Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/yB9cUbTnMQXskuLk26YrDKkkyyM.roa
File:                     yB9cUbTnMQXskuLk26YrDKkkyyM.roa (raw, json)
Hash identifier:          2nbXC5X0t5VNkAm3iSm4ZmN6BqSeeuQ3kr/GsVwLmY0=
Subject key identifier:   C8:1F:5C:51:B4:E7:31:05:EC:92:E2:E4:DB:A6:2B:0C:A9:24:CB:23
Certificate issuer:       /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial:       018216D3064B8336A1167AAC1498A2714F40
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/yB9cUbTnMQXskuLk26YrDKkkyyM.roa
Signing time:             Tue 19 Jul 2022 14:18:24 +0000
ROA not before:           Tue 19 Jul 2022 14:18:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207459
IP address blocks:        89.23.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:16:d3:06:4b:83:36:a1:16:7a:ac:14:98:a2:71:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
        Validity
            Not Before: Jul 19 14:18:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c81f5c51b4e73105ec92e2e4dba62b0ca924cb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0d:29:c9:a1:ee:0b:d0:42:26:35:c9:83:2e:
                    a3:0c:34:14:b4:42:d8:a7:12:ad:88:88:ee:12:f0:
                    9a:5b:29:52:fe:a2:8d:fb:b1:40:5d:71:f3:f4:86:
                    a2:d5:73:4a:09:53:d7:a2:9a:91:8c:ae:1e:9a:dd:
                    55:22:44:df:48:ac:1e:aa:dc:f2:9c:63:c2:17:12:
                    b4:ac:66:d3:16:8b:41:76:d4:a0:db:8e:8a:90:9b:
                    7e:62:dc:7e:72:ab:9d:c4:73:6c:8d:fd:48:83:84:
                    66:5e:f2:2c:39:9c:24:d0:8b:96:82:de:46:3a:54:
                    cf:d2:0b:8a:ff:09:90:f7:5d:6e:b6:9b:a5:06:df:
                    aa:3a:5f:cc:a2:7d:ad:49:c3:90:6e:05:c7:63:40:
                    24:34:b2:69:98:1e:b1:22:df:c5:da:a9:64:0e:77:
                    38:33:08:3e:8e:c7:9e:4c:ef:45:71:98:ca:a6:34:
                    bc:4e:a7:15:f2:79:fa:e4:3c:c6:8b:4c:26:7c:33:
                    6e:01:28:05:77:b2:97:8d:b2:25:f0:b3:f2:2c:80:
                    2d:b6:e3:46:04:c0:45:0b:25:ca:42:b2:d0:d9:95:
                    3d:4c:ac:da:73:ac:65:a9:b2:0f:32:cd:da:36:9e:
                    f1:ce:30:50:59:bd:99:6a:af:a4:3f:db:5f:6a:ee:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1F:5C:51:B4:E7:31:05:EC:92:E2:E4:DB:A6:2B:0C:A9:24:CB:23
            X509v3 Authority Key Identifier:
                keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/yB9cUbTnMQXskuLk26YrDKkkyyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:3c:f2:13:f4:f3:de:50:cb:cd:f8:fe:5f:0d:2e:5d:bf:4a:
         cc:4e:7b:67:ce:5e:a6:12:cf:44:4b:bf:1c:1e:39:79:46:a6:
         56:f0:20:ec:d7:ca:c3:c0:3c:d6:18:ed:4c:22:f3:81:39:21:
         50:b4:a0:e4:fe:16:ed:e2:21:7d:ed:a0:77:0a:34:79:d5:1a:
         d7:b8:cd:78:27:f3:37:e8:2f:c9:e9:d7:c2:95:a3:94:d3:bf:
         2e:c8:d4:c6:e5:7a:08:a8:ed:17:88:d3:4e:26:f8:c3:d7:53:
         e4:a3:cf:0d:84:8e:57:e6:c0:fa:d8:d2:83:50:73:a2:36:99:
         64:08:d0:03:4b:e2:e9:66:c2:7c:6b:84:a3:05:c4:5a:d3:25:
         e2:5e:c8:ba:1a:07:5b:54:0e:99:b0:47:fe:af:ff:39:47:7d:
         66:92:d6:d8:11:41:b8:d2:21:3c:0a:50:0d:cb:65:7a:fe:4a:
         fc:f3:7d:e1:f7:c4:cc:b6:6b:0c:67:52:0a:c9:03:22:51:1a:
         67:db:14:70:b1:fb:20:4e:d0:96:70:b7:b6:b7:b1:99:9b:e0:
         83:68:9d:6a:77:b2:e8:06:cf:9b:53:84:7b:56:d2:49:29:73:
         f0:30:78:ad:8c:ed:52:7c:c8:fc:11:50:7b:e1:1a:d4:d3:c6:
         02:ff:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net