Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/Rvr1zSi_Kyvrz-wHUhv92ba2P60.roa
File:                     Rvr1zSi_Kyvrz-wHUhv92ba2P60.roa (raw, json)
Hash identifier:          CcHYmhoEgvwVpJMcuRDbfju3BAZR9tuQt8daSxnw4wo=
Subject key identifier:   46:FA:F5:CD:28:BF:2B:2B:EB:CF:EC:07:52:1B:FD:D9:B6:B6:3F:AD
Certificate issuer:       /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial:       F3D90A
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/Rvr1zSi_Kyvrz-wHUhv92ba2P60.roa
Signing time:             Mon 03 Jan 2022 08:29:23 +0000
ROA not before:           Mon 03 Jan 2022 08:29:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        193.37.236.0/24 maxlen: 24
                          185.2.160.0/22 maxlen: 22
                          185.2.161.0/24 maxlen: 24
                          185.2.160.0/24 maxlen: 24
                          185.2.162.0/24 maxlen: 24
                          62.112.130.0/24 maxlen: 24
                          62.112.129.0/24 maxlen: 24
                          62.112.132.0/24 maxlen: 24
                          62.112.131.0/24 maxlen: 24
                          62.112.128.0/24 maxlen: 24
                          62.112.134.0/24 maxlen: 24
                          62.112.133.0/24 maxlen: 24
                          62.112.135.0/24 maxlen: 24
                          62.112.137.0/24 maxlen: 24
                          62.112.136.0/24 maxlen: 24
                          62.112.139.0/24 maxlen: 24
                          62.112.138.0/24 maxlen: 24
                          62.112.144.0/24 maxlen: 24
                          62.112.143.0/24 maxlen: 24
                          62.112.145.0/24 maxlen: 24
                          62.112.141.0/24 maxlen: 24
                          62.112.140.0/24 maxlen: 24
                          62.112.142.0/24 maxlen: 24
                          62.112.148.0/24 maxlen: 24
                          62.112.147.0/24 maxlen: 24
                          62.112.149.0/24 maxlen: 24
                          62.112.146.0/24 maxlen: 24
                          62.112.151.0/24 maxlen: 24
                          62.112.150.0/24 maxlen: 24
                          62.112.152.0/24 maxlen: 24
                          62.112.158.0/24 maxlen: 24
                          62.112.157.0/24 maxlen: 24
                          62.112.159.0/24 maxlen: 24
                          62.112.155.0/24 maxlen: 24
                          62.112.154.0/24 maxlen: 24
                          62.112.156.0/24 maxlen: 24
                          62.112.153.0/24 maxlen: 24
                          195.184.92.0/24 maxlen: 24
                          195.184.92.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15980810 (0xf3d90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
        Validity
            Not Before: Jan  3 08:29:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46faf5cd28bf2b2bebcfec07521bfdd9b6b63fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:d0:af:86:44:45:4a:45:d6:92:ba:f4:a3:
                    39:ee:f1:2a:fe:75:f4:8d:54:02:35:7f:a4:0c:20:
                    13:6b:e9:d2:77:5f:ec:06:7c:6d:5a:40:b4:4f:f1:
                    83:cb:50:0b:a0:3b:05:89:dc:35:3f:28:1f:ed:26:
                    f3:29:59:fd:de:5a:8b:68:33:16:e7:86:52:b8:4e:
                    2c:e1:30:d5:a0:71:bf:a9:f6:04:64:80:e5:fe:ae:
                    39:4d:1e:4f:b9:70:59:19:f4:88:ff:aa:f7:1b:d4:
                    02:19:11:66:35:79:24:8a:65:d4:ed:c5:1d:4d:25:
                    d3:68:0c:48:06:0a:1d:a2:f7:65:a5:cd:b8:90:76:
                    4a:d9:ae:bc:a4:bc:4e:34:01:ed:80:6b:13:02:68:
                    9c:c8:e7:d7:57:69:6b:3b:a1:18:5e:4a:52:a1:a2:
                    52:bb:e1:0d:69:00:fd:e4:dc:aa:3c:37:98:5d:42:
                    82:55:03:d2:37:b7:47:79:e9:43:1c:c3:dd:87:9a:
                    43:dd:80:dd:58:be:e2:af:63:e8:18:f7:e5:4f:6a:
                    cc:4b:06:48:14:b5:50:9b:ec:62:86:68:0c:4e:0e:
                    c4:bf:3b:c7:30:a2:33:81:81:42:1e:6a:7a:05:5a:
                    52:61:93:9f:0e:ed:cc:51:80:0b:f0:fb:b6:bd:f6:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:F5:CD:28:BF:2B:2B:EB:CF:EC:07:52:1B:FD:D9:B6:B6:3F:AD
            X509v3 Authority Key Identifier:
                keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/Rvr1zSi_Kyvrz-wHUhv92ba2P60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.128.0/19
                  185.2.160.0/22
                  193.37.236.0/24
                  195.184.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:15:99:18:a8:51:07:ad:8e:07:6b:a7:b2:8b:df:c4:6c:42:
         aa:03:b0:c9:64:85:3d:5d:a2:45:bf:f9:85:23:ed:74:75:6d:
         8c:1d:ef:9c:cc:85:24:83:c4:5a:a6:d3:82:d0:c2:0e:ed:d1:
         fd:85:52:3c:7e:e7:40:c3:01:77:c5:e7:06:9b:2c:73:d7:be:
         8b:c8:9d:a8:13:be:c1:fc:8e:ea:14:49:fb:d4:95:14:2f:64:
         7c:6e:76:10:7b:a8:eb:40:02:82:26:5d:7e:0f:9b:b2:01:f7:
         71:42:e6:2f:b6:1c:fd:ed:df:30:83:29:27:98:49:a0:3d:2b:
         16:ce:aa:f5:a4:e5:d0:2c:4a:8c:69:44:dd:cf:fc:09:8c:c2:
         b0:73:7b:79:77:52:dc:84:e4:8d:07:6f:c9:73:00:24:c7:03:
         05:d4:b0:e2:44:5c:98:58:c5:6c:18:45:ea:21:26:1f:ce:f2:
         cf:90:80:af:c3:15:ed:cb:bc:d5:4f:5c:c4:35:d1:f5:4a:4a:
         aa:a1:f4:f3:c0:99:dd:26:86:a2:f3:c0:c4:14:96:df:86:e3:
         9a:66:97:9d:7e:8f:58:8b:37:eb:41:9a:7c:e1:6e:7c:dd:97:
         67:d9:29:1f:ae:6b:75:14:c4:05:4f:6f:d9:e1:b1:84:91:c6:
         98:27:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org