Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zVEpd5eOrX763vZYV8KAy7R1iLU.roa
File:                     zVEpd5eOrX763vZYV8KAy7R1iLU.roa (raw, json)
Hash identifier:          CL8z1tQYcEBfeneWJCJeNyEsWvq71yJym+nkjepnEJU=
Subject key identifier:   CD:51:29:77:97:8E:AD:7E:FA:DE:F6:58:57:C2:80:CB:B4:75:88:B5
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27C24EEA6CE943F933491C61593AC9
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zVEpd5eOrX763vZYV8KAy7R1iLU.roa
Signing time:             Fri 28 Oct 2022 10:33:52 +0000
ROA not before:           Fri 28 Oct 2022 10:33:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13213
IP address blocks:        89.116.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:c2:4e:ea:6c:e9:43:f9:33:49:1c:61:59:3a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd512977978ead7efadef65857c280cbb47588b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:27:a0:ab:b1:83:ba:64:ff:db:68:22:76:
                    f8:4d:73:97:18:c4:8b:a8:51:4c:73:f8:1a:28:70:
                    92:aa:ca:ae:8a:10:42:ec:e1:d9:65:d0:71:83:fb:
                    77:7d:46:2e:89:23:20:3a:c1:8a:ae:a7:7d:d9:7e:
                    08:1e:97:80:8f:7b:23:4c:f5:06:b0:1a:54:f6:af:
                    27:83:92:c7:5f:bf:84:e9:7d:f4:f6:cd:45:78:d9:
                    41:4d:38:c2:9f:57:d3:f4:73:23:f4:de:05:38:35:
                    03:57:ff:b6:ad:a4:12:6c:ef:c3:dd:eb:15:98:48:
                    fa:d1:9e:e6:82:c0:f6:bb:67:88:08:50:29:b5:e5:
                    81:55:bb:2a:7f:0d:ac:2a:48:80:bc:a0:8b:7a:71:
                    bc:96:6d:af:85:c5:0f:40:c3:28:4a:04:3a:cc:c8:
                    38:d5:4d:d5:e7:25:f1:f1:f3:3c:fd:50:c0:5a:0b:
                    e2:9b:89:21:8f:93:28:5d:03:59:dc:a8:fb:a7:c7:
                    3a:73:c5:f7:f6:19:51:bd:a9:3a:da:38:bb:7a:b9:
                    fb:9a:3c:0b:18:db:2f:98:2c:a2:56:f8:de:f3:7e:
                    22:a4:b9:e7:2e:4b:74:63:3b:3e:21:a3:8e:24:3f:
                    53:7b:ec:7a:15:35:78:89:9a:b7:c6:8a:bd:6d:bb:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:51:29:77:97:8E:AD:7E:FA:DE:F6:58:57:C2:80:CB:B4:75:88:B5
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zVEpd5eOrX763vZYV8KAy7R1iLU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:8f:22:89:00:9c:10:d0:b8:27:28:c2:cd:db:91:2a:88:e4:
         b5:3f:df:69:b8:b6:ff:01:31:c0:3d:ad:c6:33:f6:af:dc:53:
         11:52:ae:1c:19:7a:04:e8:11:d8:5f:be:6d:9b:5a:f3:b8:de:
         ef:d3:78:1c:1d:68:c9:51:65:ea:d8:44:9a:55:23:2e:df:21:
         e6:f8:c8:4e:fd:eb:29:27:27:c8:f5:0d:09:15:2a:41:df:94:
         7a:b3:d0:e4:81:e4:c5:bd:d0:d8:4b:40:c8:f0:5e:65:40:8f:
         4b:0b:0c:93:c3:b6:57:34:27:96:60:93:a7:69:25:77:88:98:
         2f:bb:d2:d0:13:76:a2:d7:ae:c0:52:8b:c6:ff:51:29:4b:da:
         c0:c6:2b:a2:a9:5e:79:2f:4d:e8:a1:2e:f1:29:89:c2:e2:68:
         b2:85:80:1a:52:ae:51:2f:1c:24:7f:1a:36:9f:94:25:ff:2d:
         93:c7:1e:92:b0:44:93:29:18:76:cd:ee:52:fa:88:50:da:58:
         1a:9e:46:40:e0:45:41:cc:67:11:58:99:22:16:40:d4:43:da:
         89:84:59:48:c1:bb:08:d6:3a:54:12:ee:1b:9e:20:35:ef:98:
         0e:64:ef:7d:06:26:78:c0:7b:f7:64:dc:44:5d:33:46:1a:97:
         92:8b:f8:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQeJ8JO6mzpQ/kzSRxhWTrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDUxMjk3Nzk3OGVhZDdlZmFkZWY2NTg1N2MyODBjYmI0NzU4OGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy0noKuxg7pk/9toInb4TXOXGMSL
qFFMc/gaKHCSqsquihBC7OHZZdBxg/t3fUYuiSMgOsGKrqd92X4IHpeAj3sjTPUG
sBpU9q8ng5LHX7+E6X309s1FeNlBTTjCn1fT9HMj9N4FODUDV/+2raQSbO/D3esV
mEj60Z7mgsD2u2eICFApteWBVbsqfw2sKkiAvKCLenG8lm2vhcUPQMMoSgQ6zMg4
1U3V5yXx8fM8/VDAWgvim4khj5MoXQNZ3Kj7p8c6c8X39hlRvak62ji7ern7mjwL
GNsvmCyiVvje834ipLnnLkt0Yzs+IaOOJD9Te+x6FTV4iZq3xoq9bbt8HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1RKXeXjq1++t72WFfCgMu0dYi1MB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvelZFcGQ1ZU9yWDc2M3ZaWVY4S0F5N1IxaUxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXTxMA0G
CSqGSIb3DQEBCwUAA4IBAQBRjyKJAJwQ0LgnKMLN25EqiOS1P99puLb/ATHAPa3G
M/av3FMRUq4cGXoE6BHYX75tm1rzuN7v03gcHWjJUWXq2ESaVSMu3yHm+MhO/esp
JyfI9Q0JFSpB35R6s9DkgeTFvdDYS0DI8F5lQI9LCwyTw7ZXNCeWYJOnaSV3iJgv
u9LQE3ai167AUovG/1EpS9rAxiuiqV55L03ooS7xKYnC4miyhYAaUq5RLxwkfxo2
n5Ql/y2Txx6SsESTKRh2ze5S+ohQ2lgankZA4EVBzGcRWJkiFkDUQ9qJhFlIwbsI
1jpUEu4bniA175gOZO99BiZ4wHv3ZNxEXTNGGpeSi/i5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org