7:12:3B:87:66:7A:4C:4A:AD:D0:19:37:8B:87:50:BB:D8
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/eomM1xI7h2Z6TEqt0Bk3i4dQu9g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:c9:34:d4:c2:84:a2:9f:eb:b9:a3:fd:fd:75:0c:3e:fd:c8:
         53:71:5e:af:66:f0:c6:d5:fa:8a:c4:a4:6f:a9:54:ad:0c:df:
         a2:dc:48:6f:92:d4:c9:e3:35:a2:5f:e1:5b:74:96:f8:4c:86:
         85:6c:a3:b2:25:7f:dc:60:a0:37:9d:0e:cc:6f:76:24:17:86:
         3e:a3:a9:88:c0:a3:c0:e9:33:2d:8b:d6:f8:a2:b3:5f:40:20:
         d6:16:cc:48:19:da:a2:8d:db:03:87:b4:a1:dc:ec:53:61:9a:
         d3:dd:b7:3c:ec:26:ad:aa:77:1b:bf:3c:9f:21:0a:1a:5a:7b:
         10:a8:cf:84:81:54:cc:30:73:c5:28:3a:03:3d:d6:2d:8c:80:
         28:dd:60:28:fb:ef:23:d2:c0:b4:d3:2b:15:fa:ce:a6:22:bf:
         44:c2:9b:f3:5b:c5:b0:42:d0:41:52:e8:2e:3a:a7:bd:55:05:
         05:87:2e:51:13:75:5c:65:25:0b:18:06:8f:cd:82:51:40:ca:
         02:84:ad:bd:83:a6:fd:3e:df:4d:a9:51:e5:f8:18:93:d9:c9:
         77:d9:a2:c6:8b:27:84:4e:93:d2:59:56:57:26:05:b2:e5:62:
         a1:b7:9f:99:7a:93:c1:8b:0d:a3:2f:f3:c1:30:34:26:79:d1:
         73:c5:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org