Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/ddujizszDSZSntmvGBfPKpI1I0c.roa
File:                     ddujizszDSZSntmvGBfPKpI1I0c.roa (raw, json)
Hash identifier:          DVYYRlVWs/pXIUZM2qbgY0TOd9CJHC6JsOlJGit/Bqo=
Subject key identifier:   75:DB:A3:8B:3B:33:0D:26:52:9E:D9:AF:18:17:CF:2A:92:35:23:47
Certificate issuer:       /CN=083996c6f2e7a38871f8c001f4f8ba4a705e8799
Certificate serial:       1023FEC5
Authority key identifier: 08:39:96:C6:F2:E7:A3:88:71:F8:C0:01:F4:F8:BA:4A:70:5E:87:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmWxvLno4hx-MAB9Pi6SnBeh5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/ddujizszDSZSntmvGBfPKpI1I0c.roa
Signing time:             Thu 03 Feb 2022 08:01:41 +0000
ROA not before:           Thu 03 Feb 2022 08:01:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12713
IP address blocks:        62.75.58.0/24 maxlen: 24
                          62.75.54.0/24 maxlen: 24
                          62.75.64.0/24 maxlen: 24
                          62.75.62.0/24 maxlen: 24
                          62.75.69.0/24 maxlen: 24
                          62.75.3.0/24 maxlen: 24
                          62.75.1.0/24 maxlen: 24
                          62.75.2.0/24 maxlen: 24
                          62.75.10.0/24 maxlen: 24
                          62.75.8.0/24 maxlen: 24
                          62.75.15.0/24 maxlen: 24
                          62.75.16.0/23 maxlen: 23
                          62.75.13.0/24 maxlen: 24
                          62.75.18.0/23 maxlen: 23
                          62.75.24.0/23 maxlen: 23
                          62.75.22.0/24 maxlen: 24
                          62.75.23.0/24 maxlen: 24
                          62.75.20.0/24 maxlen: 24
                          62.75.21.0/24 maxlen: 24
                          62.75.107.0/24 maxlen: 24
                          62.75.108.0/24 maxlen: 24
                          2a00:1cb8:1::/48 maxlen: 48
                          2a00:1cb8:2:3::/64 maxlen: 64
                          2a00:1cb8:2:8::/64 maxlen: 64
                          2a00:1cb8:2:d::/64 maxlen: 64
                          2a00:1cb8:2:a::/64 maxlen: 64
                          2a00:1cb8:2::/48 maxlen: 48
                          2a00:1cb8:2:7::/64 maxlen: 64
                          2a00:1cb8:2:2::/64 maxlen: 64
                          2a00:1cb8:2:c::/64 maxlen: 64
                          2a00:1cb8:2000::/35 maxlen: 35
                          2a00:1cb8:2:6::/64 maxlen: 64
                          2a00:1cb8:2:b::/64 maxlen: 64
                          2a00:1cb8:2:1::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270794437 (0x1023fec5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=083996c6f2e7a38871f8c001f4f8ba4a705e8799
        Validity
            Not Before: Feb  3 08:01:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75dba38b3b330d26529ed9af1817cf2a92352347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:fd:37:64:28:40:49:20:31:d2:a6:35:d6:
                    cc:53:b7:4f:b4:b9:88:fd:c5:bd:ba:fe:58:4f:14:
                    75:2a:de:e8:70:a7:6d:b9:5c:9a:1d:5d:91:d5:d9:
                    e0:08:6d:89:6f:48:5f:28:ff:2d:fe:37:46:6b:c7:
                    95:ce:f6:8c:c8:67:c0:ae:12:8a:e9:f2:c0:86:21:
                    3e:3d:58:93:c7:c2:c0:ac:a7:b9:fb:bc:b4:82:08:
                    04:c8:fe:ee:8a:5b:5a:38:49:cd:56:4e:70:50:e5:
                    2e:ba:64:84:5c:90:81:48:6a:a0:8b:ac:f9:14:29:
                    5c:c8:a3:3d:16:4f:83:17:45:4a:9b:b3:5b:58:81:
                    bb:71:a2:08:f1:88:48:3a:16:03:0f:d2:70:46:8c:
                    e2:eb:f4:5a:0b:3e:dd:d2:1e:df:7f:32:1c:25:24:
                    0e:1b:47:b6:b5:73:44:30:d7:8a:ee:0d:39:5c:25:
                    78:3d:bf:c8:84:cc:e7:33:a7:85:b9:75:67:c2:89:
                    d1:4b:09:ea:72:ac:38:3f:f1:37:f1:dd:84:70:e1:
                    e0:0a:d4:d9:15:85:16:62:ca:c6:ba:34:32:e9:40:
                    4a:64:a9:b7:c0:ba:d9:69:2a:e3:a2:38:57:5c:0c:
                    1b:b0:20:9a:ba:18:17:9e:3e:89:75:bf:f1:ba:64:
                    19:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DB:A3:8B:3B:33:0D:26:52:9E:D9:AF:18:17:CF:2A:92:35:23:47
            X509v3 Authority Key Identifier:
                keyid:08:39:96:C6:F2:E7:A3:88:71:F8:C0:01:F4:F8:BA:4A:70:5E:87:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmWxvLno4hx-MAB9Pi6SnBeh5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/ddujizszDSZSntmvGBfPKpI1I0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b3b4bb-20f5-48ad-a61b-fe8e5e0bfa0f/1/CDmWxvLno4hx-MAB9Pi6SnBeh5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.75.1.0-62.75.3.255
                  62.75.8.0/24
                  62.75.10.0/24
                  62.75.13.0/24
                  62.75.15.0-62.75.25.255
                  62.75.54.0/24
                  62.75.58.0/24
                  62.75.62.0/24
                  62.75.64.0/24
                  62.75.69.0/24
                  62.75.107.0-62.75.108.255
                IPv6:
                  2a00:1cb8:1::-2a00:1cb8:2:ffff:ffff:ffff:ffff:ffff
                  2a00:1cb8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a3:bd:19:5d:66:6e:53:93:d6:d5:9d:16:b5:66:66:4e:ee:81:
         ec:3d:2a:75:1d:32:e5:03:4f:6a:d2:03:54:73:34:f4:a9:f3:
         ce:93:a3:11:c5:20:3c:e2:34:03:73:7f:09:f6:a1:95:a0:c8:
         80:ec:cc:d9:70:df:dc:dc:e2:fd:8a:dc:f4:4f:ff:09:b7:2f:
         99:b5:1d:7d:d0:e9:6d:f1:0f:cf:56:05:2e:38:58:cd:c8:c7:
         ae:30:01:ec:ec:26:f3:f2:ae:ea:52:44:a4:97:98:d0:d7:a8:
         67:c8:c4:92:5f:2d:a5:de:ee:ad:0f:74:7d:0f:88:58:37:a8:
         7e:65:09:08:fd:61:98:8d:39:a2:dd:91:40:2e:eb:ce:42:26:
         14:8f:f1:ab:10:d8:7d:d3:31:37:ad:d9:6f:d0:7a:e8:bb:a5:
         0d:33:68:59:a9:40:f0:3e:73:76:43:8b:f3:c7:48:66:df:7c:
         d1:d0:b7:d5:28:72:1c:4b:62:03:d2:38:0c:79:5e:ed:5c:a1:
         85:88:72:2c:50:8d:1c:af:21:36:e9:69:4f:27:ca:ef:21:e2:
         e8:8e:cf:75:dd:39:75:18:5c:63:ed:58:35:b6:d2:38:94:ec:
         2a:bb:a5:39:8f:82:81:1c:15:3e:1c:1c:84:90:66:e8:4d:c2:
         1c:a5:89:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:27 2024 by rpki-client on console-fra.rpki-client.org