Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/GeQCpVvwFMGW_V8oT3HsPG4RNWg.roa
File:                     GeQCpVvwFMGW_V8oT3HsPG4RNWg.roa (raw, json)
Hash identifier:          oT7Tnm6etr7sJ82Y7Q8Cqc3oNmsz5ROA2eyCnfAvIcE=
Subject key identifier:   19:E4:02:A5:5B:F0:14:C1:96:FD:5F:28:4F:71:EC:3C:6E:11:35:68
Certificate issuer:       /CN=1f673bb3f20723633e6cf01c3fe98b0fa2d70796
Certificate serial:       B840D0
Authority key identifier: 1F:67:3B:B3:F2:07:23:63:3E:6C:F0:1C:3F:E9:8B:0F:A2:D7:07:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/GeQCpVvwFMGW_V8oT3HsPG4RNWg.roa
Signing time:             Sat 01 Jan 2022 06:57:21 +0000
ROA not before:           Sat 01 Jan 2022 06:57:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        62.233.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12075216 (0xb840d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f673bb3f20723633e6cf01c3fe98b0fa2d70796
        Validity
            Not Before: Jan  1 06:57:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19e402a55bf014c196fd5f284f71ec3c6e113568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:a5:2e:11:97:83:7e:b7:73:9f:f1:c7:d6:
                    08:8f:2f:1e:f6:d4:5d:a0:b8:d1:42:c8:74:a7:c3:
                    d3:66:71:27:8a:71:8b:a6:3d:87:1a:93:30:f0:37:
                    20:cd:da:a3:27:47:39:4c:0b:8a:be:6f:9a:1a:50:
                    8d:e9:d0:91:25:51:b0:f3:be:be:71:ed:b6:96:40:
                    45:d3:b1:c0:5f:60:7f:35:52:25:e3:89:5b:93:81:
                    83:f9:d3:12:af:88:1d:a0:29:a0:48:41:13:50:01:
                    c3:c5:67:15:f2:10:1b:8e:70:17:97:44:04:23:4c:
                    c9:31:60:3a:d7:0a:24:28:50:a2:e9:fe:3d:aa:a0:
                    3a:fc:45:13:1c:f0:b5:3c:93:7e:99:61:99:af:85:
                    5d:bc:af:48:23:c6:0a:b3:52:d2:cc:73:b9:17:84:
                    60:a6:db:00:09:38:67:05:dd:28:a6:35:1b:f8:8a:
                    72:10:2c:db:9c:e6:4b:e9:33:11:88:d1:2f:0e:fd:
                    00:48:34:15:f0:71:74:c5:da:9a:c4:86:f7:89:f8:
                    94:97:5c:15:f2:dd:b6:f7:24:c6:3e:69:8e:6c:9e:
                    12:7c:20:77:b4:c1:90:c5:26:3e:e2:f2:1d:b5:28:
                    0b:03:16:37:9f:81:b3:57:84:af:28:da:b7:3d:43:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E4:02:A5:5B:F0:14:C1:96:FD:5F:28:4F:71:EC:3C:6E:11:35:68
            X509v3 Authority Key Identifier:
                keyid:1F:67:3B:B3:F2:07:23:63:3E:6C:F0:1C:3F:E9:8B:0F:A2:D7:07:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/GeQCpVvwFMGW_V8oT3HsPG4RNWg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/3b9739-743e-4d06-b9f8-8c08ae01958f/1/H2c7s_IHI2M-bPAcP-mLD6LXB5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:db:83:1b:4f:45:81:9b:bd:77:72:e5:64:f6:16:25:4f:fc:
         02:60:92:e8:6c:df:90:a0:b0:8e:aa:05:34:a2:7e:86:be:57:
         e3:dc:8c:42:41:26:c4:f4:ee:9d:5c:5a:a2:7c:ad:12:26:34:
         8e:60:2a:68:81:69:6c:9b:72:e8:b7:3a:55:cc:88:91:f3:fc:
         35:fa:27:e7:73:77:94:e1:4b:b5:26:1f:cd:31:e9:24:ce:25:
         ef:a4:98:1e:0a:e7:18:2d:83:16:48:6f:b0:af:03:ae:f7:cc:
         bc:d7:f4:b7:f7:85:54:14:e9:18:58:1c:9a:ce:58:a8:a3:b2:
         0e:78:68:88:64:22:3f:3a:20:c4:bc:5c:fa:97:6d:ef:3a:c9:
         30:83:b0:4e:95:0a:c1:18:7f:d2:9b:f6:d4:9b:01:05:5a:59:
         88:e2:af:c0:94:5a:ef:0d:20:49:0a:f2:0d:96:6e:38:b0:15:
         4e:f4:c2:87:65:40:11:20:e4:ed:e0:3c:e4:d2:f7:a7:4d:2d:
         64:f2:90:c1:88:8f:bd:61:18:0b:40:dd:1b:65:fe:ca:47:13:
         11:fd:1c:88:86:44:6c:b7:8f:1a:b6:8a:1c:2a:2c:c5:9f:46:
         22:29:b3:0a:f9:95:2e:a8:85:d1:ce:3e:8d:d7:96:24:26:08:
         a9:db:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:57 2024 by rpki-client on console-fra.rpki-client.org