Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/QV1GYmhpNUqJlO8HyNFE_dw-SA8.roa
File:                     QV1GYmhpNUqJlO8HyNFE_dw-SA8.roa (raw, json)
Hash identifier:          VSuYuEeTY0Dvd5PCI1tPifKuGoeizKcOoAvUlcYcziU=
Subject key identifier:   41:5D:46:62:68:69:35:4A:89:94:EF:07:C8:D1:44:FD:DC:3E:48:0F
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       336522
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/QV1GYmhpNUqJlO8HyNFE_dw-SA8.roa
Signing time:             Tue 22 Mar 2022 11:58:46 +0000
ROA not before:           Tue 22 Mar 2022 11:58:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8764
IP address blocks:        62.122.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3368226 (0x336522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Mar 22 11:58:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=415d46626869354a8994ef07c8d144fddc3e480f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:c0:21:e3:14:58:b0:f9:2c:14:57:99:5a:
                    d1:08:76:d6:34:74:67:8f:f9:e3:43:cc:c2:30:a2:
                    05:b6:48:01:e2:14:78:1e:20:5b:e2:2c:dd:1a:ca:
                    83:cf:f8:f8:82:5c:67:5b:f5:12:0c:d9:16:4f:fe:
                    6b:36:12:67:66:b4:f9:59:57:a4:3b:86:9c:f8:11:
                    b4:e3:d8:60:1a:6a:5f:13:c6:23:c6:74:32:7e:2d:
                    a5:29:cd:38:a4:ed:0b:25:a8:9e:92:be:03:f5:f9:
                    35:74:e9:a9:36:4f:39:b6:33:d4:52:f9:8a:3b:47:
                    eb:cc:1d:01:e0:ec:fb:f5:04:1d:ee:7e:f8:28:ed:
                    af:fe:a0:cf:7f:8f:c1:65:0f:f0:25:0f:2b:12:d5:
                    5b:30:bd:9a:62:db:da:bb:56:17:1a:37:ce:32:70:
                    e7:f1:a4:b5:e6:3b:e9:8f:f3:e1:fc:0a:50:7b:bf:
                    ae:23:d3:a8:f3:4c:99:8e:5d:4f:3c:97:3a:4e:0f:
                    6a:14:b7:97:99:cc:e5:8d:3a:d3:74:17:e7:1a:7f:
                    73:c3:d3:ce:17:db:fc:2d:a6:5f:13:98:0d:df:29:
                    32:19:0b:7e:3d:3e:80:5c:fa:5b:9b:65:63:36:47:
                    69:06:08:49:fe:a5:c3:05:cf:37:90:a4:6a:65:9f:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5D:46:62:68:69:35:4A:89:94:EF:07:C8:D1:44:FD:DC:3E:48:0F
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/QV1GYmhpNUqJlO8HyNFE_dw-SA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:07:af:e0:4e:d2:67:38:bd:7f:8b:d1:33:f4:b7:8b:d6:
         0d:ea:91:73:80:23:f3:32:9b:2e:d0:55:40:2c:39:0b:3e:94:
         a7:d7:98:86:bc:29:38:c9:b7:98:b3:45:9a:77:5a:c7:13:3e:
         5e:19:2d:b7:d1:5c:d3:22:f8:56:aa:8a:e5:de:c4:55:32:70:
         8c:90:51:68:34:86:b8:f2:af:2b:68:c9:87:e8:73:d1:22:1f:
         5f:b2:7d:b1:43:93:14:b0:b4:7f:a4:29:09:a4:56:24:97:5f:
         41:76:5b:42:dc:d0:1c:b2:15:4c:c2:f4:08:9d:ab:8f:7d:cc:
         d5:2b:b5:2d:2f:e6:8c:2c:b5:3d:2e:ab:22:70:93:00:a8:45:
         4f:60:18:c4:fe:36:1a:d5:96:27:3d:cd:4a:f5:f5:bf:74:d2:
         ef:35:a2:11:1c:cb:4d:aa:dc:ad:6a:18:d1:17:b5:20:49:91:
         ad:9d:25:92:66:c8:68:7e:af:99:8a:e3:da:91:3a:85:af:75:
         f8:23:f5:c1:25:af:bc:c0:94:4e:b3:7c:a4:1e:10:f2:83:6b:
         dd:24:a6:5a:69:5a:2a:39:22:36:0e:87:e0:4a:c9:b5:a5:e8:
         4d:bc:7f:6c:45:0c:ee:a7:e4:3f:26:e6:02:55:71:42:fc:4e:
         e4:4c:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:08 2024 by rpki-client on console-fra.rpki-client.org