Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/4qIaDK2AfH4e5oSMeCUaAcOuPdY.roa
File:                     4qIaDK2AfH4e5oSMeCUaAcOuPdY.roa (raw, json)
Hash identifier:          uIDxmSYTWKNmW9hjHLbU1M0IlJfv3jpJkUBo6RpLbUM=
Subject key identifier:   E2:A2:1A:0C:AD:80:7C:7E:1E:E6:84:8C:78:25:1A:01:C3:AE:3D:D6
Certificate issuer:       /CN=1f673bb3f20723633e6cf01c3fe98b0fa2d70796
Certificate serial:       B7D440
Authority key identifier: 1F:67:3B:B3:F2:07:23:63:3E:6C:F0:1C:3F:E9:8B:0F:A2:D7:07:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/4qIaDK2AfH4e5oSMeCUaAcOuPdY.roa
Signing time:             Sat 01 Jan 2022 06:57:20 +0000
ROA not before:           Sat 01 Jan 2022 06:57:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        62.233.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12047424 (0xb7d440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f673bb3f20723633e6cf01c3fe98b0fa2d70796
        Validity
            Not Before: Jan  1 06:57:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2a21a0cad807c7e1ee6848c78251a01c3ae3dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:b1:24:34:bb:47:8f:45:4c:bc:49:66:75:
                    b1:b1:4a:96:b0:5b:ce:ab:1c:87:ee:0c:bd:12:7d:
                    52:9d:da:ec:7c:37:c4:29:60:e7:b3:34:e7:9d:40:
                    04:d7:e5:e6:62:da:e2:e6:b0:c5:2f:d1:b4:2f:ee:
                    27:62:a8:f0:9d:da:f7:9e:a6:c2:0d:d2:7a:62:b5:
                    05:dc:e6:14:e0:12:2b:a2:f0:4a:cf:ea:14:c9:22:
                    cf:c6:e1:17:08:05:0d:a9:f6:54:c1:8a:bb:9c:4f:
                    e2:53:b7:03:c1:64:b0:cd:93:65:a9:48:11:70:a8:
                    b5:2f:46:4b:bc:3b:1f:0a:d5:7b:02:7d:0c:8e:91:
                    a8:23:02:b3:02:c0:95:1c:34:9f:26:f1:e7:27:68:
                    84:23:27:28:0d:fa:35:07:f4:5d:a7:ab:93:ba:f5:
                    ca:5c:d7:08:2b:36:1c:e3:28:8c:3e:b9:b1:ce:be:
                    62:dd:f5:ed:64:7d:de:a5:cd:27:b4:19:89:e9:40:
                    df:9b:23:fc:7e:cf:af:14:ca:d3:77:53:b4:83:e3:
                    27:5b:33:ce:df:af:22:ff:72:5d:8d:f8:56:7c:99:
                    b6:c0:bc:c3:e5:76:6f:ff:8d:d4:cd:2a:bf:01:a6:
                    c3:88:bb:ac:a7:17:36:6e:a6:7c:89:49:4a:1a:f2:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A2:1A:0C:AD:80:7C:7E:1E:E6:84:8C:78:25:1A:01:C3:AE:3D:D6
            X509v3 Authority Key Identifier:
                keyid:1F:67:3B:B3:F2:07:23:63:3E:6C:F0:1C:3F:E9:8B:0F:A2:D7:07:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/4qIaDK2AfH4e5oSMeCUaAcOuPdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ca:53:7d:46:ff:e5:01:2d:c2:29:4d:96:29:52:0c:13:7c:
         3e:ea:8c:9c:a1:cc:ec:6e:b9:e1:9c:d4:ba:12:2d:9e:cf:2a:
         2a:46:70:9e:a0:70:f1:bd:83:b2:a0:a6:b2:f4:6a:79:97:c6:
         eb:4a:0d:49:68:05:66:11:29:6e:87:0a:02:aa:ab:a1:ac:15:
         77:fa:87:21:ff:38:e2:03:4f:4e:ab:19:de:87:d9:f5:fa:eb:
         f3:7d:fe:87:08:59:66:82:9d:31:25:67:83:68:94:e4:45:f3:
         89:95:f1:bc:45:ae:31:0d:e0:e0:dc:6e:56:0c:8a:8d:1d:6a:
         fa:f2:54:cb:2f:24:77:83:88:85:ff:15:18:40:44:d6:ea:7f:
         1d:17:07:3f:7c:6e:8a:3c:f0:17:85:e9:38:1c:00:de:51:9c:
         80:34:13:bf:51:0b:c3:b0:45:af:bf:86:bb:51:ea:d4:1f:a6:
         cc:51:90:66:7b:c4:86:79:c3:b4:ba:f9:db:75:4c:6f:b5:f0:
         e6:f1:50:3a:b6:ea:17:07:65:0d:e9:95:b3:09:1c:a6:b6:7b:
         0b:a0:9b:e0:88:9e:74:f6:2c:a7:29:f0:34:5c:1d:13:8d:cf:
         39:a0:9b:b7:75:51:01:cf:cf:05:b2:14:66:70:e2:b6:8b:56:
         03:f8:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:37 2024 by rpki-client on console-ams.rpki-client.org