Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/faad5a-66cc-4ded-94c3-b2236b61b95a/1/IMz2U-rKPjZow-jSuOrW3371QcE.roa
File:                     IMz2U-rKPjZow-jSuOrW3371QcE.roa (raw, json)
Hash identifier:          kd7SuF662RGLmJIg1r+LHOlBklAJrh2j+syIGUEOers=
Subject key identifier:   20:CC:F6:53:EA:CA:3E:36:68:C3:E8:D2:B8:EA:D6:DF:7E:F5:41:C1
Certificate issuer:       /CN=7ae285caaceb60ad952fcd745b014dae33056847
Certificate serial:       0AB1DE
Authority key identifier: 7A:E2:85:CA:AC:EB:60:AD:95:2F:CD:74:5B:01:4D:AE:33:05:68:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euKFyqzrYK2VL810WwFNrjMFaEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/faad5a-66cc-4ded-94c3-b2236b61b95a/1/IMz2U-rKPjZow-jSuOrW3371QcE.roa
Signing time:             Tue 17 May 2022 06:34:29 +0000
ROA not before:           Tue 17 May 2022 06:34:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29684
IP address blocks:        62.204.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700894 (0xab1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae285caaceb60ad952fcd745b014dae33056847
        Validity
            Not Before: May 17 06:34:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20ccf653eaca3e3668c3e8d2b8ead6df7ef541c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:e5:f0:42:61:ba:94:38:0b:ea:4f:3c:08:
                    ab:c1:bd:16:1f:2e:84:51:50:b1:03:98:01:a0:4a:
                    53:27:d6:2e:a1:e5:4a:39:78:cf:8f:ab:9f:17:40:
                    02:c6:14:27:8f:8c:ed:36:3d:40:b9:b0:f7:a8:d5:
                    b5:c4:69:a6:b4:7a:2a:71:58:aa:31:5c:c2:62:04:
                    5d:56:eb:48:8f:86:ab:ea:42:ab:1d:14:e3:59:e5:
                    66:a4:97:ee:fb:d4:fe:19:43:ab:4f:2b:a4:6d:68:
                    82:11:16:01:3c:44:ca:91:4a:0b:50:65:20:8b:2d:
                    ab:02:48:66:54:5e:5c:00:f3:e9:11:08:e5:68:e5:
                    eb:81:7e:fc:73:7d:31:d2:8a:05:91:15:e8:d3:74:
                    dc:37:4b:2e:15:72:69:ee:ce:00:8d:bc:ea:1e:8a:
                    08:76:49:ca:c6:b8:f0:9c:44:61:54:b7:d7:1d:1e:
                    93:75:b9:05:39:c6:37:7b:44:04:ac:6b:63:9f:46:
                    3f:e6:ff:a8:72:b3:20:cd:8f:c6:94:5a:d8:8c:db:
                    b9:72:2e:61:68:fb:dc:c0:08:8e:f6:cd:f2:f2:82:
                    6a:b1:dc:7f:5b:dd:0e:75:c9:e0:0c:06:31:08:ed:
                    cc:eb:4d:0d:72:11:f6:9d:29:30:ab:6a:37:d1:66:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CC:F6:53:EA:CA:3E:36:68:C3:E8:D2:B8:EA:D6:DF:7E:F5:41:C1
            X509v3 Authority Key Identifier:
                keyid:7A:E2:85:CA:AC:EB:60:AD:95:2F:CD:74:5B:01:4D:AE:33:05:68:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euKFyqzrYK2VL810WwFNrjMFaEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/faad5a-66cc-4ded-94c3-b2236b61b95a/1/IMz2U-rKPjZow-jSuOrW3371QcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/faad5a-66cc-4ded-94c3-b2236b61b95a/1/euKFyqzrYK2VL810WwFNrjMFaEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:46:bb:9e:3c:41:f2:bf:f6:12:a4:45:b4:d1:bf:94:2d:a8:
         37:6f:ed:e6:82:0e:61:4a:36:78:8b:b0:62:7b:71:a7:22:81:
         0e:6d:51:1c:dc:f3:cb:04:2e:9f:12:45:47:b2:02:96:4b:e2:
         f6:96:e4:24:62:96:6c:9f:95:72:6a:73:66:ce:54:0d:3e:5e:
         be:03:e6:be:b2:6f:b6:aa:4f:41:4d:31:81:80:82:d0:95:4e:
         54:66:84:01:f3:77:26:c0:86:31:3b:4f:d0:43:21:a8:c9:97:
         b6:09:4d:56:b1:df:04:40:68:d1:e6:96:f3:a3:ce:91:0a:7b:
         cf:e3:e7:4e:64:72:04:7a:2a:85:32:66:b7:4d:00:3d:dd:e4:
         b0:35:98:ac:eb:23:3f:51:52:a1:be:17:d1:41:c3:0d:06:94:
         ee:5e:42:c9:67:5e:c9:f6:f5:9c:b2:aa:fc:1f:e7:40:a1:3e:
         f6:60:42:3b:de:a3:c6:a4:bf:d9:2a:e7:c3:0b:5f:d7:49:21:
         d4:a7:0a:76:23:6c:96:90:9f:92:7c:40:15:e0:61:24:f4:9e:
         50:b6:c4:8f:1d:db:83:87:8d:43:f1:81:23:0c:80:92:c7:6e:
         25:d4:b3:ff:88:3e:67:ac:c8:03:1a:8d:9d:89:00:fd:76:15:
         46:88:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:32 2024 by rpki-client on console-ams.rpki-client.org