Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/Ap1ZBj_E_YQfB_E88cdS-aVPrd8.roa
File:                     Ap1ZBj_E_YQfB_E88cdS-aVPrd8.roa (raw, json)
Hash identifier:          kZnjd1rVgvPfaOfUMXm+rnbGJSk+wRIEedMBcpmDUpE=
Subject key identifier:   02:9D:59:06:3F:C4:FD:84:1F:07:F1:3C:F1:C7:52:F9:A5:4F:AD:DF
Certificate issuer:       /CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
Certificate serial:       01435371
Authority key identifier: 31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/Ap1ZBj_E_YQfB_E88cdS-aVPrd8.roa
Signing time:             Tue 15 Mar 2022 18:35:05 +0000
ROA not before:           Tue 15 Mar 2022 18:35:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49305
IP address blocks:        62.204.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21189489 (0x1435371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c9ef9cbee81afba2c041434a5c3a85582c9cb7
        Validity
            Not Before: Mar 15 18:35:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=029d59063fc4fd841f07f13cf1c752f9a54faddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:a6:fc:a5:e2:38:4f:fb:21:65:f1:69:5c:
                    09:61:14:a1:2e:b6:84:8c:06:50:61:5b:f1:df:9d:
                    e2:ea:c3:72:9d:02:9b:a6:b3:d5:e0:d1:8c:bf:72:
                    cd:ed:d4:67:d9:10:c6:43:92:02:ea:76:44:31:d3:
                    9f:31:9b:4e:2f:a9:2d:93:6f:f5:15:a9:e7:74:62:
                    33:27:13:39:e0:ba:08:20:74:2a:be:c5:99:14:bf:
                    56:26:1c:77:1e:23:ef:cb:c8:6c:4b:35:1c:05:a8:
                    a1:97:3c:8b:4e:03:f5:13:de:90:1d:07:91:2a:ce:
                    2c:aa:74:31:2a:7a:3d:92:9e:b4:72:bf:7d:19:34:
                    f4:86:6c:77:e2:09:17:ec:79:b6:ba:30:53:91:2d:
                    00:00:74:13:8c:14:16:4e:d6:95:10:27:0d:c9:3f:
                    e4:c5:84:d1:b8:af:aa:fa:b4:82:f8:3a:41:26:27:
                    bc:1d:20:17:b1:91:0b:63:45:a8:9c:47:46:07:ae:
                    13:5a:60:bf:f4:af:9c:3c:6e:d7:b4:28:13:d3:a0:
                    23:a0:65:63:83:8e:11:df:cf:c2:e6:eb:53:4b:64:
                    b1:98:eb:8c:ab:da:ec:77:f8:57:51:bf:cf:6b:bc:
                    ab:2f:c8:79:21:3c:03:8a:9d:f2:eb:30:69:e2:24:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:59:06:3F:C4:FD:84:1F:07:F1:3C:F1:C7:52:F9:A5:4F:AD:DF
            X509v3 Authority Key Identifier:
                keyid:31:C9:EF:9C:BE:E8:1A:FB:A2:C0:41:43:4A:5C:3A:85:58:2C:9C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McnvnL7oGvuiwEFDSlw6hVgsnLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/Ap1ZBj_E_YQfB_E88cdS-aVPrd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a975e0-75e7-41f3-8d4d-6a614e5b6eb6/1/McnvnL7oGvuiwEFDSlw6hVgsnLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:83:f2:76:5b:7c:10:fc:2c:e2:3a:e7:e8:35:89:81:b1:be:
         6e:7f:c8:1a:6e:73:9a:56:c3:7b:92:e2:08:88:d5:eb:bb:b5:
         62:8a:e6:4b:ca:65:59:11:a0:0a:d9:9d:76:56:53:5a:fd:aa:
         2b:84:e3:28:f9:fb:1f:65:18:5e:c6:e5:66:6c:c4:ee:e1:e0:
         d4:3c:78:61:e8:9a:e7:4b:ec:4d:7e:96:2d:ae:b8:5c:fc:f2:
         df:30:17:b8:85:23:c3:1c:4f:4e:5f:4b:9b:97:6e:94:07:d9:
         fe:2c:ed:e8:2f:4a:fa:77:2d:43:d6:ea:d1:1e:62:1f:af:7a:
         9d:06:1a:af:e4:b9:84:40:bf:d2:8a:48:e1:6d:b4:56:ff:2e:
         f9:54:88:04:38:62:bd:72:2d:36:a7:7e:bc:6b:8e:6a:9d:6d:
         56:f0:3f:af:79:02:7a:44:2f:6b:9f:9c:70:74:27:29:da:f2:
         ad:99:bb:2c:7b:a1:70:a0:85:46:7d:2c:ae:88:f3:07:48:5d:
         2a:d1:52:93:f8:c7:36:df:c7:23:32:9a:d3:0d:9e:59:57:b7:
         eb:74:8e:80:e7:e8:d4:21:d4:bd:26:5b:44:74:f7:34:6d:3a:
         5e:6c:b0:ff:96:5e:bc:09:ef:bb:f1:ae:b6:d0:34:b3:e5:e8:
         e9:5a:0d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:10 2024 by rpki-client on console-ams.rpki-client.org