Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/Li6u_yOgWC1TzGGgItl3jxnT3TI.roa
File:                     Li6u_yOgWC1TzGGgItl3jxnT3TI.roa (raw, json)
Hash identifier:          7WO1jj2UHzjnlrrCVYss+Cfa70NyLRgiUWNE9fFnzaw=
Subject key identifier:   2E:2E:AE:FF:23:A0:58:2D:53:CC:61:A0:22:D9:77:8F:19:D3:DD:32
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       018735C3FA7384859A2591B9944482133836
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/Li6u_yOgWC1TzGGgItl3jxnT3TI.roa
Signing time:             Fri 31 Mar 2023 03:44:08 +0000
ROA not before:           Fri 31 Mar 2023 03:44:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7029
IP address blocks:        185.202.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:35:c3:fa:73:84:85:9a:25:91:b9:94:44:82:13:38:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Mar 31 03:44:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e2eaeff23a0582d53cc61a022d9778f19d3dd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fc:b4:89:e0:e4:e5:67:07:cb:83:5c:bb:36:
                    34:12:9a:1b:37:56:c1:6f:4d:d5:bc:ec:4c:b8:1c:
                    65:4d:2a:20:c1:63:e4:5e:81:60:dd:98:5d:7c:20:
                    11:61:db:39:26:d1:80:8a:48:33:7c:de:26:c5:a0:
                    ed:29:57:88:eb:25:b4:c8:9b:f2:77:d8:0e:38:42:
                    11:48:95:00:13:9a:51:03:eb:4f:f7:a6:09:9c:82:
                    6a:bb:d8:e4:b3:01:9f:c6:27:0b:f9:e7:59:40:cc:
                    4d:8d:d8:98:2d:d9:71:1b:34:de:80:f4:81:1f:cc:
                    38:09:30:32:da:9d:47:7b:11:c4:4d:08:f9:20:05:
                    b6:9d:2b:cb:b4:52:40:1a:cb:05:84:aa:f4:08:ab:
                    ef:7d:af:3f:d8:6b:19:d9:ab:c1:2c:0a:46:a8:94:
                    8f:4a:65:2e:26:aa:ae:e8:d8:88:02:c1:03:f4:92:
                    97:75:1f:7b:d2:3f:2b:57:85:91:32:66:e7:ac:a8:
                    c0:96:ca:a9:f8:9e:86:4b:eb:f1:88:c1:2e:02:90:
                    66:41:c1:3f:93:2c:02:78:94:a3:1c:0d:91:7b:d0:
                    ef:18:ed:17:68:d7:e1:56:bf:16:4a:8a:fd:e5:34:
                    a4:1e:91:c2:f4:d1:89:a4:6f:7c:77:83:3e:90:1b:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:AE:FF:23:A0:58:2D:53:CC:61:A0:22:D9:77:8F:19:D3:DD:32
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/Li6u_yOgWC1TzGGgItl3jxnT3TI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:0e:e6:aa:23:87:cb:30:bd:01:d5:97:70:a4:cb:3a:ac:b8:
         15:7c:b7:cd:8e:e9:7f:fd:e0:0d:26:03:4e:1b:b2:98:50:e0:
         1f:9e:bb:06:ee:86:dd:3b:21:b7:28:8d:f3:f7:63:1c:6a:cf:
         23:45:6e:e3:92:97:84:fd:70:dc:4b:d2:26:86:e4:c3:e4:e8:
         e4:60:7b:97:7a:d8:70:37:e4:20:53:4c:ab:d9:be:2e:f3:3c:
         ab:9c:3b:2d:2e:45:b8:bf:2c:a2:d0:7d:21:60:50:df:ef:ba:
         e4:36:e0:9d:c9:9b:5d:38:8e:f3:a0:8f:e6:41:80:c8:f1:c1:
         d1:d9:d5:eb:f4:86:24:2c:16:4c:3f:60:6e:e9:cd:82:74:c3:
         b6:bf:df:fb:bd:01:57:3d:b1:46:62:6c:39:d0:dc:e3:9a:8e:
         2a:a0:8c:70:e4:f1:22:b5:05:7e:a6:75:04:7e:c0:5f:4d:2b:
         ff:1b:9a:16:a5:ab:13:1b:0a:70:d9:d6:3e:86:d4:e6:07:ce:
         53:40:60:3d:13:b7:b3:38:42:da:cb:01:3a:4b:49:cd:a2:d5:
         8c:0b:5c:f5:02:25:b3:26:4d:7f:76:cd:17:2f:8e:ba:cf:0c:
         5d:b0:00:5c:d3:b2:49:8b:d7:e0:79:7a:3f:a8:7c:0a:b9:a1:
         28:b1:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org