Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/jEGRjA8TOZYG7WiQEcfgIyW0xfg.roa
File:                     jEGRjA8TOZYG7WiQEcfgIyW0xfg.roa (raw, json)
Hash identifier:          y0ABIs9qqr3hGOmNIMWQaWCqsAgzb9pqf24JZEJwiBo=
Subject key identifier:   8C:41:91:8C:0F:13:39:96:06:ED:68:90:11:C7:E0:23:25:B4:C5:F8
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       018425CB4D379F33240DD5DDD0BA83C2419C
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/jEGRjA8TOZYG7WiQEcfgIyW0xfg.roa
Signing time:             Sat 29 Oct 2022 22:09:51 +0000
ROA not before:           Sat 29 Oct 2022 22:09:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50225
IP address blocks:        89.116.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:25:cb:4d:37:9f:33:24:0d:d5:dd:d0:ba:83:c2:41:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 29 22:09:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c41918c0f13399606ed689011c7e02325b4c5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:0c:4a:fb:15:d4:c2:36:cd:fc:19:bd:3e:
                    ef:4e:a8:6c:f1:31:f9:75:b6:97:4b:3c:29:dd:f6:
                    1b:7e:be:89:84:5f:96:a0:50:8f:bf:33:2f:43:e1:
                    f1:62:4d:43:40:11:ca:69:87:98:44:47:9a:0b:4d:
                    29:7d:ce:f9:6c:d3:8e:fc:97:23:f3:d6:63:a6:cd:
                    c5:80:e3:87:ef:f6:98:22:70:35:0c:fb:d9:17:99:
                    2e:33:c3:21:63:f4:a3:91:03:ab:99:d6:94:2c:bb:
                    4c:73:1b:63:b4:4f:be:d0:4f:5f:51:57:bd:b9:73:
                    0e:77:5d:6a:ac:41:66:04:29:10:80:c6:77:a9:f9:
                    27:b0:a3:50:ae:76:47:07:2c:c9:4b:2c:98:34:39:
                    4f:53:f8:ab:fb:9a:5c:17:ab:7d:69:a7:1e:8a:55:
                    59:a6:74:70:e1:10:85:95:2d:0f:b6:4b:28:e6:9e:
                    f6:54:db:a5:9e:52:a7:a6:04:1a:e1:bd:d9:7b:eb:
                    06:bb:84:ab:20:3b:32:c3:9d:e7:ca:f6:8c:b2:de:
                    b1:e6:e4:13:23:65:11:ec:08:22:8f:38:b8:c5:30:
                    c0:78:de:50:2d:67:00:e3:c2:55:da:9b:69:b8:46:
                    40:2c:f3:77:28:bb:2d:be:ae:d0:7e:c2:7f:bc:c6:
                    30:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:41:91:8C:0F:13:39:96:06:ED:68:90:11:C7:E0:23:25:B4:C5:F8
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/jEGRjA8TOZYG7WiQEcfgIyW0xfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:d5:e7:28:e8:c4:c4:66:e0:1a:0b:a6:a8:e1:f0:f4:63:
         22:f4:3c:2f:36:24:7f:fd:97:05:1b:02:d8:e5:3e:50:eb:45:
         ba:b5:c3:59:21:e6:60:2c:67:3a:ab:7a:f6:1f:7a:f2:b1:8e:
         6c:f0:fb:5a:3c:30:10:ef:79:7d:0a:1a:23:54:b6:0f:8a:c3:
         92:f9:16:e1:2a:1c:1b:6e:19:e5:05:b7:12:fb:72:6c:d3:1c:
         a2:0f:a0:24:19:42:59:b3:b4:03:20:4b:95:a1:58:d5:43:67:
         c1:9c:5c:01:71:45:ca:05:ee:4e:fb:c9:28:c7:93:18:d6:60:
         1a:89:e9:6f:d3:8c:48:87:98:ff:b5:d0:6a:99:67:7b:8b:41:
         53:5f:f0:7a:ed:89:df:b6:49:a1:f3:15:68:4e:6d:49:b8:74:
         6a:c3:a9:fd:ca:3e:8e:34:6e:4c:e5:9e:ca:68:97:0b:39:d3:
         b0:60:fb:22:5d:88:ee:1f:ac:8e:e5:8b:7e:6c:ed:b2:cf:91:
         bd:2c:0e:86:a0:fd:38:ba:bd:d9:d8:9c:20:74:6c:05:1c:5f:
         51:c1:5d:0d:7a:20:89:a8:7b:9c:8f:70:47:de:87:6c:30:03:
         ab:0b:4b:eb:dc:b8:93:e6:4b:97:3d:0d:b2:a1:0c:a2:f3:66:
         14:66:c6:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQly003nzMkDdXd0LqDwkGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI5MjIwOTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzQxOTE4YzBmMTMzOTk2MDZlZDY4OTAxMWM3ZTAyMzI1YjRjNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+0MSvsV1MI2zfwZvT7vTqhs8TH5
dbaXSzwp3fYbfr6JhF+WoFCPvzMvQ+HxYk1DQBHKaYeYREeaC00pfc75bNOO/Jcj
89Zjps3FgOOH7/aYInA1DPvZF5kuM8MhY/SjkQOrmdaULLtMcxtjtE++0E9fUVe9
uXMOd11qrEFmBCkQgMZ3qfknsKNQrnZHByzJSyyYNDlPU/ir+5pcF6t9aaceilVZ
pnRw4RCFlS0Ptkso5p72VNulnlKnpgQa4b3Ze+sGu4SrIDsyw53nyvaMst6x5uQT
I2UR7Agijzi4xTDAeN5QLWcA48JV2ptpuEZALPN3KLstvq7QfsJ/vMYwaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxBkYwPEzmWBu1okBHH4CMltMX4MB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvakVHUmpBOFRPWllHN1dpUUVjZmdJeVcweGZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSJMA0G
CSqGSIb3DQEBCwUAA4IBAQAzbNXnKOjExGbgGgumqOHw9GMi9DwvNiR//ZcFGwLY
5T5Q60W6tcNZIeZgLGc6q3r2H3rysY5s8PtaPDAQ73l9ChojVLYPisOS+RbhKhwb
bhnlBbcS+3Js0xyiD6AkGUJZs7QDIEuVoVjVQ2fBnFwBcUXKBe5O+8kox5MY1mAa
ielv04xIh5j/tdBqmWd7i0FTX/B67Ynftkmh8xVoTm1JuHRqw6n9yj6ONG5M5Z7K
aJcLOdOwYPsiXYjuH6yO5Yt+bO2yz5G9LA6GoP04ur3Z2JwgdGwFHF9RwV0NeiCJ
qHucj3BH3odsMAOrC0vr3LiT5kuXPQ2yoQyi82YUZsZJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org