Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/s3sywek7WiRPbDeyDrL-f633NBE.roa
File:                     s3sywek7WiRPbDeyDrL-f633NBE.roa (raw, json)
Hash identifier:          +vO5m1tC5POF3KZgMF6C/3ZhLxtNitVJmahl4SqLcHs=
Subject key identifier:   B3:7B:32:C1:E9:3B:5A:24:4F:6C:37:B2:0E:B2:FE:7F:AD:F7:34:11
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27E29BD9A56CFEC5E409E502FE6C40
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/s3sywek7WiRPbDeyDrL-f633NBE.roa
Signing time:             Fri 28 Oct 2022 10:34:01 +0000
ROA not before:           Fri 28 Oct 2022 10:34:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400799
IP address blocks:        89.116.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:e2:9b:d9:a5:6c:fe:c5:e4:09:e5:02:fe:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:34:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b37b32c1e93b5a244f6c37b20eb2fe7fadf73411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:29:5e:b9:a2:2d:7e:e5:ed:8e:b0:0e:19:
                    33:b9:bd:96:00:44:df:fb:67:5e:33:77:d0:5e:65:
                    4b:f1:7c:fb:45:91:ea:99:7c:16:20:d5:d5:9e:12:
                    22:26:31:ec:bf:ec:a4:c9:a0:2e:1d:e8:04:d9:c0:
                    be:23:b1:a2:eb:20:4f:1b:e3:72:b7:8f:41:75:59:
                    db:de:70:7a:21:f8:72:f9:b6:32:1b:c0:ae:1e:e2:
                    5c:96:f8:f2:29:a0:ad:47:2f:a8:5d:c7:4e:6a:c9:
                    39:0d:0a:3b:72:b6:4a:33:48:2a:85:e4:ca:8b:11:
                    91:24:97:46:10:7a:6e:1a:66:65:be:b5:66:7e:a6:
                    a0:0f:4d:65:b0:e2:72:90:03:24:7e:f5:3f:16:a6:
                    2d:3f:15:c6:65:51:3d:ac:d6:64:f4:15:a6:6d:b1:
                    d2:14:75:45:ef:3a:21:9e:79:34:91:16:75:ec:ed:
                    a7:b3:99:f0:45:55:97:f7:2c:85:85:f2:72:b4:ce:
                    18:4d:e0:3f:69:cb:93:00:63:7f:80:3f:d0:53:cb:
                    20:4f:d5:78:a0:c7:21:d9:b5:3d:3d:19:26:24:10:
                    42:47:9f:4f:1e:91:a5:fe:ac:b4:0b:2a:43:85:9b:
                    aa:0f:72:8d:ea:74:a8:ec:7f:ef:eb:29:93:8a:54:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7B:32:C1:E9:3B:5A:24:4F:6C:37:B2:0E:B2:FE:7F:AD:F7:34:11
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/s3sywek7WiRPbDeyDrL-f633NBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:8a:32:61:ad:1e:e1:ec:29:08:1d:a3:ee:7d:a1:81:af:25:
         5d:b3:c5:56:73:98:77:8c:91:e1:5a:ea:79:76:24:14:c5:5f:
         5a:b7:a9:74:7b:83:5f:76:ea:83:07:a1:57:bd:91:2f:17:8a:
         2a:fe:f8:94:2f:76:11:95:01:fd:d3:e6:14:86:bb:85:26:30:
         3d:98:5b:05:92:cd:2e:64:0b:cf:aa:75:34:f0:2b:fa:b1:80:
         83:66:bc:d0:cb:e5:da:be:7b:f9:a5:c8:fa:9d:24:5b:db:9f:
         b3:3e:77:a6:a3:f8:ae:bb:75:ac:ab:c0:e7:6b:93:b3:a1:ae:
         1e:7f:8b:03:73:5f:54:e1:22:78:32:a7:d1:64:fa:83:a2:59:
         79:6b:79:e9:81:60:f2:83:1b:94:33:6b:20:2a:29:97:5c:ac:
         b0:70:4d:37:56:f5:83:a6:d1:e3:64:9c:1d:bf:77:8d:42:3e:
         da:1b:8d:f1:29:b0:84:24:12:5b:89:f4:00:17:46:52:06:2a:
         07:15:af:41:2d:bc:b0:d0:2d:e7:22:83:9c:90:75:f2:71:5b:
         59:80:49:eb:b9:c8:e4:c9:a0:81:83:92:b3:98:61:6f:5c:37:
         53:68:7e:ee:8f:44:e6:f9:fa:c4:28:6f:f6:9a:74:69:f6:6c:
         b9:9a:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org