Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/z4PyCgASxNWEwFFRL2R695vaBTU.roa
File:                     z4PyCgASxNWEwFFRL2R695vaBTU.roa (raw, json)
Hash identifier:          CwkFHEkpQDOafHSiUaFiKQ86EgZyvipbsgn2U+rYTpE=
Subject key identifier:   CF:83:F2:0A:00:12:C4:D5:84:C0:51:51:2F:64:7A:F7:9B:DA:05:35
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27C81BC45A5CD5822B1F7704DC4B2C
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/z4PyCgASxNWEwFFRL2R695vaBTU.roa
Signing time:             Fri 28 Oct 2022 10:33:54 +0000
ROA not before:           Fri 28 Oct 2022 10:33:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34779
IP address blocks:        89.116.184.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:c8:1b:c4:5a:5c:d5:82:2b:1f:77:04:dc:4b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf83f20a0012c4d584c051512f647af79bda0535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:8a:06:3b:8e:8d:85:5b:c9:b5:fa:61:2f:
                    39:e2:bd:ef:fd:46:c2:07:26:0e:d5:d8:84:b3:18:
                    dd:79:ac:f6:e9:fc:b1:25:4a:40:a1:82:ab:fc:f3:
                    14:78:5e:1d:42:31:6a:88:e3:44:c8:c4:52:e5:7d:
                    6f:cc:53:6e:d9:71:0e:dc:ff:d7:fd:78:60:92:39:
                    d5:f7:8c:12:4c:e3:2a:18:f6:8f:37:89:bf:37:f2:
                    b4:25:60:b3:9f:7d:a3:d9:98:65:d4:d6:21:ee:14:
                    f6:bc:cd:36:33:85:4d:0b:03:e2:d1:c6:0a:ac:01:
                    3f:06:50:a3:2d:89:20:81:16:f6:ff:ca:e0:cb:3d:
                    ed:86:9d:78:ed:12:84:4f:e5:69:7a:cb:b4:c7:b7:
                    69:03:4c:16:f3:ce:db:18:47:94:d4:be:91:34:5e:
                    cf:40:c5:0b:91:5c:c3:9a:bc:04:62:58:86:cc:9d:
                    78:e4:e1:04:bf:ff:c8:2e:72:1c:45:5b:54:eb:f2:
                    ec:fc:ef:f4:40:f4:91:10:85:ad:c8:31:1e:8f:35:
                    90:be:2a:51:b5:5a:49:d1:74:af:83:03:b5:23:8c:
                    0d:26:91:84:3f:70:e1:34:dc:01:60:98:bb:52:f4:
                    7b:d8:16:65:82:15:5d:50:d0:09:27:81:5a:96:83:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:F2:0A:00:12:C4:D5:84:C0:51:51:2F:64:7A:F7:9B:DA:05:35
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/z4PyCgASxNWEwFFRL2R695vaBTU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:df:4c:40:54:f4:aa:61:67:69:49:c5:46:fe:90:74:ec:
         c6:cc:f3:bc:45:af:df:f4:43:8c:17:0d:ba:1c:b1:98:75:57:
         6a:d7:9d:a2:3b:9a:4d:50:ab:a1:97:63:83:b6:28:1f:6b:9c:
         84:f7:04:3b:da:08:a0:38:63:f9:83:b9:8a:9b:f4:9b:c4:1e:
         c2:71:27:8f:bd:55:c7:36:02:70:8f:ad:c1:26:4d:3a:e5:bd:
         99:0e:06:e9:65:08:6b:b6:8a:a2:6c:60:f3:14:51:78:41:d9:
         5c:52:37:0b:b1:71:d7:dd:24:83:0f:5d:48:80:6b:f8:14:89:
         aa:13:4a:e2:cc:ce:90:8a:43:dd:e6:b0:e0:e8:87:4a:c9:48:
         94:a9:8c:71:33:55:a6:16:0e:f7:e1:b1:6f:28:02:76:8b:68:
         78:3b:c4:dd:c4:09:d2:fc:7d:23:ae:17:cd:f9:de:e0:20:cf:
         63:5a:89:cf:64:4c:7b:0d:2c:21:69:9e:fe:76:38:5d:05:b1:
         51:42:9b:42:58:c8:51:8b:84:ca:72:7b:59:3c:7e:05:d8:43:
         00:54:a2:ee:92:f5:af:e0:66:64:20:01:99:bc:e1:0a:e3:3b:
         81:d0:83:92:6d:70:28:2b:88:aa:fd:d6:0b:df:b7:5f:2b:1a:
         2c:44:8c:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQeJ8gbxFpc1YIrH3cE3EssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjgzZjIwYTAwMTJjNGQ1ODRjMDUxNTEyZjY0N2FmNzliZGEwNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdqKBjuOjYVbybX6YS854r3v/UbC
ByYO1diEsxjdeaz26fyxJUpAoYKr/PMUeF4dQjFqiONEyMRS5X1vzFNu2XEO3P/X
/XhgkjnV94wSTOMqGPaPN4m/N/K0JWCzn32j2Zhl1NYh7hT2vM02M4VNCwPi0cYK
rAE/BlCjLYkggRb2/8rgyz3thp147RKET+Vpesu0x7dpA0wW887bGEeU1L6RNF7P
QMULkVzDmrwEYliGzJ145OEEv//ILnIcRVtU6/Ls/O/0QPSREIWtyDEejzWQvipR
tVpJ0XSvgwO1I4wNJpGEP3DhNNwBYJi7UvR72BZlghVdUNAJJ4FaloMiOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM+D8goAEsTVhMBRUS9keveb2gU1MB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvejRQeUNnQVN4TldFd0ZGUkwyUjY5NXZhQlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWXS4MA0G
CSqGSIb3DQEBCwUAA4IBAQAnyt9MQFT0qmFnaUnFRv6QdOzGzPO8Ra/f9EOMFw26
HLGYdVdq152iO5pNUKuhl2ODtigfa5yE9wQ72gigOGP5g7mKm/SbxB7CcSePvVXH
NgJwj63BJk065b2ZDgbpZQhrtoqibGDzFFF4QdlcUjcLsXHX3SSDD11IgGv4FImq
E0rizM6QikPd5rDg6IdKyUiUqYxxM1WmFg734bFvKAJ2i2h4O8TdxAnS/H0jrhfN
+d7gIM9jWonPZEx7DSwhaZ7+djhdBbFRQptCWMhRi4TKcntZPH4F2EMAVKLukvWv
4GZkIAGZvOEK4zuB0IOSbXAoK4iq/dYL37dfKxosRIws
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org