Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2dbe80-278a-4a91-8d33-9abf399da2a8/1/NQjAF5wKy1d669eDmANwqZrNTyM.roa
File:                     NQjAF5wKy1d669eDmANwqZrNTyM.roa (raw, json)
Hash identifier:          r9+psQZVJogsczB33F+1Sgx/gng3UNIPl+0UPFWjSGc=
Subject key identifier:   35:08:C0:17:9C:0A:CB:57:7A:EB:D7:83:98:03:70:A9:9A:CD:4F:23
Certificate issuer:       /CN=99c06914091641c928e1a3d2efee79b9c6d03c71
Certificate serial:       C05E20
Authority key identifier: 99:C0:69:14:09:16:41:C9:28:E1:A3:D2:EF:EE:79:B9:C6:D0:3C:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcBpFAkWQcko4aPS7-55ucbQPHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2dbe80-278a-4a91-8d33-9abf399da2a8/1/NQjAF5wKy1d669eDmANwqZrNTyM.roa
Signing time:             Sat 01 Jan 2022 03:55:37 +0000
ROA not before:           Sat 01 Jan 2022 03:55:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        62.233.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12607008 (0xc05e20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99c06914091641c928e1a3d2efee79b9c6d03c71
        Validity
            Not Before: Jan  1 03:55:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3508c0179c0acb577aebd783980370a99acd4f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:97:1c:22:50:81:b1:4f:79:5f:c1:89:53:
                    6b:19:56:03:77:89:de:46:dd:52:3c:d8:3e:9b:b1:
                    a7:4f:dd:7c:71:85:9b:c3:c8:29:19:8d:53:0b:43:
                    74:28:e6:00:21:d3:30:b3:ab:62:60:32:72:35:80:
                    05:c7:30:99:90:88:c0:c7:bf:b8:80:fd:8a:28:95:
                    cc:1a:d0:24:58:61:6d:14:fb:b2:4e:28:53:c0:90:
                    bf:9a:78:61:e5:29:7f:c7:b9:01:c3:76:b0:9a:65:
                    a2:84:7c:b4:be:ee:1f:96:bd:99:3d:05:e2:84:95:
                    6f:63:47:d6:47:71:60:21:38:dc:24:3e:b0:12:01:
                    39:7e:e4:4f:57:22:b0:67:af:0b:16:9f:d2:0a:fa:
                    b4:7e:11:1b:3a:9b:6f:87:d4:75:32:45:1a:51:cf:
                    c3:b9:7c:b2:a2:b2:0f:3e:35:05:df:9b:14:a4:b7:
                    44:0d:0a:1b:35:ae:d8:41:b4:f7:4c:01:7f:92:84:
                    99:6f:1f:b7:76:51:10:8f:82:bf:42:41:5a:13:c1:
                    b4:06:71:c7:5a:56:fb:fb:38:c5:2c:29:bf:44:a7:
                    63:cf:67:ea:c4:91:84:f0:74:7f:ce:4b:33:e9:ad:
                    f8:ab:b1:ef:ae:64:fd:f2:da:82:5a:de:ab:6e:6b:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:C0:17:9C:0A:CB:57:7A:EB:D7:83:98:03:70:A9:9A:CD:4F:23
            X509v3 Authority Key Identifier:
                keyid:99:C0:69:14:09:16:41:C9:28:E1:A3:D2:EF:EE:79:B9:C6:D0:3C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcBpFAkWQcko4aPS7-55ucbQPHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2dbe80-278a-4a91-8d33-9abf399da2a8/1/NQjAF5wKy1d669eDmANwqZrNTyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2dbe80-278a-4a91-8d33-9abf399da2a8/1/mcBpFAkWQcko4aPS7-55ucbQPHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e8:73:93:db:5a:47:2b:ad:cf:3e:63:ea:91:86:22:d1:01:
         77:8f:6a:d6:7e:d0:69:4e:ec:3e:69:d2:05:e5:53:6e:2a:f2:
         e5:ed:08:3b:0a:e3:44:41:7c:9e:79:3b:ea:dc:5d:3c:05:46:
         2d:3c:de:19:36:72:36:44:38:b1:88:1f:36:36:be:37:cd:1c:
         47:50:1a:46:96:f8:2f:a0:32:9e:d2:60:79:87:e7:9c:6e:93:
         b3:d1:5f:94:19:1d:e8:8d:d1:78:45:8b:e9:6c:dc:96:41:1d:
         fd:f6:78:7a:a0:e7:cf:8e:95:8d:33:35:50:fc:c3:a1:d9:c8:
         bc:37:a9:a0:c5:50:af:29:8a:e9:6c:dc:19:28:39:d4:4d:6f:
         94:62:30:13:1b:5e:48:a0:76:e1:7b:55:07:5d:f4:79:23:e9:
         41:89:c7:5f:66:1d:47:7a:d2:b6:ff:6e:91:e5:18:21:65:62:
         a9:39:92:bd:ca:03:4f:3e:c4:61:2b:ef:3e:b8:40:38:41:50:
         bd:ac:de:03:d9:e0:74:da:d8:69:40:d1:72:3b:0f:1f:fe:66:
         9a:6f:d0:f2:e0:aa:c1:63:1c:54:c6:74:7f:95:5d:52:91:87:
         bd:d1:f9:80:e5:d3:92:a2:51:36:e7:f8:a8:26:f9:4c:71:ed:
         3f:29:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:13 2024 by rpki-client on console-ams.rpki-client.org