Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7a3b1c-8001-46b8-a335-d3a096a5eb2f/1/zlKDbYISB-msAkDQ2ZtuX3Txg2Y.roa
File:                     zlKDbYISB-msAkDQ2ZtuX3Txg2Y.roa (raw, json)
Hash identifier:          bNTdiP0fVS2S6Y4lN65C8z4SwhOjrxrzemxArkTu6hg=
Subject key identifier:   CE:52:83:6D:82:12:07:E9:AC:02:40:D0:D9:9B:6E:5F:74:F1:83:66
Certificate issuer:       /CN=5c412f72ea7410581906488ba77db7b82267e4aa
Certificate serial:       52DD
Authority key identifier: 5C:41:2F:72:EA:74:10:58:19:06:48:8B:A7:7D:B7:B8:22:67:E4:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEEvcup0EFgZBkiLp323uCJn5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7a3b1c-8001-46b8-a335-d3a096a5eb2f/1/zlKDbYISB-msAkDQ2ZtuX3Txg2Y.roa
Signing time:             Tue 25 Jan 2022 18:23:16 +0000
ROA not before:           Tue 25 Jan 2022 18:23:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        89.106.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21213 (0x52dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c412f72ea7410581906488ba77db7b82267e4aa
        Validity
            Not Before: Jan 25 18:23:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce52836d821207e9ac0240d0d99b6e5f74f18366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:6e:f5:df:6d:7f:c6:55:d9:38:92:88:b9:
                    4f:29:12:ca:8d:8c:f9:a7:28:b8:68:df:09:52:e0:
                    2b:ec:d4:68:ab:21:38:27:f7:85:e0:ba:f9:20:7a:
                    34:c1:fc:bb:bd:6b:94:38:cd:2f:77:b1:f8:65:85:
                    c9:07:03:e2:2b:eb:a9:70:b5:6c:70:61:df:cc:8c:
                    cd:b0:ba:24:f8:f0:ef:81:4a:6f:88:0d:55:03:b5:
                    3b:21:40:f7:92:b8:5e:58:bf:38:ad:6a:12:d8:ff:
                    5e:42:c6:d1:6c:29:cf:cb:f0:8a:a6:77:31:28:8e:
                    f4:d6:b6:d2:9e:f3:21:1a:19:5e:eb:89:e9:d1:7e:
                    08:c1:97:80:9c:8f:50:26:02:06:de:62:7b:8e:ce:
                    30:ab:12:2e:57:ac:d4:f1:1d:67:fc:ce:8e:5b:a0:
                    b4:14:73:6a:85:d8:e6:4b:13:61:08:a3:6a:aa:49:
                    d1:bf:b0:b7:f6:5d:91:e3:2c:2e:2b:4a:0a:f9:2d:
                    32:70:eb:61:c4:65:94:2b:0a:cb:db:4b:d4:ba:cc:
                    0e:43:0d:e0:64:ee:c1:d8:00:e8:61:80:96:04:67:
                    ac:5d:43:7f:7b:4e:a2:fa:7c:3f:73:77:29:a3:15:
                    62:e3:da:c3:6c:80:36:90:6d:ef:bf:e9:b6:d2:0c:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:52:83:6D:82:12:07:E9:AC:02:40:D0:D9:9B:6E:5F:74:F1:83:66
            X509v3 Authority Key Identifier:
                keyid:5C:41:2F:72:EA:74:10:58:19:06:48:8B:A7:7D:B7:B8:22:67:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEEvcup0EFgZBkiLp323uCJn5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7a3b1c-8001-46b8-a335-d3a096a5eb2f/1/zlKDbYISB-msAkDQ2ZtuX3Txg2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7a3b1c-8001-46b8-a335-d3a096a5eb2f/1/XEEvcup0EFgZBkiLp323uCJn5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:89:6d:41:0f:46:b5:10:8a:71:24:e2:81:82:9b:79:db:e2:
         05:fd:55:67:dd:7c:c5:e4:bb:1e:3e:d7:bb:16:fa:81:9a:fc:
         69:b5:fd:04:67:76:37:c9:67:75:c7:3b:a1:a0:f6:29:aa:5b:
         d2:a3:63:29:01:c9:d3:40:64:20:e4:4e:19:2c:af:10:7a:56:
         78:4c:f8:9a:1d:7f:50:32:c1:e9:09:13:72:f3:60:8a:0a:74:
         d8:2b:1e:10:53:80:64:b2:a8:95:13:b2:4f:b7:7e:e0:d0:3a:
         d7:83:7d:8a:12:ba:a0:28:2e:75:66:c4:46:86:a7:81:92:ad:
         6b:72:d2:ab:f1:90:bf:ed:e5:c7:0e:fe:cc:c3:8c:75:ea:ac:
         ed:b8:3a:56:3f:11:03:7e:81:58:37:0a:f1:fb:71:62:7f:bd:
         d1:d7:31:cb:a8:2d:d1:65:4a:e2:a0:e4:ba:86:30:99:5b:f1:
         21:cd:07:d5:8e:77:1a:fd:c6:87:d8:5d:25:d9:75:f4:46:cc:
         da:74:d2:a1:25:1a:38:48:c3:5a:f8:60:34:14:c1:93:4b:f1:
         92:62:d7:09:c5:a3:2e:1f:f2:60:e4:85:d9:f1:d3:4c:f4:82:
         a7:88:0d:56:e8:b9:5a:b1:9f:49:2c:25:a4:96:97:05:15:46:
         52:0b:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org