Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/C4p3Nl0YJmcycI8x9Ex-6KcqHUw.roa
File:                     C4p3Nl0YJmcycI8x9Ex-6KcqHUw.roa (raw, json)
Hash identifier:          bK9iongsgFh+ycpfv5SoAUo0DIdaHgBjXQJRitLIQSI=
Subject key identifier:   0B:8A:77:36:5D:18:26:67:32:70:8F:31:F4:4C:7E:E8:A7:2A:1D:4C
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       0560659B
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/C4p3Nl0YJmcycI8x9Ex-6KcqHUw.roa
Signing time:             Mon 13 Jun 2022 01:33:02 +0000
ROA not before:           Mon 13 Jun 2022 01:33:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     136038
IP address blocks:        185.202.103.0/24 maxlen: 24
                          185.202.102.0/24 maxlen: 24
                          185.202.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90203547 (0x560659b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Jun 13 01:33:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b8a77365d18266732708f31f44c7ee8a72a1d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:a6:56:80:d6:ae:3e:60:58:e3:d9:fa:bf:
                    93:25:1d:bc:29:8a:1b:79:0a:f7:44:b6:f8:cf:83:
                    28:ad:b9:f3:a0:e8:b8:fa:eb:27:4a:3e:ad:f5:b8:
                    63:fc:0a:13:ba:e1:b0:96:64:24:04:5a:c3:bf:72:
                    61:9c:5e:30:95:a6:53:81:ce:a9:ec:28:22:19:b5:
                    53:8a:21:64:ad:2c:d0:0a:b1:fb:29:a0:ac:20:17:
                    2d:ab:23:63:e9:85:7f:1c:ad:3b:5a:f6:03:ca:1d:
                    1d:78:1b:c9:74:3e:e3:e2:26:f3:87:ef:f2:08:c9:
                    6f:d9:1a:aa:c8:49:24:e1:23:8b:5f:39:5c:66:e3:
                    97:fa:1a:f6:6a:de:90:89:b7:5c:fc:2f:4f:87:f8:
                    4e:0e:49:dd:ee:95:0c:da:6a:a0:70:20:0f:38:5c:
                    d3:cf:60:90:84:c8:5f:f2:8e:41:9f:a4:58:fc:a3:
                    6f:42:b9:42:36:9f:a5:68:d9:59:83:5e:19:fb:2d:
                    a5:ff:8f:21:dd:1f:32:ac:26:4e:6b:c2:f5:a2:d0:
                    7e:05:d6:17:ce:1a:8b:9b:79:fc:b8:49:04:0a:0d:
                    ea:14:0a:6a:7c:a8:a5:54:d4:26:2b:a8:19:ad:c6:
                    83:25:8f:34:d2:20:5e:97:99:c3:94:b1:2a:e9:dc:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:77:36:5D:18:26:67:32:70:8F:31:F4:4C:7E:E8:A7:2A:1D:4C
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/C4p3Nl0YJmcycI8x9Ex-6KcqHUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.101.0-185.202.103.255

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:16:72:35:3f:0c:bb:f4:63:1a:1e:04:f9:4c:f2:e8:b0:
         b4:b1:96:ea:89:7b:29:47:12:9f:3b:ec:cc:31:54:23:25:e9:
         a3:d7:f5:85:3c:5f:bf:59:06:52:20:1f:89:1e:9a:59:db:27:
         e9:95:2a:c3:ed:e6:51:ac:e3:04:d6:64:e8:7c:3d:b7:56:74:
         88:0c:ec:50:4a:1c:d4:8a:b2:c4:de:08:b2:e3:3d:d5:bf:78:
         53:cb:37:31:c2:2e:77:11:31:c5:94:2d:49:69:13:4c:ae:47:
         f8:37:01:83:f6:5f:55:f9:9c:ba:53:29:e9:ef:49:21:9f:2b:
         13:ae:55:97:72:e0:e1:fa:0d:0f:5d:1a:98:6a:0f:9b:df:3f:
         94:71:b0:8e:8c:15:05:db:ed:0d:53:6b:3e:45:cd:30:c5:48:
         ed:fa:b0:de:ed:39:c2:bb:d1:37:c0:f9:8b:0e:5b:a9:e1:c0:
         08:1e:fb:30:39:f6:61:da:67:b0:b9:be:26:d3:68:14:88:83:
         6a:9b:de:da:5f:ad:b5:ea:c2:53:f6:18:5b:c1:25:a7:f2:87:
         a0:c6:36:0c:41:23:b4:fe:be:fc:7c:70:63:3b:3e:78:93:35:
         0f:27:9d:a0:d7:b2:8c:3e:bb:ed:0b:1a:a1:38:c9:be:72:3e:
         41:d7:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org