Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/KrvORIkftlVrw9oeVEaHkHHnNEw.roa
File:                     KrvORIkftlVrw9oeVEaHkHHnNEw.roa (raw, json)
Hash identifier:          zg/l4Y/u9+7s2YFX39kg1nzvQydA/ifC6hSu8giTD2M=
Subject key identifier:   2A:BB:CE:44:89:1F:B6:55:6B:C3:DA:1E:54:46:87:90:71:E7:34:4C
Certificate issuer:       /CN=a55f47787b6d21a5d95960232fef2f4db2b98ec3
Certificate serial:       01884906872A5C8554B84F16180E93418612
Authority key identifier: A5:5F:47:78:7B:6D:21:A5:D9:59:60:23:2F:EF:2F:4D:B2:B9:8E:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pV9HeHttIaXZWWAjL-8vTbK5jsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/KrvORIkftlVrw9oeVEaHkHHnNEw.roa
Signing time:             Tue 23 May 2023 14:32:24 +0000
ROA not before:           Tue 23 May 2023 14:32:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14576
IP address blocks:        62.233.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:49:06:87:2a:5c:85:54:b8:4f:16:18:0e:93:41:86:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55f47787b6d21a5d95960232fef2f4db2b98ec3
        Validity
            Not Before: May 23 14:32:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2abbce44891fb6556bc3da1e5446879071e7344c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:32:86:75:1d:58:26:0f:b2:a9:77:c6:23:
                    0a:be:67:d9:45:3b:a6:36:5c:29:1b:5b:d5:da:a5:
                    ad:45:c7:fb:8b:12:c7:a5:26:3a:d5:ac:d4:20:86:
                    f7:28:24:29:7e:5f:40:b9:d8:88:64:c3:04:36:2a:
                    88:50:29:fb:7b:14:83:ba:d9:8a:db:a1:16:a9:1d:
                    c5:c8:6f:c6:fe:1d:12:a6:68:a8:c6:b8:10:03:40:
                    95:2b:45:d3:52:13:34:cf:fd:d6:57:74:cb:8f:bd:
                    82:b5:50:f6:58:5e:16:95:d0:72:9b:55:6f:42:4a:
                    86:20:40:b4:80:d7:c4:c2:e9:fe:5e:29:f9:07:b3:
                    53:00:28:a6:84:19:4e:b1:16:ec:89:87:f2:0f:20:
                    70:f3:bf:7a:45:59:23:1e:ef:f2:1e:bf:ea:a9:c9:
                    43:38:6a:62:98:04:df:0a:4d:c6:51:de:fb:8b:0d:
                    ab:99:36:2e:ab:86:a4:76:fe:73:5f:90:f1:e0:46:
                    f5:08:49:db:32:ba:f4:6f:20:65:bc:5c:8f:59:38:
                    a4:d8:13:df:7f:48:3f:db:a4:28:13:e6:eb:dc:50:
                    15:2f:7c:49:0e:27:a2:bf:60:01:85:91:3a:e4:02:
                    9e:16:33:ee:52:7d:83:03:65:8a:35:5f:e2:f4:01:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BB:CE:44:89:1F:B6:55:6B:C3:DA:1E:54:46:87:90:71:E7:34:4C
            X509v3 Authority Key Identifier:
                keyid:A5:5F:47:78:7B:6D:21:A5:D9:59:60:23:2F:EF:2F:4D:B2:B9:8E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pV9HeHttIaXZWWAjL-8vTbK5jsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/KrvORIkftlVrw9oeVEaHkHHnNEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/pV9HeHttIaXZWWAjL-8vTbK5jsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:ff:7b:55:29:43:4d:75:2b:ff:63:7d:c6:5a:da:73:77:
         05:77:dc:68:71:2f:33:df:ac:64:a5:b8:6f:a6:42:81:ba:14:
         8c:a7:58:48:ae:7f:23:29:8b:df:13:a2:a5:7e:b0:be:a5:e8:
         c0:59:bd:55:30:c4:56:fe:0b:b6:7d:fd:59:0c:5c:98:80:a4:
         14:aa:91:70:e3:ed:b3:1a:00:81:48:d6:15:2e:0d:52:bf:82:
         c9:5c:12:57:fc:4a:ca:27:9b:4f:fd:0c:79:cb:69:a5:3a:2e:
         5c:92:22:b3:28:55:26:85:85:ad:4a:d9:ff:35:de:47:82:5c:
         e4:58:9c:89:8c:4f:37:a0:9d:08:b1:de:89:d5:f0:86:fd:cc:
         d9:1b:f3:c3:15:41:fc:c4:f0:b6:b2:60:e8:c0:81:81:4f:be:
         80:6f:6c:76:bb:c0:03:a6:86:45:d7:51:a1:dc:9c:ad:a1:c3:
         cd:56:cd:6b:ce:a6:38:a3:e5:91:e6:d7:64:c1:4f:ce:be:37:
         eb:35:a5:17:5c:56:72:fd:0d:05:06:cd:1f:90:61:3e:71:8d:
         f3:50:4d:dd:6d:aa:08:3b:bc:1a:71:f2:9d:50:6d:d1:fc:de:
         0f:d1:c9:24:7b:5d:98:95:42:51:d6:ab:9c:f8:86:ca:9b:00:
         76:38:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:42 2024 by rpki-client on console-fra.rpki-client.org