Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/F6WMW2w-DmoShKhAXIzVFU17bYk.roa
File:                     F6WMW2w-DmoShKhAXIzVFU17bYk.roa (raw, json)
Hash identifier:          Iv9T5MiywF6YSRkbcBszWJWwz8s/1Do+BCaAtRzizbo=
Subject key identifier:   17:A5:8C:5B:6C:3E:0E:6A:12:84:A8:40:5C:8C:D5:15:4D:7B:6D:89
Certificate issuer:       /CN=22f2779005c937d53f4ba6e484335b1d35e0965e
Certificate serial:       01856C012510FC9850EA4C7AFB6D1459E717
Authority key identifier: 22:F2:77:90:05:C9:37:D5:3F:4B:A6:E4:84:33:5B:1D:35:E0:96:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvJ3kAXJN9U_S6bkhDNbHTXgll4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/F6WMW2w-DmoShKhAXIzVFU17bYk.roa
Signing time:             Sun 01 Jan 2023 06:24:52 +0000
ROA not before:           Sun 01 Jan 2023 06:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     397423
IP address blocks:        62.122.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:01:25:10:fc:98:50:ea:4c:7a:fb:6d:14:59:e7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2779005c937d53f4ba6e484335b1d35e0965e
        Validity
            Not Before: Jan  1 06:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17a58c5b6c3e0e6a1284a8405c8cd5154d7b6d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:26:80:44:c2:dc:09:36:5e:04:99:df:68:
                    15:5f:76:8e:9e:e3:28:d7:30:5e:97:32:a5:4a:09:
                    98:32:de:d4:36:89:f7:8a:76:4a:e4:7e:f3:1d:b8:
                    1a:39:b4:3b:e7:97:30:6a:d5:a5:da:d9:38:78:9a:
                    a8:21:e2:55:64:db:6e:7c:53:43:9a:8a:b4:98:b5:
                    3d:b9:69:b0:6c:6d:97:9d:cd:21:0b:1e:13:dc:db:
                    e9:b6:39:5d:b4:81:71:31:d5:5f:e1:ed:99:f5:d7:
                    e3:29:ee:19:73:75:32:ac:b6:08:eb:88:be:9a:fb:
                    5e:e7:a8:e9:2a:d3:0d:c4:74:03:a1:de:4d:74:6c:
                    6f:d7:63:cd:b3:9a:a1:d3:8d:0e:c1:f3:67:84:ee:
                    bf:1a:50:f4:39:9e:de:5a:cc:09:b9:1b:6a:a6:f6:
                    4a:65:70:4a:f7:0e:08:cc:31:27:60:39:cb:41:60:
                    c4:a4:7e:92:6e:9a:15:a1:ed:6e:e7:eb:8e:c2:2f:
                    f9:c4:ca:f8:3d:c7:6c:16:ce:4b:ab:89:b6:0f:10:
                    01:e6:b7:f3:0e:32:a3:45:49:40:12:93:32:5f:7d:
                    f9:83:84:8c:cb:45:de:13:8e:cb:e1:3e:d1:4b:c9:
                    04:f9:cb:df:8f:56:a4:db:64:dd:74:6d:73:a6:31:
                    77:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:8C:5B:6C:3E:0E:6A:12:84:A8:40:5C:8C:D5:15:4D:7B:6D:89
            X509v3 Authority Key Identifier:
                keyid:22:F2:77:90:05:C9:37:D5:3F:4B:A6:E4:84:33:5B:1D:35:E0:96:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvJ3kAXJN9U_S6bkhDNbHTXgll4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/F6WMW2w-DmoShKhAXIzVFU17bYk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/IvJ3kAXJN9U_S6bkhDNbHTXgll4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:9e:d4:bd:5f:ba:10:6b:dc:97:13:29:f3:db:d7:f7:1a:
         59:cd:95:1f:06:3f:09:0d:be:6b:c9:50:79:01:4a:a6:27:33:
         a4:33:3e:88:8b:84:d7:d6:d2:b1:63:6a:21:2f:42:ef:6c:7d:
         ab:5b:4a:1f:a1:9b:78:f8:11:0e:49:fa:f5:a1:32:80:78:14:
         d8:3a:ea:cb:1b:94:47:aa:71:b1:7a:78:15:36:c8:32:fd:13:
         b9:b2:df:cb:c0:90:5c:46:5c:7a:5c:f6:81:29:d7:23:0c:a6:
         9b:77:c7:bb:33:f8:7b:cc:3a:08:c4:29:14:33:2c:53:36:b7:
         d0:86:33:a9:3c:94:00:e2:d6:14:b3:66:1a:dd:aa:c6:6d:e2:
         41:2f:52:90:f6:5d:e6:53:45:65:7a:6c:cb:f0:b9:9f:e6:32:
         84:96:33:4f:f9:35:d9:30:34:cd:6c:98:21:73:81:f7:67:5e:
         24:93:b3:94:7d:7c:b5:0d:f0:03:87:55:75:3b:d2:c2:db:ee:
         3c:86:6c:9b:fc:e2:b0:07:b1:9c:5f:f9:c8:4d:26:ab:5a:1a:
         f5:15:9b:56:01:09:fb:1f:d4:52:52:02:8f:1d:5c:3a:7c:2b:
         59:73:b5:d0:66:97:e7:d5:f2:dd:07:ce:91:89:83:34:9d:f3:
         b0:29:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:17 2024 by rpki-client on console-ams.rpki-client.org