Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/H_oalNwFjwFY8mfkE54PFGEFgEs.roa
File:                     H_oalNwFjwFY8mfkE54PFGEFgEs.roa (raw, json)
Hash identifier:          fYmHLR5qZjrwV1fRR7vKE8HoY9iqwSU+mIju+DNaIBc=
Subject key identifier:   1F:FA:1A:94:DC:05:8F:01:58:F2:67:E4:13:9E:0F:14:61:05:80:4B
Certificate issuer:       /CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Certificate serial:       0182207E96893C86223A4A3FC32F86356CE8
Authority key identifier: 51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/H_oalNwFjwFY8mfkE54PFGEFgEs.roa
Signing time:             Thu 21 Jul 2022 11:22:23 +0000
ROA not before:           Thu 21 Jul 2022 11:22:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208485
IP address blocks:        62.3.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:7e:96:89:3c:86:22:3a:4a:3f:c3:2f:86:35:6c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
        Validity
            Not Before: Jul 21 11:22:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ffa1a94dc058f0158f267e4139e0f146105804b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:86:4f:4b:e9:4c:4d:06:0d:41:ac:68:04:
                    4d:f2:4e:b5:fa:ff:28:50:60:c9:d3:c0:60:82:9f:
                    d9:8a:54:dc:47:76:11:7e:de:6c:ab:40:db:42:12:
                    cc:61:0e:4b:89:36:85:e1:b4:ff:3a:2d:88:d5:0e:
                    d3:eb:ec:28:41:a8:eb:d0:76:15:76:f7:e7:64:30:
                    d0:fa:3f:5f:d8:50:13:dc:c6:2d:3f:79:3f:3b:31:
                    10:94:ef:64:f0:23:48:04:01:4d:aa:a3:18:d2:87:
                    bc:7c:5c:c1:3b:08:65:08:da:c0:27:7e:63:86:ec:
                    ad:a1:b9:9f:4f:78:9b:b0:a5:e5:8f:6a:a7:ac:d3:
                    87:6e:d9:78:c1:a9:65:91:c6:3b:02:50:88:08:d6:
                    56:10:fa:e7:11:7b:4e:0b:ea:53:9b:f7:4d:d3:51:
                    7e:7d:dc:de:fe:3d:bb:44:ac:37:bc:c1:79:8b:2c:
                    f7:b6:9a:1d:43:af:12:54:e9:b2:e2:69:d5:05:5e:
                    49:7b:ed:43:af:42:78:39:c3:1d:c9:1d:41:89:21:
                    1c:83:21:ef:0a:e2:03:6b:34:b7:71:d5:d1:f2:20:
                    50:3e:0e:8f:c2:c4:cb:a7:63:64:f0:5b:5c:6d:bd:
                    36:e8:2b:15:0d:98:3d:53:39:8f:b8:04:f9:01:2c:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FA:1A:94:DC:05:8F:01:58:F2:67:E4:13:9E:0F:14:61:05:80:4B
            X509v3 Authority Key Identifier:
                keyid:51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/H_oalNwFjwFY8mfkE54PFGEFgEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:bc:97:5d:dd:bc:51:08:d7:70:ea:8f:d7:09:ca:76:8c:c3:
         66:b7:b9:c6:b0:88:2b:00:7b:7a:6a:c7:40:c0:74:34:de:1b:
         6a:c6:cf:fa:d6:33:cd:89:fa:db:2f:18:76:d1:7b:ea:31:ee:
         e8:39:18:d0:a6:a6:22:55:98:54:3d:97:f3:be:b9:05:26:7a:
         ca:e3:e4:96:02:0f:70:f4:40:bd:d4:69:59:27:13:d7:d0:2e:
         b4:2b:40:58:f4:19:5a:9c:b1:3f:f4:1c:d4:7f:b5:63:ae:ba:
         02:56:ef:fd:13:50:77:ac:ca:7d:26:29:d6:00:e5:57:28:04:
         10:d4:95:f5:93:f1:d8:b8:fd:fb:43:5e:f1:67:60:b9:49:d2:
         b4:b1:9c:7c:ca:50:3b:5c:b6:e5:25:3a:af:74:f8:c6:eb:11:
         3b:a6:b7:cd:ab:c8:1c:3a:92:ed:57:df:f8:f1:a1:9a:6f:51:
         7d:c6:8b:c8:00:f2:f6:cc:f7:af:3f:0a:75:e7:a4:40:69:44:
         31:c7:05:f2:4e:ad:5c:f9:0e:ed:fd:fc:8e:f4:a2:5b:13:b2:
         c2:e6:cf:85:9f:23:90:7a:58:ca:7d:04:43:02:cb:dd:33:0e:
         ef:b7:a3:81:b7:ae:43:0a:b6:e9:99:e0:85:c7:71:1d:cf:e6:
         02:d4:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:34 2024 by rpki-client on console-ams.rpki-client.org