Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/CruS8EKH4VSeIb_mxzhjDca0SwU.roa
File:                     CruS8EKH4VSeIb_mxzhjDca0SwU.roa (raw, json)
Hash identifier:          j8WdVDmTl7Fn9TlBA6xK1Wm42oV4pxeNA7kzeZIt9V0=
Subject key identifier:   0A:BB:92:F0:42:87:E1:54:9E:21:BF:E6:C7:38:63:0D:C6:B4:4B:05
Certificate issuer:       /CN=e6a7ff16095332c5201bca9d54c16e1847a82f24
Certificate serial:       01856E38C15A791EDA3EAAEBD88000BA2D7A
Authority key identifier: E6:A7:FF:16:09:53:32:C5:20:1B:CA:9D:54:C1:6E:18:47:A8:2F:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qf_FglTMsUgG8qdVMFuGEeoLyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/CruS8EKH4VSeIb_mxzhjDca0SwU.roa
Signing time:             Sun 01 Jan 2023 16:44:51 +0000
ROA not before:           Sun 01 Jan 2023 16:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210546
IP address blocks:        89.107.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:38:c1:5a:79:1e:da:3e:aa:eb:d8:80:00:ba:2d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a7ff16095332c5201bca9d54c16e1847a82f24
        Validity
            Not Before: Jan  1 16:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0abb92f04287e1549e21bfe6c738630dc6b44b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:4a:bf:0f:05:f0:66:ff:38:54:41:76:50:
                    b1:bb:a1:c6:dd:01:2f:aa:ab:f5:5d:4a:5a:1e:0c:
                    17:86:51:1e:aa:3f:78:7d:c0:cb:8b:57:4b:50:fb:
                    0f:85:fe:3a:82:82:d7:e2:6d:7c:eb:67:86:81:13:
                    df:78:48:ad:9b:86:71:4f:8b:7b:33:cf:60:91:4e:
                    2e:36:0f:f7:8c:1c:93:09:fe:7b:a2:f3:13:d7:a4:
                    1c:1f:e9:e7:c4:68:73:44:dc:1c:84:de:f7:0e:2b:
                    1e:d9:23:8b:b5:13:11:ae:cb:04:83:a4:aa:d2:5f:
                    d0:9b:42:43:7b:82:1f:a3:4f:e4:8d:81:fe:7e:92:
                    c3:b5:dc:87:67:35:7d:91:47:d0:94:00:3f:97:a2:
                    d5:71:a5:77:d0:eb:ed:49:6b:5e:37:3b:e3:5e:9d:
                    ac:35:1f:ba:d1:76:ac:40:be:59:da:4d:6f:cf:3d:
                    4f:a4:06:8b:0b:32:0d:da:d6:46:de:c6:69:d7:a4:
                    7c:30:ed:15:99:16:f9:53:4a:b6:6b:c5:ef:b2:fb:
                    3b:9c:0f:0b:82:28:c1:a1:fe:3c:69:0e:d2:de:1d:
                    52:cf:64:ee:12:f9:35:92:ab:e6:19:92:0c:f4:f8:
                    d3:a5:a7:a8:f3:de:75:e7:c8:41:50:92:53:d4:5b:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:92:F0:42:87:E1:54:9E:21:BF:E6:C7:38:63:0D:C6:B4:4B:05
            X509v3 Authority Key Identifier:
                keyid:E6:A7:FF:16:09:53:32:C5:20:1B:CA:9D:54:C1:6E:18:47:A8:2F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qf_FglTMsUgG8qdVMFuGEeoLyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/CruS8EKH4VSeIb_mxzhjDca0SwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/5qf_FglTMsUgG8qdVMFuGEeoLyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:4a:1f:36:5a:4f:5f:d2:33:32:10:05:b9:6d:ef:8b:e6:fe:
         e8:5c:1b:12:c8:eb:68:3b:10:3c:08:2e:8b:63:44:07:ce:4d:
         5c:ff:41:37:da:56:7e:8c:8f:28:db:5c:81:f4:35:b9:01:1f:
         8c:6a:e8:1b:4c:42:c3:6c:39:8c:11:14:5f:53:72:c9:e4:39:
         4c:c1:13:2d:94:b8:c7:f7:86:3b:6e:dc:91:21:99:c8:7f:75:
         b9:82:e3:f0:b7:19:1e:f8:cb:22:26:29:2e:ef:bd:6f:fd:c3:
         5f:47:c3:da:b2:b1:bd:71:ed:9b:ca:3e:a2:03:c6:35:a6:25:
         ff:35:8f:e1:de:e3:88:49:b6:69:d6:76:41:55:42:49:f1:77:
         c4:34:91:14:50:8d:be:30:60:5f:49:37:72:2a:2f:aa:f4:a8:
         1f:02:8c:5a:0d:56:9d:90:0e:06:d5:30:57:13:89:4d:0d:57:
         21:6b:be:f3:21:7d:95:c9:a9:8b:3c:d3:3d:75:db:08:01:a4:
         7f:71:a9:b1:da:b6:f4:75:2d:0e:8d:33:63:18:fc:89:51:ae:
         5a:15:98:50:65:82:2d:a8:20:7a:64:86:70:53:14:02:a5:22:
         6c:37:95:2a:32:b1:d9:82:87:e3:a7:62:3d:d8:65:bb:0b:55:
         90:c2:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:43 2024 by rpki-client on console-fra.rpki-client.org