Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/EubdTCWqXaTKco_swTOrMq8rrCU.roa
File:                     EubdTCWqXaTKco_swTOrMq8rrCU.roa (raw, json)
Hash identifier:          3PBjqke2w97qzERy6Jv9XHbayO5VgwvQ5NngzUPxxvw=
Subject key identifier:   12:E6:DD:4C:25:AA:5D:A4:CA:72:8F:EC:C1:33:AB:32:AF:2B:AC:25
Certificate issuer:       /CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
Certificate serial:       0187B2E89B40BE20B39661547C8B9F702F0E
Authority key identifier: D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/EubdTCWqXaTKco_swTOrMq8rrCU.roa
Signing time:             Mon 24 Apr 2023 10:56:41 +0000
ROA not before:           Mon 24 Apr 2023 10:56:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.204.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b2:e8:9b:40:be:20:b3:96:61:54:7c:8b:9f:70:2f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26ae4e9b8b0fd994d2cc4be6c6f39cc8b9add89
        Validity
            Not Before: Apr 24 10:56:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12e6dd4c25aa5da4ca728fecc133ab32af2bac25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:18:89:3a:8b:b1:6e:db:2c:c5:03:28:f0:
                    71:e6:40:37:1b:b7:78:65:51:1b:13:21:a6:57:22:
                    2f:c8:94:ce:c4:e1:ac:30:ec:8e:06:af:c7:3e:7f:
                    ce:52:2a:f1:20:6a:33:c6:c5:eb:18:27:98:47:a1:
                    7e:cb:73:28:3c:bc:0d:be:c4:9e:94:53:c5:e1:2e:
                    64:6f:5d:5d:2b:32:46:10:ea:6f:b6:eb:0a:59:f8:
                    a8:fb:17:88:6e:ed:64:e0:73:ef:f1:62:4b:03:d6:
                    f3:90:9a:5e:14:c6:3d:aa:b8:85:84:25:ec:3d:35:
                    21:fe:2a:c5:66:51:e5:ed:5d:cd:55:74:42:cc:2b:
                    57:38:f4:c0:f5:c4:b0:d1:bf:69:35:cb:e1:a3:81:
                    a8:e5:2e:a2:f7:1f:ba:87:b7:0c:f3:13:38:72:75:
                    5b:2b:37:18:08:35:db:23:bc:ae:07:b3:cd:35:c1:
                    d4:15:ab:6b:ce:0d:16:37:6b:e9:9e:ba:ac:aa:42:
                    9c:2f:76:d2:9f:4c:c9:71:08:af:31:f1:eb:96:ea:
                    ee:30:6a:0b:34:4f:00:89:c3:32:fb:8f:26:15:58:
                    bd:ca:9d:e4:38:3e:81:31:70:40:fa:26:d8:10:f5:
                    72:f1:7c:e2:5a:58:de:fd:a6:70:1d:c7:b5:44:4c:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E6:DD:4C:25:AA:5D:A4:CA:72:8F:EC:C1:33:AB:32:AF:2B:AC:25
            X509v3 Authority Key Identifier:
                keyid:D2:6A:E4:E9:B8:B0:FD:99:4D:2C:C4:BE:6C:6F:39:CC:8B:9A:DD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mrk6biw_ZlNLMS-bG85zIua3Yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/EubdTCWqXaTKco_swTOrMq8rrCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/be9a76-4d7b-4cbf-9591-05fecbc77614/1/0mrk6biw_ZlNLMS-bG85zIua3Yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8d:95:84:1a:5c:5e:36:41:46:aa:e7:57:ad:bf:cd:09:de:
         8c:13:8f:eb:a4:11:e1:7a:65:e9:f2:bc:04:ad:0b:65:10:a0:
         83:70:1f:fd:f3:13:ba:e2:6c:af:10:33:ad:bd:fa:7f:c6:d8:
         9b:58:f4:5a:42:56:5b:bd:9a:9b:b2:63:93:72:c3:98:70:9a:
         28:0f:a8:74:d9:78:60:21:7e:cf:bb:06:42:90:c7:06:56:e1:
         fe:87:9c:e7:14:7d:ae:14:36:4d:b7:bd:9f:99:60:98:9b:50:
         8c:ce:97:25:84:0d:5b:35:f2:94:9c:bf:a0:de:c7:d5:95:60:
         09:29:2f:43:46:60:ac:1c:3b:06:25:48:b9:15:87:be:ae:4b:
         28:c2:d4:3a:88:fe:20:45:56:cf:69:d7:0a:e2:d8:d6:29:c4:
         e1:2e:e9:2e:a4:c4:e0:80:6c:2e:d8:c5:21:48:03:ce:ee:4c:
         46:12:0d:9d:47:17:0e:33:d0:00:74:57:15:fd:3e:ce:1f:f4:
         c8:11:2b:54:ae:b8:63:61:47:93:84:c8:4e:09:2c:37:5c:72:
         52:d6:c2:da:57:93:7b:a7:f1:01:23:59:2a:51:98:a4:df:bc:
         26:a4:65:a2:9f:db:dc:24:27:7b:58:f4:b4:d6:e7:b9:ca:87:
         65:45:96:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org