Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/yUzlOsw5b6f3KR-rPLBWfVnCCgU.roa
File:                     yUzlOsw5b6f3KR-rPLBWfVnCCgU.roa (raw, json)
Hash identifier:          wp/lphryjTnnF6pS7pOfQOP34XdF+D5O2MdEcnV52G8=
Subject key identifier:   C9:4C:E5:3A:CC:39:6F:A7:F7:29:1F:AB:3C:B0:56:7D:59:C2:0A:05
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27DC0A8812382BA45DB9B90B34F6F8
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/yUzlOsw5b6f3KR-rPLBWfVnCCgU.roa
Signing time:             Fri 28 Oct 2022 10:33:59 +0000
ROA not before:           Fri 28 Oct 2022 10:33:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210439
IP address blocks:        89.117.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:dc:0a:88:12:38:2b:a4:5d:b9:b9:0b:34:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c94ce53acc396fa7f7291fab3cb0567d59c20a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5f:e7:e0:05:be:c5:87:b0:97:dc:1f:50:72:
                    03:73:c2:9a:52:21:ca:ba:0a:32:19:d1:76:a0:9f:
                    00:ea:98:fc:b7:07:71:f4:e0:85:fb:d6:6b:bd:ea:
                    4d:28:6d:94:9c:9c:d9:19:7e:1d:5a:4d:b7:75:fc:
                    e1:82:12:aa:be:23:44:e4:6e:46:f6:e8:68:64:28:
                    48:31:7e:b7:65:0b:fa:42:c2:5a:3d:1c:2e:5e:f0:
                    90:44:55:9b:8d:9c:3e:7c:1d:8b:d5:92:b2:80:e4:
                    f9:52:4a:df:c3:9a:53:62:a0:aa:17:c5:d4:ed:f3:
                    85:45:70:72:6e:b5:a6:78:1b:0b:25:f9:d5:78:e4:
                    23:76:55:e9:cd:5f:a7:5f:5c:1b:46:cd:3f:df:43:
                    bc:65:e0:72:2c:95:46:ba:c8:09:06:67:a0:9f:25:
                    1a:df:0a:4d:b2:f5:58:79:4e:12:28:98:9c:5b:79:
                    03:8f:79:9c:37:52:43:98:52:37:74:90:d9:83:ee:
                    3c:df:04:af:99:ff:7a:e4:d4:2d:b2:77:00:b6:41:
                    dc:9a:e2:04:e8:65:bb:f5:6b:1e:24:24:1f:00:11:
                    ed:79:c3:00:fa:29:8c:fe:73:78:be:ad:13:2c:b9:
                    4e:b2:3d:04:f4:60:f5:a5:1b:3a:9a:c7:d0:54:75:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4C:E5:3A:CC:39:6F:A7:F7:29:1F:AB:3C:B0:56:7D:59:C2:0A:05
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/yUzlOsw5b6f3KR-rPLBWfVnCCgU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.117.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:03:0b:7c:98:7d:02:a4:29:9b:c5:87:4b:18:78:ac:d0:
         c5:d9:55:62:12:fe:46:d3:f4:61:3e:2e:52:a2:0b:e2:fd:9d:
         16:b7:94:64:7c:97:be:7c:ea:cf:b5:a7:92:d7:23:dd:14:ed:
         43:20:b0:ad:27:5e:e5:46:bd:c5:9b:fb:f1:7e:fc:79:17:f5:
         49:d8:4c:dc:ab:a8:fc:d9:60:28:62:5d:4f:3b:d1:3f:8b:13:
         c9:5c:64:5c:cc:5e:0a:05:96:d7:7c:8e:e0:98:ff:7a:6b:95:
         60:61:58:53:96:cb:ca:1a:6e:f8:2d:98:05:35:39:3e:06:bc:
         5f:db:ca:15:fc:d3:e0:3f:42:1f:de:c1:96:fe:65:c8:ad:cf:
         1f:12:c4:2a:a9:aa:17:3e:ac:8c:7b:9f:8c:f8:88:ec:b7:53:
         a5:24:20:17:7a:a9:26:92:be:3b:f8:24:b0:c1:ed:ac:82:24:
         a4:bc:14:db:f5:61:1f:53:ec:a8:1c:79:fa:99:1b:82:d4:5f:
         79:ac:7a:7a:76:80:59:5a:6c:15:b6:f9:08:ef:b2:d9:a9:dc:
         38:b1:01:9b:75:73:b5:36:b1:ea:24:34:81:19:76:67:cb:35:
         dd:ea:bd:4f:e1:bf:c2:d8:0e:87:e2:ed:9c:a7:fb:7c:8f:4e:
         ad:44:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org