Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS205570.roa
File:                     AS205570.roa (raw, json)
Hash identifier:          k85zCBLpcFPedQdbgskN+vwbdzR4pRjVaa770Pp+Uys=
Subject key identifier:   7A:8C:68:3A:D5:B0:D4:00:FD:6A:91:F0:F2:E5:10:08:C4:F7:E8:58
Certificate issuer:       /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial:       587C7DDC9249726C547906FEA97B499658EC786E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS205570.roa
Signing time:             Tue 06 Jun 2023 09:25:58 +0000
ROA not before:           Tue 06 Jun 2023 09:20:58 +0000
ROA not after:            Tue 04 Jun 2024 09:25:58 +0000
asID:                     205570
IP address blocks:        89.23.90.0/24 maxlen: 24
                          178.254.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7c:7d:dc:92:49:72:6c:54:79:06:fe:a9:7b:49:96:58:ec:78:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
        Validity
            Not Before: Jun  6 09:20:58 2023 GMT
            Not After : Jun  4 09:25:58 2024 GMT
        Subject: CN=7A8C683AD5B0D400FD6A91F0F2E51008C4F7E858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:70:f6:15:3c:a3:da:de:8a:68:34:9c:11:
                    df:23:67:ed:38:38:86:ad:0f:8d:05:77:5f:78:45:
                    a7:05:f0:0b:75:c6:9b:71:97:eb:e3:fb:4a:07:f9:
                    88:b4:f2:61:9d:7f:bb:de:8e:7e:20:df:e7:35:8d:
                    bd:d9:fb:06:7f:f8:57:91:09:f7:9c:04:82:a9:ec:
                    4d:0f:eb:2e:ee:d1:57:e2:62:de:c5:c2:a1:09:cd:
                    a2:cf:c8:90:c1:db:30:a5:8b:73:3e:4b:83:3d:26:
                    c5:e8:81:e9:58:0e:36:63:07:d4:09:4d:70:39:0a:
                    e4:40:18:f2:b9:9c:06:ed:61:47:8e:14:36:c9:14:
                    4e:03:97:a5:9e:89:76:66:3b:b9:44:c9:10:78:15:
                    b3:70:95:92:a9:c9:88:ff:6c:e7:a1:33:79:82:1c:
                    69:83:01:87:06:97:75:e6:d0:3f:3f:7a:39:20:37:
                    57:7a:e8:f7:0c:0b:6b:c0:98:6c:9f:f5:f9:f8:71:
                    d6:b9:cb:94:a0:32:cd:75:6a:cc:61:f0:4a:15:7b:
                    42:60:b5:d4:b3:2b:d1:8f:d9:27:0f:24:be:0a:09:
                    31:02:2c:cd:c8:8e:9a:72:bb:20:92:1a:2d:95:fb:
                    87:3f:39:10:f4:bd:c0:02:ec:e0:92:11:45:67:77:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8C:68:3A:D5:B0:D4:00:FD:6A:91:F0:F2:E5:10:08:C4:F7:E8:58
            X509v3 Authority Key Identifier:
                keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS205570.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.90.0/24
                  178.254.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:f7:40:65:56:08:1b:ad:43:73:18:c2:85:dc:4d:43:74:
         ed:26:b9:b9:4b:be:e3:b5:e5:fb:d9:dc:6b:9a:47:b2:72:83:
         f4:b8:66:a0:04:0c:97:d5:65:e5:7b:46:dd:99:2a:a5:38:f2:
         f6:6b:b5:85:d8:21:ea:fc:54:6f:c3:a1:21:c8:28:e9:7d:e0:
         32:8b:b3:42:a6:43:3c:ca:86:1a:9a:45:4d:d7:73:aa:01:f5:
         44:6d:f1:38:6a:0b:01:6a:b4:ca:96:a4:bf:f8:ff:c0:28:9a:
         80:ee:60:30:b3:ae:fd:f1:e6:7c:95:33:18:fc:bb:93:4f:23:
         27:ec:7e:11:33:24:b9:f7:f8:84:e2:a7:7e:1e:8e:e6:c2:19:
         d8:ad:c9:1e:02:71:b2:13:35:aa:39:e5:d0:8d:45:63:c6:8e:
         cd:5d:2c:0e:65:b1:9f:dd:3e:91:af:77:99:be:80:02:f8:eb:
         a2:c2:64:50:5a:e9:c8:2f:a0:a9:7a:ac:54:61:cd:21:78:7e:
         5a:e5:dc:12:23:0b:9b:96:a5:4f:32:24:32:db:6a:5a:25:59:
         b7:ef:69:d4:58:4c:50:0b:8c:b3:84:3b:0f:45:ca:1f:24:48:
         0d:8d:ba:ce:26:8c:7a:86:04:29:6e:cc:30:8a:be:55:b9:fa:
         99:a7:ee:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org