Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Op8MFpGM3uyqUGKmCZ3Q2Kk3TfE.roa
File:                     Op8MFpGM3uyqUGKmCZ3Q2Kk3TfE.roa (raw, json)
Hash identifier:          N5zKhcPwBsEYSP7m64xZKc0A2zhwIqT+s1cw9rqBgOY=
Subject key identifier:   3A:9F:0C:16:91:8C:DE:EC:AA:50:62:A6:09:9D:D0:D8:A9:37:4D:F1
Certificate issuer:       /CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Certificate serial:       36ED6E
Authority key identifier: FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Op8MFpGM3uyqUGKmCZ3Q2Kk3TfE.roa
Signing time:             Thu 17 Feb 2022 16:36:38 +0000
ROA not before:           Thu 17 Feb 2022 16:36:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        62.68.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3599726 (0x36ed6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb43195dcec60f59c2f89c8af902025d173bba6a
        Validity
            Not Before: Feb 17 16:36:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a9f0c16918cdeecaa5062a6099dd0d8a9374df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:fb:e8:2a:fb:ce:c9:0d:72:33:1a:7f:2b:
                    92:b1:c0:b2:f1:df:41:42:71:0c:03:f7:77:75:5f:
                    fd:29:74:07:de:6d:51:96:b4:12:5c:57:41:d8:ad:
                    67:9c:21:35:dc:1e:25:cf:15:08:b2:41:d1:a1:7a:
                    b0:80:88:53:f7:7d:3c:42:fd:6a:0d:8f:17:37:a0:
                    2c:5a:d7:6b:5e:6b:9c:c4:c3:55:da:59:0a:27:6f:
                    b3:1f:d3:b8:0d:80:db:1e:be:82:c9:ed:b6:fe:8f:
                    53:03:51:58:5c:81:d3:31:e0:17:bd:78:15:92:eb:
                    db:e4:bf:3d:46:de:bd:70:23:ff:77:21:88:73:95:
                    d1:5e:06:88:bf:9e:51:b7:3a:e5:a9:5e:3a:d2:48:
                    d7:a5:e6:35:a5:62:da:a5:ca:69:c8:5c:30:f0:c7:
                    5f:45:c7:67:e0:d5:ec:87:5d:33:3d:e4:f8:10:d6:
                    c4:f9:11:7b:9b:2d:0b:a0:ad:6f:e6:8f:25:39:c3:
                    56:5b:7f:e4:00:70:6c:d9:6e:ec:c3:79:99:42:83:
                    f7:36:f5:5f:5b:21:8e:4b:1e:b1:fb:fa:38:c9:06:
                    fb:3f:85:d2:15:4a:b5:3c:d7:23:60:83:00:bd:cc:
                    d1:70:12:3f:8f:f7:56:05:82:79:73:ef:eb:3e:ba:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9F:0C:16:91:8C:DE:EC:AA:50:62:A6:09:9D:D0:D8:A9:37:4D:F1
            X509v3 Authority Key Identifier:
                keyid:FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/Op8MFpGM3uyqUGKmCZ3Q2Kk3TfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:df:19:73:b1:2f:c9:30:3d:95:a1:ad:d2:6f:29:21:f2:bb:
         89:a1:48:67:96:c2:43:f7:f9:ca:48:8c:dc:87:70:c1:a5:24:
         df:9d:c6:c3:50:68:b5:5d:7f:35:cf:ca:eb:d5:ff:b9:1d:65:
         7a:4a:35:33:2e:43:89:4f:c7:a1:24:d0:f8:e2:1f:2d:a0:14:
         51:be:de:e9:39:59:d3:2d:ea:98:c1:25:db:0f:af:8c:5b:8d:
         32:7d:83:a0:68:2a:e2:17:d4:3f:de:3f:78:8a:6c:fa:f6:50:
         a1:22:ee:dc:31:d2:3b:bd:d0:e9:ea:b6:45:c0:ad:bc:bf:ee:
         56:c4:5c:32:ed:45:c7:f9:8b:4b:dc:3f:d0:97:72:e6:fb:8b:
         06:1b:76:3d:1c:0e:b7:ac:18:1f:60:c7:b7:03:98:81:98:b4:
         ec:f4:be:47:b5:eb:ee:53:6b:2f:1e:8e:c2:b7:7e:e6:b0:0a:
         78:69:40:37:57:3e:d1:90:7c:cc:b5:a8:4d:f3:0d:ef:e1:4a:
         10:9d:2a:12:88:ee:29:72:84:46:3d:9e:45:b1:97:87:ca:b2:
         7f:f3:f7:15:f9:6d:14:10:85:27:c4:f4:4f:ea:df:1a:56:5d:
         fa:ba:04:dd:09:38:08:dc:5a:0a:a1:b1:8e:ab:ba:4b:45:63:
         8e:f0:4d:77
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIDNu1uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
NDMxOTVkY2VjNjBmNTljMmY4OWM4YWY5MDIwMjVkMTczYmJhNmEwHhcNMjIwMjE3
MTYzNjM4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzYTlmMGMxNjkxOGNk
ZWVjYWE1MDYyYTYwOTlkZDBkOGE5Mzc0ZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1yn76Cr7zskNcjMafyuSscCy8d9BQnEMA/d3dV/9KXQH3m1R
lrQSXFdB2K1nnCE13B4lzxUIskHRoXqwgIhT9308Qv1qDY8XN6AsWtdrXmucxMNV
2lkKJ2+zH9O4DYDbHr6Cye22/o9TA1FYXIHTMeAXvXgVkuvb5L89Rt69cCP/dyGI
c5XRXgaIv55RtzrlqV460kjXpeY1pWLapcppyFww8MdfRcdn4NXsh10zPeT4ENbE
+RF7my0LoK1v5o8lOcNWW3/kAHBs2W7sw3mZQoP3NvVfWyGOSx6x+/o4yQb7P4XS
FUq1PNcjYIMAvczRcBI/j/dWBYJ5c+/rPrqhIQIDAQABo4ICCzCCAgcwHQYDVR0O
BBYEFDqfDBaRjN7sqlBipgmd0NipN03xMB8GA1UdIwQYMBaAFPtDGV3Oxg9Zwvic
ivkCAl0XO7pqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEFBQcBAQRZMFcwVQYIKwYB
BQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MS0wTVpYYzdHRDFuQy1KeUstUUlDWFJjN3Vtby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZGZkNmJmLWMzYTYtNDhjYi1hMmEwLTViYzA5ZGMxYjA4MC8x
L09wOE1GcEdNM3V5cVVHS21DWjNRMktrM1RmRS5yb2EwgYIGA1UdHwR7MHkwd6B1
oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZGZkNmJmLWMzYTYtNDhjYi1hMmEwLTViYzA5ZGMxYjA4MC8xLzEtME1aWGM3R0Qx
bkMtSnlLLVFJQ1hSYzd1bW8uY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+RFAwDQYJKoZIhvcNAQELBQAD
ggEBAFPfGXOxL8kwPZWhrdJvKSHyu4mhSGeWwkP3+cpIjNyHcMGlJN+dxsNQaLVd
fzXPyuvV/7kdZXpKNTMuQ4lPx6Ek0PjiHy2gFFG+3uk5WdMt6pjBJdsPr4xbjTJ9
g6BoKuIX1D/eP3iKbPr2UKEi7twx0ju90OnqtkXArby/7lbEXDLtRcf5i0vcP9CX
cub7iwYbdj0cDresGB9gx7cDmIGYtOz0vke16+5Tay8ejsK3fuawCnhpQDdXPtGQ
fMy1qE3zDe/hShCdKhKI7ilyhEY9nkWxl4fKsn/z9xX5bRQQhSfE9E/q3xpWXfq6
BN0JOAjcWgqhsY6ruktFY47wTXc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org