Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/t2Ll6fmQUqrKhexBcWse8-QlxSY.roa
File:                     t2Ll6fmQUqrKhexBcWse8-QlxSY.roa (raw, json)
Hash identifier:          coOaQS5A8wYrTIBkp8Bs7pxP1oA07IuyIsNUYEO1hf4=
Subject key identifier:   B7:62:E5:E9:F9:90:52:AA:CA:85:EC:41:71:6B:1E:F3:E4:25:C5:26
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27D9AD73D3049125C34FABC523C838
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/t2Ll6fmQUqrKhexBcWse8-QlxSY.roa
Signing time:             Fri 28 Oct 2022 10:33:58 +0000
ROA not before:           Fri 28 Oct 2022 10:33:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        89.117.190.0/24 maxlen: 24
                          86.38.151.0/24 maxlen: 24
                          86.38.156.0/24 maxlen: 24
                          89.117.245.0/24 maxlen: 24
                          89.117.139.0/24 maxlen: 24
                          89.116.180.0/22 maxlen: 24
                          89.117.250.0/24 maxlen: 24
                          84.46.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:d9:ad:73:d3:04:91:25:c3:4f:ab:c5:23:c8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b762e5e9f99052aaca85ec41716b1ef3e425c526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:61:5c:06:b8:88:5b:86:01:fb:38:80:31:
                    a1:62:f8:75:31:6e:b4:87:33:4a:2d:0b:0d:90:3e:
                    e3:35:0b:7a:84:d5:14:a8:38:a1:ce:70:1c:3d:4a:
                    c7:f5:9b:f4:a1:b6:91:c7:4b:b9:c4:71:e4:49:ff:
                    ce:b8:26:43:8e:df:72:58:fd:c5:28:80:a9:91:ae:
                    b3:36:b8:38:ca:4f:85:c1:8e:95:11:28:f9:af:7d:
                    35:e5:53:9f:4f:62:24:90:a8:78:ba:ef:25:52:d2:
                    dd:99:32:8d:fd:68:92:39:2e:c7:28:f7:b2:0c:13:
                    c6:66:81:5b:59:be:76:eb:4b:27:2c:d0:0f:e8:f5:
                    d4:a6:65:06:35:4c:e3:17:a6:e4:1e:2b:e4:b9:71:
                    46:05:ab:31:1a:e8:63:35:0b:c3:d2:cc:57:0f:b0:
                    fa:84:dd:d8:c2:9c:02:71:cf:0d:7a:59:f9:a7:e7:
                    50:73:70:9c:e8:bd:f1:96:52:25:a5:85:cf:31:eb:
                    69:a8:03:14:c5:63:18:9d:ef:1a:c1:6e:65:04:8b:
                    38:31:cf:6a:cd:f1:ad:e2:79:81:d0:60:7f:dc:15:
                    06:9e:14:68:07:5d:8f:fc:35:51:a3:50:60:c3:37:
                    f7:4a:37:e8:29:45:4c:4f:d8:09:e4:c5:01:80:8e:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:62:E5:E9:F9:90:52:AA:CA:85:EC:41:71:6B:1E:F3:E4:25:C5:26
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/t2Ll6fmQUqrKhexBcWse8-QlxSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.46.236.0/22
                  86.38.151.0/24
                  86.38.156.0/24
                  89.116.180.0/22
                  89.117.139.0/24
                  89.117.190.0/24
                  89.117.245.0/24
                  89.117.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:74:a0:d6:e6:80:21:28:d1:97:77:bb:dc:69:bb:68:0c:
         41:e2:0f:db:85:f4:0b:6d:9e:2d:fc:8d:dd:6e:34:9c:6a:67:
         91:97:24:b6:27:aa:8f:3f:e0:72:ab:00:44:21:0d:49:ec:cd:
         38:3e:22:9a:84:2c:8d:eb:e6:c6:22:0d:ff:3a:d0:d8:6c:89:
         24:fa:07:37:9b:ed:09:64:5b:c0:c0:21:2d:f7:bd:cd:23:ed:
         44:2e:55:ac:c6:3f:7a:87:ee:4f:f3:5c:15:16:e5:d4:b9:d4:
         a7:10:43:d1:55:12:df:1d:2b:6f:19:1e:69:92:89:a6:2b:35:
         66:c4:7a:7a:6d:ae:78:31:1d:80:e0:b7:54:58:ce:62:be:13:
         56:6f:0a:cc:70:71:30:b0:ad:07:1f:26:54:1d:52:88:10:33:
         c0:dc:af:19:bb:b6:f8:20:23:36:5f:0b:a6:c9:ca:26:d7:52:
         e4:3a:4f:63:a9:e3:4b:35:c4:39:aa:6e:88:97:30:f8:7f:0e:
         87:56:52:40:a4:a2:e4:37:c1:56:10:9b:a8:2b:54:ad:78:74:
         4d:93:80:a1:94:c5:1e:b0:83:24:97:dd:40:72:b1:e4:72:a8:
         6e:78:36:c2:fe:72:47:11:26:5d:37:75:4a:a7:e9:cb:d4:9c:
         cc:db:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org