Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/fkrfeRlMMfL2fI7tE9H5DgRaLnU.roa
File:                     fkrfeRlMMfL2fI7tE9H5DgRaLnU.roa (raw, json)
Hash identifier:          RTrSCALFtR0uA/8e0PzTyUhRc7XM7b334V/Ar79e6Go=
Subject key identifier:   7E:4A:DF:79:19:4C:31:F2:F6:7C:8E:ED:13:D1:F9:0E:04:5A:2E:75
Certificate issuer:       /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial:       01826247B73C9E155D46571AFCAD742FC60B
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/fkrfeRlMMfL2fI7tE9H5DgRaLnU.roa
Signing time:             Wed 03 Aug 2022 05:57:23 +0000
ROA not before:           Wed 03 Aug 2022 05:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     996
IP address blocks:        62.112.128.0/20 maxlen: 20
                          62.112.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:62:47:b7:3c:9e:15:5d:46:57:1a:fc:ad:74:2f:c6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
        Validity
            Not Before: Aug  3 05:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e4adf79194c31f2f67c8eed13d1f90e045a2e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:d2:e3:3b:2a:94:e4:71:ce:fa:f8:06:69:
                    46:df:37:c9:41:63:15:88:99:96:57:62:c2:ae:90:
                    77:26:6d:c6:ae:6d:76:a5:a8:3c:d7:ef:87:75:58:
                    ee:a2:d8:ed:2e:ed:2d:f8:4f:12:6b:3b:72:51:72:
                    fe:df:39:78:5b:46:74:ee:c6:f9:6b:a8:9f:71:38:
                    e0:2e:17:ed:46:60:97:8e:81:b5:bf:f1:bb:33:40:
                    6b:df:b6:00:a2:4b:62:a1:fc:bc:24:ab:c0:22:71:
                    09:b0:a1:dd:50:c4:a8:6b:39:27:da:e2:0f:3f:97:
                    e4:81:43:ad:f4:f1:a6:7a:0b:e5:16:96:de:0a:63:
                    12:a9:65:f8:61:08:7a:0a:17:76:bd:e5:53:2d:70:
                    16:3d:f8:1b:ae:81:2b:d7:23:c3:bb:39:c8:43:7f:
                    26:ea:94:1c:b0:b1:66:ad:71:30:0b:8e:d6:45:30:
                    b6:a4:f9:99:f7:32:1d:9d:54:c0:02:05:26:fe:b6:
                    35:3c:6c:40:5c:d0:ed:53:eb:88:12:94:f0:ef:02:
                    76:c5:17:52:22:19:84:33:9c:eb:7c:24:20:2a:96:
                    d7:f5:07:37:f6:9a:c7:5f:62:6d:a6:0a:1b:30:83:
                    9d:9d:d7:9c:f3:d7:6f:6f:1e:54:66:79:49:9f:81:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4A:DF:79:19:4C:31:F2:F6:7C:8E:ED:13:D1:F9:0E:04:5A:2E:75
            X509v3 Authority Key Identifier:
                keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/fkrfeRlMMfL2fI7tE9H5DgRaLnU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:24:d2:e0:9f:cc:4c:e4:a0:dc:a6:6c:91:9b:96:64:c7:6f:
         c1:6a:3b:56:16:d1:9b:14:00:fb:bc:44:5e:2c:e2:9e:ef:77:
         9f:53:63:ce:7d:eb:ff:37:8f:cf:dc:79:6f:73:ac:31:20:dc:
         03:55:b7:dd:07:a7:55:90:66:ae:db:49:95:07:52:28:54:d9:
         4b:98:e0:0d:93:df:72:41:c9:22:73:c0:a8:f7:a1:9d:e9:71:
         00:43:13:9f:ea:51:21:0e:ba:c4:2d:ab:a3:d4:54:d9:e4:2d:
         ce:70:d9:aa:fe:28:b1:6e:b2:53:55:64:be:53:0d:42:30:e3:
         8f:3e:aa:73:80:39:8c:cd:ee:d2:77:e4:d6:1a:58:be:aa:6e:
         9d:3a:eb:bf:26:30:1b:fb:19:d5:de:91:f2:bc:fa:19:1b:92:
         d5:08:0d:4a:b8:45:3f:9a:53:f8:cd:e6:a0:70:a7:67:4f:86:
         97:fc:f0:79:d9:3b:b4:e2:53:24:d6:d6:cb:fa:f4:15:55:0b:
         c1:0b:73:80:de:3e:a3:ed:24:42:b3:df:96:a5:8a:20:89:d0:
         bd:69:e6:83:d9:21:6c:5b:2d:1f:1d:31:67:0a:3e:21:4e:72:
         96:43:10:b7:d2:97:fa:76:29:05:64:e9:e7:5e:6b:38:10:62:
         9d:c3:d0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:46 2024 by rpki-client on console-fra.rpki-client.org