Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/pQ5_ypUXAm72C69laL3Bu1Tdi4E.roa
File:                     pQ5_ypUXAm72C69laL3Bu1Tdi4E.roa (raw, json)
Hash identifier:          Q61Lmvghf+yjhKLUIwRPTwwV8HblwEN6R+/X29DLiYI=
Subject key identifier:   A5:0E:7F:CA:95:17:02:6E:F6:0B:AF:65:68:BD:C1:BB:54:DD:8B:81
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       0560E7A6
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/pQ5_ypUXAm72C69laL3Bu1Tdi4E.roa
Signing time:             Mon 13 Jun 2022 01:33:03 +0000
ROA not before:           Mon 13 Jun 2022 01:33:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     137427
IP address blocks:        185.202.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90236838 (0x560e7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Jun 13 01:33:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a50e7fca9517026ef60baf6568bdc1bb54dd8b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:3f:66:8c:11:07:a9:d6:48:c3:e4:ad:d8:
                    55:da:3f:38:c5:16:15:21:12:c1:44:4f:cf:74:ac:
                    c9:b3:5f:cc:8d:c7:e0:3a:a9:7a:2c:7d:6f:b6:68:
                    05:0b:ad:f3:b3:93:d7:4c:d7:ef:dc:0b:98:e2:85:
                    76:a6:58:e2:ce:9a:f9:36:43:3f:09:dd:b0:10:d6:
                    f0:f2:d9:92:55:27:d9:47:d5:94:1d:ad:c4:b3:a9:
                    d5:f5:36:36:bc:35:82:1d:ad:90:34:49:d0:60:fe:
                    01:f3:e8:24:8f:58:49:1a:25:4e:60:a2:67:54:91:
                    41:24:d6:18:d2:53:99:7f:d6:1b:6e:5c:8f:d7:bd:
                    25:b8:a2:e6:36:ad:a5:8b:ff:02:00:bd:1a:24:b6:
                    a9:07:74:6b:7b:37:54:ef:1d:15:9b:ff:39:9c:95:
                    76:c5:08:b7:19:d5:fd:2f:29:7e:22:03:d5:f2:32:
                    82:1d:c8:e6:7b:9b:87:a9:fe:8c:ce:7f:69:fb:51:
                    8a:5c:6b:dd:1c:85:b7:73:5b:4b:f1:d5:ed:a6:85:
                    85:10:89:98:d9:44:bf:dd:08:ea:5d:dd:c2:f5:f4:
                    cc:8b:fe:ce:90:27:0e:17:b8:e4:4d:a2:2f:16:bc:
                    f2:ad:f2:de:eb:ab:d4:83:ba:e0:e7:39:0b:de:44:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0E:7F:CA:95:17:02:6E:F6:0B:AF:65:68:BD:C1:BB:54:DD:8B:81
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/pQ5_ypUXAm72C69laL3Bu1Tdi4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:f4:9a:a8:f5:06:87:1a:7d:fc:33:96:17:12:e4:ae:f9:
         9a:9d:ce:7e:53:9e:21:e0:61:75:52:8b:6b:e9:ed:e0:51:f8:
         37:93:5c:fc:2a:8e:ec:05:4c:95:93:82:cb:a8:9f:02:4b:44:
         b2:46:22:29:33:71:f3:d6:33:f9:e7:65:5d:46:94:ec:7a:43:
         5c:0f:9d:72:3e:8f:7f:1c:06:61:9b:c8:ac:71:04:3b:f8:c3:
         d6:ed:33:64:6a:0e:cf:8a:c6:b5:9b:56:c3:95:67:16:1b:73:
         71:c8:80:1e:91:51:37:81:fe:9a:59:81:c3:2f:8e:c8:a9:d9:
         87:70:1d:03:1d:89:36:0e:92:f2:4f:25:2c:44:cf:aa:24:dc:
         9b:56:ca:fb:ff:34:b2:39:4e:23:c2:b3:a8:fb:69:5d:16:e1:
         40:41:6d:b2:6b:80:79:01:44:f9:9d:e1:29:ed:4e:8f:3e:84:
         11:6d:e3:6b:fd:ee:07:b2:bc:2c:e0:78:b4:7b:a5:ce:7d:51:
         e8:ee:03:69:f9:2f:f2:8b:a4:6a:51:94:42:02:82:3f:86:70:
         49:ab:af:5c:1f:36:81:26:95:e7:8d:42:45:11:79:ea:e8:46:
         3c:d6:0a:b7:44:2d:19:35:ed:b8:c3:24:bf:8e:10:57:b5:da:
         61:b1:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org