Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/EqwCytk9UfWXZerpFxe5lJzXLbQ.roa
File:                     EqwCytk9UfWXZerpFxe5lJzXLbQ.roa (raw, json)
Hash identifier:          swU8ppsefJeOLEc2SkFuEcqGqPijS+XQH7ahuLXHgLw=
Subject key identifier:   12:AC:02:CA:D9:3D:51:F5:97:65:EA:E9:17:17:B9:94:9C:D7:2D:B4
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       01873140E5B1FE597E574A47410D28176A29
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/EqwCytk9UfWXZerpFxe5lJzXLbQ.roa
Signing time:             Thu 30 Mar 2023 06:42:29 +0000
ROA not before:           Thu 30 Mar 2023 06:42:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199565
IP address blocks:        89.23.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:31:40:e5:b1:fe:59:7e:57:4a:47:41:0d:28:17:6a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Mar 30 06:42:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12ac02cad93d51f59765eae91717b9949cd72db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:f3:0e:25:f3:b3:c1:f7:f6:04:48:98:3f:
                    e8:db:a8:c2:67:08:73:1b:6a:d8:65:69:f5:a6:19:
                    b6:2a:13:68:3d:b2:02:51:6a:75:da:e9:3e:aa:98:
                    45:23:22:13:bd:2a:a3:bd:90:7c:66:16:11:d6:2d:
                    c8:0a:89:50:7c:9c:83:26:ae:92:20:fb:58:4f:67:
                    47:f2:03:9f:5f:aa:32:37:63:1b:d0:c8:0e:a3:39:
                    8d:7f:96:64:82:3c:2b:67:75:f9:02:68:6f:ce:c3:
                    5a:b1:c0:9f:65:3f:e3:c4:57:b1:6a:58:fd:0d:46:
                    df:01:7d:92:ae:af:90:d5:6c:08:a4:74:04:d5:fc:
                    82:b0:20:0c:c3:b9:90:e1:76:c6:a9:19:89:5a:87:
                    03:00:2c:f8:0f:4b:53:73:02:fd:ea:83:f2:da:66:
                    c2:30:e6:20:e7:f8:22:eb:70:41:fd:34:58:1b:c8:
                    76:7c:28:6e:7b:3f:2f:82:00:78:2a:96:32:e4:ef:
                    03:63:27:cd:22:01:13:96:fa:d0:3b:b4:42:7a:5a:
                    f8:99:07:7d:3d:ab:5c:3b:ff:3a:76:41:fb:83:20:
                    df:c8:35:77:3e:e7:77:30:bb:53:4c:5b:0b:fa:82:
                    3c:15:2a:c7:93:7b:a2:82:df:a1:56:be:a8:f5:a2:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AC:02:CA:D9:3D:51:F5:97:65:EA:E9:17:17:B9:94:9C:D7:2D:B4
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/EqwCytk9UfWXZerpFxe5lJzXLbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3e:b0:47:49:fe:54:7a:cb:69:2d:e6:ab:cf:1c:26:e6:3b:
         b6:75:26:57:55:61:72:7e:9e:8b:eb:65:89:51:7e:d3:63:bb:
         f9:59:da:83:df:70:fa:88:7d:fe:82:e3:4f:2a:50:49:74:f5:
         a0:04:36:a5:b0:13:23:78:84:f8:12:5d:e1:7a:39:0d:88:9f:
         e0:a5:6d:55:a4:57:e8:5f:af:47:4a:4b:dc:a9:25:69:a3:36:
         23:77:76:a6:0b:21:54:21:65:a6:40:6b:52:c4:de:82:c6:39:
         e5:4a:0c:55:ba:e2:d6:ee:51:ed:9f:57:89:0a:a7:5e:df:ca:
         b0:db:af:8b:e1:6c:82:78:a1:69:d9:ae:0a:fe:4e:0e:6c:cb:
         01:fb:20:96:86:4b:26:61:51:da:ab:d3:34:d2:05:fc:13:63:
         4f:87:e9:8c:31:af:d0:85:75:5a:3a:2d:3d:e6:73:28:3b:25:
         b6:74:2e:00:6d:9c:8c:c0:a6:90:91:40:02:13:c8:3a:90:51:
         8d:29:10:35:4f:87:fb:10:b2:b8:17:8b:08:a5:fd:57:82:10:
         c9:9a:71:bf:44:25:46:54:3e:3a:20:10:0b:95:e8:c9:8c:c4:
         c2:e5:69:7f:d6:fb:af:38:61:f8:fa:d8:2c:7f:8b:7f:56:11:
         1c:80:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:04 2023 by rpki-client on console-fra.rpki-client.org