Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/FMQo7Vg14LHz48iwy6bGRDFQU8c.roa
File:                     FMQo7Vg14LHz48iwy6bGRDFQU8c.roa (raw, json)
Hash identifier:          RLHm8vQTpvt7hinVUzdW7QbvrT+qbaSIBFbTDmkdwUA=
Subject key identifier:   14:C4:28:ED:58:35:E0:B1:F3:E3:C8:B0:CB:A6:C6:44:31:50:53:C7
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       018571D7C77CCB92EB0742BF973872E1D183
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/FMQo7Vg14LHz48iwy6bGRDFQU8c.roa
Signing time:             Mon 02 Jan 2023 09:37:24 +0000
ROA not before:           Mon 02 Jan 2023 09:37:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137427
IP address blocks:        185.202.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:c7:7c:cb:92:eb:07:42:bf:97:38:72:e1:d1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Jan  2 09:37:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14c428ed5835e0b1f3e3c8b0cba6c644315053c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:f2:5d:ad:a0:2d:5c:1f:98:6c:80:b8:42:
                    8d:24:3d:8d:04:aa:a9:10:a1:ba:0d:dc:84:47:91:
                    c3:8f:4e:2d:29:20:fe:22:c8:1a:96:cb:01:62:23:
                    80:2f:a3:82:cb:1e:21:d2:e0:77:a0:9b:99:ed:94:
                    99:ef:0f:1d:71:6e:cf:2e:83:06:06:92:68:b9:1f:
                    a3:81:aa:7a:d6:44:c8:1c:34:c7:57:6f:b8:ea:1e:
                    df:92:68:a2:33:d5:02:ed:df:23:76:d5:50:b6:26:
                    70:f9:8a:e8:70:79:28:5a:f4:9f:37:44:3c:e7:00:
                    30:bd:eb:ff:6a:39:0a:bb:ce:aa:18:f2:be:13:a2:
                    26:21:5c:9f:4d:34:32:c0:08:31:f5:6f:13:a9:63:
                    81:99:86:11:b5:51:82:36:22:f4:2b:f0:62:9d:70:
                    d8:bd:6b:e5:11:8e:d9:fe:c8:34:a0:5e:1e:cf:85:
                    27:dd:d2:07:6d:12:72:d6:79:26:56:9b:f5:fe:a8:
                    a4:35:01:5f:99:40:98:18:d0:66:6b:32:07:9c:06:
                    c1:ce:af:c5:f1:1a:d1:be:b3:14:79:28:17:11:d7:
                    f8:eb:ed:d9:8c:d0:81:81:da:88:35:c4:44:a5:be:
                    ee:08:77:7a:97:9b:7f:e4:c1:27:dd:c0:58:1d:f9:
                    c8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C4:28:ED:58:35:E0:B1:F3:E3:C8:B0:CB:A6:C6:44:31:50:53:C7
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/FMQo7Vg14LHz48iwy6bGRDFQU8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ff:5f:2b:a7:9a:9d:51:6c:17:70:7a:da:80:cb:b4:a1:44:
         1c:e8:1f:69:84:9d:ff:6c:32:33:24:47:83:e2:68:c1:9d:4e:
         9d:33:ef:c9:e8:ad:77:15:8b:93:6f:71:aa:46:ff:5b:75:07:
         85:78:bf:81:82:3a:29:3c:5e:21:89:a7:ca:1a:2d:f8:63:9c:
         88:54:ea:0d:8b:78:d3:17:59:c5:04:7d:53:d8:a0:4e:27:73:
         cd:be:39:4a:a4:50:83:3f:0a:0e:1a:00:59:cf:91:46:d0:7d:
         c5:77:4e:c0:49:32:80:a7:a5:00:a3:88:8b:b7:17:b3:84:06:
         e4:21:67:59:af:43:7a:6d:bd:b1:54:be:09:0d:64:3c:37:8e:
         03:37:8a:bf:30:00:c8:43:f8:b4:aa:73:4d:d7:bf:4e:29:8c:
         a2:3d:46:f5:3f:28:ab:0c:e6:b4:54:32:f3:84:91:ae:d5:a1:
         76:de:d9:34:e2:7a:b0:a5:83:8c:0a:cd:a5:1b:c9:b8:e8:1b:
         7c:b4:43:37:9d:14:33:06:02:59:26:9a:d5:a9:1f:e2:cb:f5:
         7d:1d:75:9c:69:d9:77:f8:e6:bc:5e:82:f0:05:d7:5e:5c:66:
         15:fe:01:35:30:cd:4c:56:fa:96:d6:af:ee:74:1c:b0:57:4f:
         7f:c5:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org