Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/F-a0dh_wQJ4h_IQ7Fgh-jOMr-vI.roa
File:                     F-a0dh_wQJ4h_IQ7Fgh-jOMr-vI.roa (raw, json)
Hash identifier:          sijcrW1JCdr+sDELPJ1R+Tus1oF+knry2WEk2KifSTU=
Subject key identifier:   17:E6:B4:76:1F:F0:40:9E:21:FC:84:3B:16:08:7E:8C:E3:2B:FA:F2
Certificate issuer:       /CN=e39176c5a602527533c2b541406ae83f209e620c
Certificate serial:       01876B9D95BE6AE9E0B883FF5DBF038AF093
Authority key identifier: E3:91:76:C5:A6:02:52:75:33:C2:B5:41:40:6A:E8:3F:20:9E:62:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45F2xaYCUnUzwrVBQGroPyCeYgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/F-a0dh_wQJ4h_IQ7Fgh-jOMr-vI.roa
Signing time:             Mon 10 Apr 2023 14:41:42 +0000
ROA not before:           Mon 10 Apr 2023 14:41:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206286
IP address blocks:        62.68.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6b:9d:95:be:6a:e9:e0:b8:83:ff:5d:bf:03:8a:f0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39176c5a602527533c2b541406ae83f209e620c
        Validity
            Not Before: Apr 10 14:41:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17e6b4761ff0409e21fc843b16087e8ce32bfaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:a7:b5:87:31:06:b9:03:53:7d:b5:11:52:
                    5e:ad:25:30:ee:6c:32:41:40:72:47:14:37:e3:07:
                    56:a5:9d:96:ff:a9:5a:9b:0f:95:19:fd:a0:bb:3a:
                    bf:92:0d:df:7d:cc:ee:21:1d:e0:e2:3b:23:fb:bb:
                    80:6b:cd:3d:db:38:f7:ad:84:ec:7e:69:62:06:c6:
                    d1:59:80:0c:69:d0:c6:1c:b0:4f:fb:f5:4a:c0:17:
                    d2:d7:08:27:db:06:5f:64:d7:00:19:12:5f:86:34:
                    d0:29:55:44:b9:49:1f:90:8f:c1:4d:39:18:3d:e1:
                    e6:f9:00:58:56:9d:ff:90:34:cf:0f:5b:18:31:57:
                    ff:a1:2d:27:c5:1b:7e:df:7a:d7:76:86:ec:42:67:
                    7c:5c:79:59:7b:4c:6c:82:89:7c:cc:80:01:65:80:
                    2d:2f:42:c3:7e:34:35:c2:a3:6e:83:63:4e:a0:99:
                    98:2c:df:ef:bc:bf:9c:05:cb:82:47:a3:91:c4:57:
                    8e:d7:27:bf:45:ea:0d:9a:da:ef:06:53:a7:83:30:
                    c6:ad:3c:ad:0c:bd:44:54:b6:a6:e8:70:b1:0a:87:
                    b6:3f:ff:4d:98:6d:68:5b:d9:c1:23:58:a8:f2:a4:
                    02:9a:1a:47:5f:5b:d5:6c:12:5c:5d:95:ab:20:11:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E6:B4:76:1F:F0:40:9E:21:FC:84:3B:16:08:7E:8C:E3:2B:FA:F2
            X509v3 Authority Key Identifier:
                keyid:E3:91:76:C5:A6:02:52:75:33:C2:B5:41:40:6A:E8:3F:20:9E:62:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45F2xaYCUnUzwrVBQGroPyCeYgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/F-a0dh_wQJ4h_IQ7Fgh-jOMr-vI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e55563-ccf7-4e79-a3e9-7adbd2136ac1/1/45F2xaYCUnUzwrVBQGroPyCeYgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:27:e3:b0:c4:65:29:1e:36:5c:03:17:5a:82:b9:8b:7a:49:
         5f:5a:9d:16:ca:2c:13:a5:26:e6:aa:f3:5c:b1:68:b5:b3:32:
         25:b1:de:27:6a:e0:86:04:45:30:e6:11:4f:bc:a5:89:8a:a4:
         e8:55:51:f4:d6:c1:ef:8d:0f:6e:34:ef:ca:54:56:05:34:76:
         d8:0a:a9:81:c2:4e:08:4d:bc:5c:7d:1e:02:29:a6:df:17:b4:
         c0:04:cd:ab:79:93:ab:7f:aa:d7:09:71:a9:99:99:5c:2c:6e:
         9c:e0:f0:3c:4e:24:f6:26:0d:8e:cc:96:5f:d6:45:e5:7b:d0:
         ba:d6:c8:32:0d:fa:a9:60:47:78:20:80:be:8f:ff:61:5f:90:
         5d:38:11:d8:21:83:12:73:cd:3e:3f:27:b2:42:cd:06:03:21:
         f2:3a:72:d0:d0:64:90:d9:70:f5:44:a6:68:52:f1:b3:f7:cc:
         1f:fb:28:12:39:3c:a3:12:9f:f7:ac:8b:93:4e:0d:52:65:f7:
         be:27:fc:b7:d4:69:12:54:4f:f4:1a:76:ba:7c:a5:df:27:fc:
         27:69:96:df:4e:b7:32:58:e5:06:20:5b:e4:a4:e6:43:51:fb:
         8d:11:f8:5b:3c:1e:2e:d2:f0:f9:98:e0:43:67:d0:97:d8:d5:
         7d:08:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org