Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/urDxT8BkBkCVFvpeJ6zvcHm6hqc.roa
File:                     urDxT8BkBkCVFvpeJ6zvcHm6hqc.roa (raw, json)
Hash identifier:          7CK6RQfX49ou9htJE6QypNUq4vISaxgSoLweQbp8LKE=
Subject key identifier:   BA:B0:F1:4F:C0:64:06:40:95:16:FA:5E:27:AC:EF:70:79:BA:86:A7
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       018C1E0E48181F1D2DCA8B6FE1275C0F3B0E
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/urDxT8BkBkCVFvpeJ6zvcHm6hqc.roa
Signing time:             Thu 30 Nov 2023 02:28:21 +0000
ROA not before:           Thu 30 Nov 2023 02:28:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47757
IP address blocks:        185.202.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1e:0e:48:18:1f:1d:2d:ca:8b:6f:e1:27:5c:0f:3b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Nov 30 02:28:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bab0f14fc06406409516fa5e27acef7079ba86a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:a3:b4:de:4f:40:e6:7d:38:79:e3:e0:3b:
                    38:dd:09:29:08:32:ca:79:e4:7f:da:3a:1e:e4:89:
                    2b:4f:6f:e9:bd:8e:41:a7:6f:39:a9:30:fd:0c:b5:
                    b1:3d:34:d7:22:1a:ae:f4:3a:6a:14:8b:f7:22:0d:
                    af:30:3a:57:61:39:38:85:ad:15:e7:6d:a8:5f:af:
                    88:72:ed:86:96:ca:83:59:74:43:21:3e:90:57:c6:
                    04:ab:3d:0d:53:ab:95:33:bb:a9:35:92:5c:f9:dd:
                    ed:e6:b7:55:ba:fe:c6:ce:f1:29:e3:dc:9f:98:14:
                    2e:95:99:c3:03:ba:b7:c6:41:54:b8:8e:49:e2:db:
                    03:a9:cd:a6:0d:47:be:97:72:f0:d8:21:e2:9c:5e:
                    44:df:10:7a:c5:4d:09:7f:2b:1f:cd:cc:d6:cb:08:
                    71:c1:49:db:2a:d7:20:07:2b:45:f1:bc:d1:cf:14:
                    58:1c:41:43:a0:4c:2a:ec:b4:a2:27:7a:68:db:71:
                    76:42:a9:a5:95:6e:15:74:2e:2d:d2:9c:27:99:09:
                    1c:ce:dd:d3:be:03:4a:52:6e:60:8f:0a:d2:b3:89:
                    91:61:3d:5b:c1:d7:b5:9c:01:0c:1b:2a:c3:d7:d0:
                    f8:7d:0d:cf:39:0a:02:11:41:7a:7c:0b:43:75:a4:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B0:F1:4F:C0:64:06:40:95:16:FA:5E:27:AC:EF:70:79:BA:86:A7
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/urDxT8BkBkCVFvpeJ6zvcHm6hqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:46:76:13:3a:e4:2c:33:79:05:96:06:da:89:89:d3:dc:
         6c:d4:d5:a3:93:a8:f5:e3:e8:b3:6e:53:d3:be:d7:4e:a1:47:
         10:38:fd:5e:be:9a:e4:88:dc:13:12:a9:e0:66:de:c5:06:36:
         dc:de:00:35:26:38:d1:1c:8c:08:f8:03:8a:f6:7f:58:93:ac:
         5b:5c:23:25:27:11:1c:94:0b:b4:ba:88:f7:9e:e7:05:46:5f:
         1e:20:9c:bc:96:8d:ff:2e:c0:1f:4d:41:cf:d1:54:2c:2b:23:
         22:47:90:ea:1e:ba:f9:dc:e6:6d:f3:29:87:0e:b5:84:80:6c:
         37:38:13:0a:c7:b4:f4:29:9f:97:45:ea:49:45:b4:69:0e:85:
         2c:3e:b8:89:1c:16:9b:f7:40:98:91:1f:b5:8b:f7:5b:54:d7:
         8a:57:28:1f:06:f3:64:da:a3:68:98:7a:63:e7:ea:af:52:ee:
         93:8c:2d:3f:ad:d5:64:5e:39:11:d7:e8:82:2c:c2:df:d9:96:
         79:55:d9:f5:c3:c8:f9:fe:5b:cf:0c:39:fb:96:53:01:1c:7a:
         30:95:11:fb:5f:c0:f5:ed:5d:70:e3:b3:c1:ba:53:61:7b:c0:
         48:15:e8:1f:81:1a:f3:23:ed:ff:ff:a4:a4:32:85:7f:be:24:
         21:44:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org