Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/9R5G9KhWa7U_Vuft1mhLSiEyYcY.roa
File:                     9R5G9KhWa7U_Vuft1mhLSiEyYcY.roa (raw, json)
Hash identifier:          g3PJQ25Z+fwYQ+RfAWI3SRuX93yv0Ht9eTRd7IbL2tY=
Subject key identifier:   F5:1E:46:F4:A8:56:6B:B5:3F:56:E7:ED:D6:68:4B:4A:21:32:61:C6
Certificate issuer:       /CN=c546dc2639c6766d33e769293cf9a1d790efb97a
Certificate serial:       60CBDB
Authority key identifier: C5:46:DC:26:39:C6:76:6D:33:E7:69:29:3C:F9:A1:D7:90:EF:B9:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUbcJjnGdm0z52kpPPmh15DvuXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/9R5G9KhWa7U_Vuft1mhLSiEyYcY.roa
Signing time:             Sat 01 Jan 2022 02:59:15 +0000
ROA not before:           Sat 01 Jan 2022 02:59:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        62.3.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6343643 (0x60cbdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c546dc2639c6766d33e769293cf9a1d790efb97a
        Validity
            Not Before: Jan  1 02:59:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f51e46f4a8566bb53f56e7edd6684b4a213261c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:28:74:c7:73:52:7c:b0:13:02:c7:9c:c7:
                    20:48:f2:9e:21:ad:3d:6f:9a:99:a6:74:25:ca:63:
                    cb:3c:d1:b6:c3:26:91:a2:2e:b8:c4:9b:c8:6a:a0:
                    b6:3d:44:88:5c:76:76:f4:97:ab:6b:31:3d:fd:f2:
                    25:7b:eb:f1:4d:bf:19:aa:7a:eb:d8:ac:31:b5:39:
                    74:11:97:9d:8d:8f:d3:ba:71:15:8d:9c:ca:e5:c3:
                    78:0b:83:1b:b8:e6:df:2e:c8:2f:e3:58:c1:a8:b5:
                    77:d0:e1:2c:1d:d0:a2:b8:72:5c:de:00:ca:45:da:
                    fe:3f:82:f9:a1:27:98:50:67:25:3d:74:5b:cc:fa:
                    ff:16:18:d4:15:9b:36:68:e0:a9:51:07:46:05:02:
                    8c:b6:b7:6b:db:5e:b9:ca:71:00:5c:40:16:83:ac:
                    86:41:b3:51:d5:b5:20:72:d4:42:8e:f5:64:7b:32:
                    9b:ae:e2:dd:79:5c:b0:cd:6a:c0:19:68:a4:77:2e:
                    89:53:7d:3b:c2:d5:81:1a:ae:2c:1a:62:b4:80:af:
                    d9:ac:93:c6:ec:22:10:33:4f:29:00:d0:d9:8b:99:
                    cf:90:f3:14:c0:dd:f4:13:f1:d9:b3:bc:16:e7:7a:
                    72:f4:64:74:98:0d:a7:bf:d9:f2:db:58:38:2b:df:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1E:46:F4:A8:56:6B:B5:3F:56:E7:ED:D6:68:4B:4A:21:32:61:C6
            X509v3 Authority Key Identifier:
                keyid:C5:46:DC:26:39:C6:76:6D:33:E7:69:29:3C:F9:A1:D7:90:EF:B9:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbcJjnGdm0z52kpPPmh15DvuXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/9R5G9KhWa7U_Vuft1mhLSiEyYcY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/xUbcJjnGdm0z52kpPPmh15DvuXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:bb:b1:7a:82:bb:85:62:c2:15:1f:ef:ec:6e:84:82:28:
         8d:68:94:c6:e2:25:ef:84:65:be:7e:73:43:19:5f:93:62:eb:
         46:be:e3:5c:49:5d:e2:4d:6c:1d:82:72:53:bc:c6:1a:30:03:
         de:f4:52:00:af:af:6d:9b:22:21:f4:e5:e0:cb:03:7d:50:f4:
         bf:2d:1b:9a:83:26:55:56:3e:ec:86:ea:de:fb:86:8d:f6:fa:
         41:10:23:03:f7:e2:cb:4b:4e:ba:c8:14:fe:99:87:11:d8:3a:
         02:26:1f:a5:3f:6f:8c:be:ce:ef:40:e0:29:39:be:c8:74:ed:
         93:7e:78:3a:f5:48:a2:5b:e3:90:96:b7:99:38:b8:5d:37:a2:
         c4:e0:28:e6:7d:7d:e4:60:91:c8:77:48:68:81:ab:99:7d:d8:
         89:ee:43:49:95:41:d1:51:ac:0b:a1:21:1f:48:c5:29:72:a6:
         38:de:99:5b:a1:44:24:74:cc:d5:19:be:0e:6e:4f:71:f7:51:
         3a:d4:d4:ef:44:e2:01:f4:0c:9b:99:7c:5a:6e:7e:02:fd:3c:
         e4:dd:87:10:ea:ea:27:ca:e6:61:81:bd:5a:d3:03:3b:86:79:
         e9:14:1f:ab:bb:d1:e6:2a:82:7f:9e:78:53:64:33:e3:a4:b7:
         7f:de:9d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:31 2024 by rpki-client on console-ams.rpki-client.org