Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/Yllde21FDiglHsqs-9SxC-V4Ej8.roa
File:                     Yllde21FDiglHsqs-9SxC-V4Ej8.roa (raw, json)
Hash identifier:          ryu7hgKDuO8j5TFrDtcI+brVUM/pEdImzObG07VAg2g=
Subject key identifier:   62:59:5D:7B:6D:45:0E:28:25:1E:CA:AC:FB:D4:B1:0B:E5:78:12:3F
Certificate issuer:       /CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Certificate serial:       018957D9150DABE4A53C11A70856D9B9D20C
Authority key identifier: 02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/Yllde21FDiglHsqs-9SxC-V4Ej8.roa
Signing time:             Sat 15 Jul 2023 04:39:51 +0000
ROA not before:           Sat 15 Jul 2023 04:39:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        188.64.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:57:d9:15:0d:ab:e4:a5:3c:11:a7:08:56:d9:b9:d2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
        Validity
            Not Before: Jul 15 04:39:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62595d7b6d450e28251ecaacfbd4b10be578123f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cb:5c:0b:1d:6d:e0:85:08:b9:a7:b6:96:0c:
                    95:c2:c4:4c:77:27:ba:66:65:2f:35:d2:c3:51:ee:
                    72:93:25:f8:b1:c7:46:bb:f9:63:f9:90:17:a3:a0:
                    b7:02:8d:03:dd:51:9f:19:77:8b:c6:a6:14:c5:96:
                    d0:63:85:49:bf:7b:bb:a5:18:cf:8a:ae:2d:a2:52:
                    26:69:d2:c2:0b:50:65:84:ae:5e:1c:32:28:d2:10:
                    82:ae:b4:2a:09:7f:d5:9f:b0:60:90:10:83:97:c9:
                    9f:0e:98:04:8a:f7:06:03:25:20:60:82:99:ad:20:
                    aa:2e:1b:da:44:9d:cc:44:9e:17:a9:09:59:ff:6d:
                    37:f8:50:2e:fe:b2:02:6f:6d:58:95:0f:cb:05:2a:
                    1c:fa:b8:0e:43:7e:51:44:c7:2d:0f:c1:18:15:a1:
                    d3:bd:a3:15:75:1f:67:2b:5d:c3:ee:ad:5e:a9:10:
                    f9:a6:e1:fe:13:be:2c:d2:36:28:73:8f:cd:92:02:
                    50:52:fd:0a:a3:82:ce:7c:c6:fd:15:f7:83:c7:b6:
                    8e:5f:37:d2:1a:f2:1c:a1:89:f8:43:8d:38:e2:12:
                    c3:11:86:ad:41:f2:67:fb:ae:76:c6:db:42:9b:1b:
                    61:f9:fb:dc:62:fb:aa:8c:fd:c0:0f:96:98:e5:f8:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:59:5D:7B:6D:45:0E:28:25:1E:CA:AC:FB:D4:B1:0B:E5:78:12:3F
            X509v3 Authority Key Identifier:
                keyid:02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/Yllde21FDiglHsqs-9SxC-V4Ej8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:dd:30:91:c3:9d:c6:a8:8a:2a:c7:50:dd:7c:0b:a7:2c:e6:
         30:89:12:47:44:06:a2:5f:dd:d7:a4:e7:47:04:5e:6d:69:56:
         3d:3d:8a:c8:87:c5:4c:b6:69:ca:3b:f0:ef:5e:75:b3:00:46:
         03:fe:6d:d9:dc:e9:f2:76:80:c8:61:be:90:48:97:52:b8:db:
         2d:bd:64:e6:bc:26:c5:bf:4b:f8:9b:4c:64:ed:27:49:2a:c2:
         1e:fa:aa:50:15:76:05:bb:eb:80:5a:34:60:4c:e7:d4:66:18:
         56:99:6b:2a:cb:b7:96:c2:c5:51:ad:f9:e2:f3:fa:a6:96:bd:
         9b:85:c8:1d:bc:9f:94:15:e2:2d:db:e7:d0:21:71:ab:2e:19:
         87:a0:f9:20:8e:f4:5f:02:08:3b:7e:81:d8:23:41:91:17:97:
         79:05:03:13:46:9e:6a:1e:1f:41:65:51:e3:08:9d:86:0c:22:
         ac:27:3a:52:10:de:80:6d:e5:ff:0f:d2:14:7d:38:e9:de:45:
         5f:1b:73:ff:ce:87:1e:4b:86:10:b4:5f:74:5d:78:d2:6e:8f:
         fa:b8:d6:11:11:c2:06:df:ad:59:1e:cd:69:06:e1:7e:ae:67:
         a8:58:0a:1d:4c:e2:31:fc:40:2e:de:7a:17:77:5d:f3:0e:5a:
         66:81:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:16 2024 by rpki-client on console-ams.rpki-client.org