Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/9ye_MJ3CDKLGs43OWULLGKmYQb4.roa
File:                     9ye_MJ3CDKLGs43OWULLGKmYQb4.roa (raw, json)
Hash identifier:          tp3HfP1jzFcr5iPN9umyx3VnD5VfJrKBTWcnwk8LwW0=
Subject key identifier:   F7:27:BF:30:9D:C2:0C:A2:C6:B3:8D:CE:59:42:CB:18:A9:98:41:BE
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01880BC090B0B4CE803CF2E78CE59911DDE0
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/9ye_MJ3CDKLGs43OWULLGKmYQb4.roa
Signing time:             Thu 11 May 2023 16:59:09 +0000
ROA not before:           Thu 11 May 2023 16:59:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16276
IP address blocks:        89.23.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0b:c0:90:b0:b4:ce:80:3c:f2:e7:8c:e5:99:11:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: May 11 16:59:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f727bf309dc20ca2c6b38dce5942cb18a99841be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c9:07:ee:ca:d7:1b:96:ed:19:96:09:45:e8:
                    44:b7:40:71:fb:09:cd:76:27:ba:64:e1:6a:5e:4b:
                    ef:d8:db:1d:26:9a:8d:a2:3f:b8:fc:45:cd:b0:cb:
                    4e:02:e3:d4:27:7f:e4:e4:a5:0e:70:90:64:32:1f:
                    13:83:c3:b7:d3:94:5d:95:ca:57:4c:4f:c4:dd:b7:
                    0f:d8:8a:58:1f:90:5a:7b:d9:a1:63:87:6b:63:c3:
                    67:fe:f5:fc:ce:df:d1:9d:5b:b3:6b:da:5d:9d:5c:
                    08:f8:47:9a:5c:53:44:a0:da:53:73:8d:34:2f:35:
                    ec:7c:62:55:09:9f:73:52:50:23:d2:f4:ee:17:4c:
                    51:6c:93:3a:ab:4b:39:98:ba:a1:9a:90:a9:92:32:
                    63:55:87:12:90:14:e0:9a:d5:26:90:35:ad:b9:97:
                    c7:8f:55:41:df:bb:7e:69:3c:bb:7c:f5:97:73:cf:
                    68:ec:63:a1:80:c3:78:2e:1a:40:73:09:e3:58:d3:
                    27:f2:f7:a9:75:0d:22:1b:ae:8d:af:48:61:51:29:
                    d5:71:7f:28:83:22:02:bb:58:27:5d:d5:8f:83:46:
                    34:b4:a1:94:30:27:b6:0c:7d:61:c2:03:6d:ad:f0:
                    60:70:95:0c:4b:9c:43:95:99:c2:d9:21:3a:f6:b6:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:BF:30:9D:C2:0C:A2:C6:B3:8D:CE:59:42:CB:18:A9:98:41:BE
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/9ye_MJ3CDKLGs43OWULLGKmYQb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:c3:b9:88:50:a7:8a:ca:62:72:a4:91:05:f3:38:a6:ec:
         72:08:bf:d1:60:47:3a:dd:11:7a:41:d0:d3:8b:b6:fb:20:ac:
         64:63:f1:e2:d7:b1:b0:69:8d:5a:55:86:80:39:54:34:1e:df:
         d0:5e:56:e4:7d:86:93:02:a1:30:05:c7:64:a1:47:7f:a3:70:
         93:c7:13:28:88:8d:8d:93:ab:92:65:e2:a5:6c:ca:1a:5a:b5:
         80:c7:97:11:71:20:29:5a:5e:b2:66:a6:d5:99:87:34:0e:f0:
         db:96:67:d5:11:4e:00:3f:ff:ac:98:f8:bd:27:2a:46:cb:40:
         27:a2:49:3e:e7:6a:cd:53:bb:a6:9c:c7:00:c3:b8:c7:bd:13:
         12:bb:b7:1e:21:db:30:96:43:12:d6:dc:29:13:1e:64:ef:a1:
         dd:67:58:7e:7f:c5:87:5c:02:27:37:4a:0c:d2:6f:b1:c7:f4:
         7a:da:6c:63:34:ef:7a:0b:cd:cc:b4:8d:63:d8:11:be:1a:aa:
         7c:cc:79:7a:35:6c:69:ee:f7:ac:c9:8a:70:fc:b2:21:ff:65:
         75:e1:d7:3a:75:00:a1:e4:09:92:5c:71:f7:66:aa:07:31:ea:
         c1:64:2d:55:a3:43:c5:21:31:cd:f7:6b:95:28:59:bb:69:68:
         e0:0c:5b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-fra.rpki-client.org