Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/6lNMGxfeW8xxJnjNwJLMV4dEEKw.roa
File:                     6lNMGxfeW8xxJnjNwJLMV4dEEKw.roa (raw, json)
Hash identifier:          fFpmjxzdAbkKHPUjkamzxSP93ipoyJEVQfO/gxSssh8=
Subject key identifier:   EA:53:4C:1B:17:DE:5B:CC:71:26:78:CD:C0:92:CC:57:87:44:10:AC
Certificate issuer:       /CN=87c232d3f005ca745d818cd6439e8087905010e4
Certificate serial:       01882086736C3A6902C1AB81BBF0B5815161
Authority key identifier: 87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/6lNMGxfeW8xxJnjNwJLMV4dEEKw.roa
Signing time:             Mon 15 May 2023 17:47:42 +0000
ROA not before:           Mon 15 May 2023 17:47:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        62.3.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:73:6c:3a:69:02:c1:ab:81:bb:f0:b5:81:51:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c232d3f005ca745d818cd6439e8087905010e4
        Validity
            Not Before: May 15 17:47:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea534c1b17de5bcc712678cdc092cc57874410ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:20:ee:c4:c9:4c:34:ef:f3:fb:58:9a:dd:
                    8e:59:2c:bb:21:66:e2:05:b3:01:64:95:fd:71:5b:
                    fb:f0:a0:a5:97:e3:c4:e5:8e:be:c3:5a:c3:ad:06:
                    c5:15:f5:12:9e:83:c9:f0:91:56:56:1f:b0:c5:19:
                    0a:96:0f:b0:21:30:50:2f:98:63:82:9f:8d:af:d9:
                    66:25:fb:50:cf:18:41:b4:3d:84:21:a2:1f:6d:67:
                    d4:56:43:64:93:5b:4c:97:a9:8d:e5:73:31:51:4f:
                    6d:92:ed:ac:fb:43:a4:cc:c8:b5:2c:9e:13:74:98:
                    80:15:cf:c0:39:5e:b2:15:f9:67:0d:67:b2:97:c7:
                    11:a8:eb:6b:63:ec:73:62:d7:49:b2:e4:fd:b9:6a:
                    10:ab:19:29:7d:be:4a:04:c2:f8:b5:6d:0c:d2:d7:
                    3f:1a:a3:13:89:e4:1c:27:34:02:a5:b6:ae:16:c9:
                    24:2b:6e:f7:34:0e:e4:08:40:ba:ff:85:21:b5:3e:
                    5a:71:67:b7:55:10:15:8b:48:a4:3d:d8:16:e8:ee:
                    84:5a:01:80:2f:83:c2:7f:a1:11:c0:f6:3a:a0:33:
                    0d:e2:68:1c:f3:cb:32:9d:4c:b0:f8:ea:60:9e:06:
                    8d:71:6d:32:73:cb:03:c1:f4:63:85:87:c7:64:6d:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:53:4C:1B:17:DE:5B:CC:71:26:78:CD:C0:92:CC:57:87:44:10:AC
            X509v3 Authority Key Identifier:
                keyid:87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/6lNMGxfeW8xxJnjNwJLMV4dEEKw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:38:84:2a:f7:4c:52:77:f5:61:03:80:e2:18:4a:f4:bb:ab:
         a5:c9:43:fe:87:6c:cc:f4:88:11:eb:9b:66:5b:da:99:ed:90:
         c1:80:e3:ce:90:ba:06:1b:a6:1c:1b:b8:82:07:50:31:86:b1:
         9f:3f:40:6e:96:86:ad:f3:73:0e:75:46:3c:c8:d1:7e:23:04:
         ea:b5:09:61:49:7c:7b:c3:c5:fa:d2:79:64:18:72:4e:8f:c1:
         f6:f3:a3:5f:c1:27:18:f2:be:e4:29:d4:4d:aa:05:8a:30:f5:
         1d:c0:58:8a:cf:74:c9:c5:a5:90:55:2b:d1:04:a4:89:12:60:
         e7:8e:d1:96:fe:70:eb:06:ab:98:fa:36:1f:87:c8:68:37:5a:
         6e:b7:ab:85:54:d3:1f:d7:cf:03:82:25:b4:cf:54:7c:41:3c:
         bd:16:d7:0a:fd:08:dc:72:0e:18:dd:f7:f9:4f:3c:46:46:d7:
         8c:8a:3d:d2:32:e2:93:8e:b2:2e:ed:a9:03:e4:71:be:8e:a7:
         81:1e:02:a4:35:9b:89:ad:6b:6b:59:0d:2b:e7:86:c8:3b:30:
         9f:a8:a8:18:65:f5:e2:1d:21:29:ff:34:29:78:eb:7b:4d:50:
         2c:ad:b6:c5:bd:d2:51:35:31:df:34:1f:e0:ed:eb:ff:60:3a:
         d5:01:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:11 2024 by rpki-client on console-fra.rpki-client.org